PT-2019-10255

Name of the Vulnerable Software and Affected Versions: Call of Duty: Modern Warfare 2 versions prior to 2015-08-11 Call of Duty: Modern Warfare 3 versions prior to 2015-08-11 Call of Duty: Ghosts versions prior to 2015-08-11 Call of Duty: Advanced Warfare versions prior to 2015-08-11 Call of Duty...

WordPress Social-Warfare Plugin Cross-Site Scripting (CVE-2019-9978)

A Cross-Site Scripting vulnerability exists in WordPress social-warfare plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

WordPress Social Warfare 3.5.2 RCE

Remote Code Execution in WordPress Social Warfare plugin Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

WordPress Social Warfare Plugin < 3.5.3 XSS Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

WordPress Social Warfare Remote Code Execution Vulnerability

WordPress is a free and open source blogging software and content management system on PHP and MySQL.Social Warfare is a social sharing plugin for WordPress. A remote code execution vulnerability exists in WordPress Social Warfare, which can be exploited by an attacker to remotely execute code...

Exploit for Cross-site Scripting in Warfareplugins Social_Warfare

CVE-2019-9978 - Social Warfare Wordpress plugin RCE RCE on a...

Social Warfare <= 3.5.2 - Unauthenticated Remote Code Execution (RCE)

Unauthenticated remote code execution has been discovered in functionality that handles settings import. 1. Create payload file and host it on a location accessible by a targeted website. Payload content : "system'cat /etc/passwd'" 2. Visit...

Social Warfare <= 3.5.2 - Unauthenticated Remote Code Execution (RCE)

Unauthenticated remote code execution has been discovered in functionality that handles settings import. PoC 1. Create payload file and host it on a location accessible by a targeted website. Payload content : " system'cat /etc/passwd' " 2. Visit...

WordPress social-warfare plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. social-warfare plugin is a social platform sharing plugin used in it. A cross-site scripting vulnerability exists in WordPress...

CVE-2019-9978

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swpdebug=loadoptions swpurl parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro...

Design/Logic Flaw

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swpdebug=loadoptions swpurl parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro...

CVE-2019-9978

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swpdebug=loadoptions swpurl parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro...

CVE-2019-9978

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swpdebug=loadoptions swpurl parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro...

CVE-2019-9978

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swpdebug=loadoptions swpurl parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro...

CVE-2019-9978

CVE-2019-9978 affects WordPress Social Warfare plugin (and Social Warfare Pro). Public records show Remote Code Execution via the settings import flow, exploiting wp-admin/admin-post.php?swp_debug=load_options&swp_url=… to perform RFI-to-RCE. Exploits target versions up to 3.5.2, with references ...

VulnCheck KEV: CVE-2019-9978

WordPress Social Warfare plugin contains a cross-site scripting XSS vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro...

CVE-2019-9978

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swpdebug=loadoptions swpurl parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...

WordPress Social Warfare plugin <= 3.5.2 - Unauthenticated Arbitrary Settings Update vulnerability

Unauthenticated Arbitrary Settings Update vulnerability found in WordPress Social Warfare plugin versions = 3.5.2. Solution Update the WordPress Social Warfare plugin to the latest available version at least 3.5.3...

Wordpress Plugin Patched After Zero Day Discovered

UPDATE A popular WordPress plugin is urging users to update as soon as possible after it patched a vulnerability that was being exploited in the wild. If users cannot update, developers recommended they disable the plugin. The plugin, Social Warfare, lets users add social media sharing buttons to...

Social Warfare <= 3.5.2 - Unauthenticated Arbitrary Settings Update

Malicious eval is being inserted into the wpoptions table, in the optionname: socialwafaresettings, in the Twitter field. When the plugin is active, it causes the site to issue a JavaScript redirect to porn sites. Deactivating the plugin disables the redirect, but the malicious eval is still in t...