[SECURITY] Fedora 24 Update: wordpress-4.7.1-1.fc24

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...

Meteocontrol WEBlog Password Extractor

This module exploits an authentication bypass vulnerability in Meteocontrol WEBLog appliances software version 'Meteocontrol WEBlog Password Extractor', 'Description' = % This module exploits an authentication bypass vulnerability in Meteocontrol WEBLog appliances software version 'URL',...

Maian Weblog Cross-Site Request Forgery Vulnerability

Maian Weblog is a free and open source PHP blogging system developed by British software developer David Ian Bennett. The system includes modules for commenting, searching, uploading images and videos. A cross-site scripting vulnerability exists in the index.php script of Maian Weblog 4.0 and...

Maian Weblog 4.0 - Cross-Site Request Forgery (Add New Post)

Exploit Title : Maian Weblog 4.0 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : - Date : 10/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.maianweblog.com Software link : http://www.hotscripts.com/listings/jump/download/21864 CSRF PoC " /...

Maian Weblog 4.0 - Cross-Site Request Forgery (Add New Post)

Maian Weblog 4.0 - Cross-Site Request Forgery Add New Post Exploit Title : Maian Weblog 4.0 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : - Date : 10/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.maianweblog.com Software link :...

Maian Weblog 4.0 - Cross-Site Request Forgery ( Add New Post)

Exploit for php platform in category web applications Exploit Title : Maian Weblog 4.0 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : - Date : 10/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.maianweblog.com Software link :...

[SECURITY] Fedora 25 Update: elog-3.1.1-7.fc25

ELOG is part of a family of applications known as weblogs. Their general purpose is: 1. To make it easy for people to put information online in a chronological fashion, in the form of short, time-stamped text messages "entries" with optional HTML markup for presentation, and optional file...

[SECURITY] Fedora 23 Update: wordpress-4.5.3-1.fc23

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...

Iranian Weblog Services v3.3 CMS - Multiple Vulnerabilities

Document Title: =============== Iranian Weblog Services v3.3 CMS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1862 CWE-89 CWE-79 CWE-264 http://cwe.mitre.org/data/definitions/89 http://cwe.mitre.org/data/definitions/79...

Iranian Weblog Services 3.3 Cross Site Scripting / Shell Upload / SQL Injection

Document Title: =============== Iranian Weblog Services v3.3 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1862 CWE-89 CWE-79 CWE-264 http://cwe.mitre.org/data/definitions/89 http://cwe.mitre.org/data/definitions/79...

Iranian Weblog Services v3.3 CMS - Multiple Vulnerabilities

Document Title: =============== Iranian Weblog Services v3.3 CMS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1862 CWE-89 CWE-79 CWE-264 http://cwe.mitre.org/data/definitions/89 http://cwe.mitre.org/data/definitions/79...

Meteocontrol WEBlog 多个越权漏洞

No description provided by source...

[SECURITY] Fedora 23 Update: wordpress-4.5.2-1.fc23

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...

Multiple Meteocontrol WEB'log Products Cross-Site Request Forgery Vulnerabilities

Meteocontrol WEB'log is a web-based SCADA system from Meteocontrol Germany that provides energy and power configuration management functions using different connected energy/industrial devices. A cross-site request forgery vulnerability exists in several Meteocontrol WEB'log products. A remote...

Meteocontrol WEBLog Password Extractor

Exploit Title: Meteocontrol WEB'log - Extract Admin password Discovered by: Karn Ganeshen Vendor Homepage: http://www.meteocontrol.com/en/ Versions Reported: All Meteocontrol WEB'log versions CVE-ID: CVE-2016-2296 Meteocontrol WEB'log - Metasploit Auxiliary Module...

Meteocontrol WEB'log Information Disclosure Vulnerability (CNVD-2016-03190)

Meteocontrol WEB'log is a web-based SCADA system that provides energy and power configuration management functions using different connected devices. Several Meteocontrol WEB'log products store information in clear text, allowing remote attackers to exploit vulnerabilities to obtain sensitive...

Meteocontrol WEB'log Arbitrary Command Execution Vulnerability

Meteocontrol WEB'log is a web-based SCADA system that provides energy and power configuration management functions using different connected devices. A security vulnerability exists in the access command shell-like functionality of several Meteocontrol WEB'log products, which could be exploited b...

RozBlog Weblog Service Cross Site Request Forgery / Cross Site Scripting

Document Title: =============== RozBlog Weblog Service - Authentication Bypass / Cross Site Request Forgery / Cross Site Scripting References Source: ==================== http://ehsansec.ir/advisories/rozblog-xsrf-xss-bypass.txt Release Date: ============= 2016-02-23 Product & Service Introductio...

SamenBlog Weblog Service Cross Site Request Forgery / Cross Site Scripting

Document Title: =============== SamenBlog Weblog Service - Cross Site Request Forgery / Cross Site Scripting References Source: ==================== http://ehsansec.ir/advisories/samenblog-xsrf-xss.txt Release Date: ============= 2016-02-20 Product & Service Introduction:...

[SECURITY] Fedora 22 Update: wordpress-4.4.2-1.fc22

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...