Sensitive Information Leakage Vulnerability in Beijing Melting Point's Video Communication System

Melting Point Netcom Beijing Technology Co., Ltd. is a high-tech company engaged in unified video operation services. The video system is one of the company's systems. A sensitive information disclosure vulnerability exists in the Beijing Melting Point Webcam video system. The vulnerability allow...

Custom Website Data 1.2 - Record Deletion CSRF

The Custom Website Data WordPress plugin was affected by a Record Deletion CSRF security vulnerability...

WordPress Custom Website Data插件跨站请求伪造漏洞

WordPress是一款内容管理系统。 由于程序允许用户通过味精验证的HTTP请求执行某些操作，攻击者可以利用漏洞在已登录的用户访问特制网页时删除任意记录。 0 WordPress Custom Website Data Plugin 1.x 厂商补丁： WordPress ----- WordPress Custom Website Data插件1.3版本以修复此漏洞，建议用户下载使用： http://wordpress.org/plugins/simple-custom-website-data/changelog...

JVN#48425028: Flash Player access restriction bypass vulnerability

When Flash Player references a different website than the site where Flash contents are hosted, the referenced site must be allowed access by the cross-domain policy file. Flash Player contains a vulnerability where access restrictions set by the cross-domain policy file may be bypassed. Impact...

Links_ ELinks smbclient - Remote Command Execution

Links ELinks smbclient - Remote Command Execution source: https://www.securityfocus.com/bid/21082/info Links and ELinks are prone to a remote command-execution vulnerability because the applications fail to properly process website data containing 'smb' commands. An attacker can exploit this issu...