CVE-2019-13551

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage these vulnerabilities to remotely execute code while posing as an administrator...

CVE-2019-13551

Advantech WISE-PaaS/RMM, versions 3.3.29 and earlier, contain a path traversal vulnerability caused by insufficient validation of a user-supplied path before file operations. This can enable remote code execution and administrator-level compromise. The issue has been documented in multiple adviso...

Advantech WISE-PaaS/RMM

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: WISE-PaaS/RMM Vulnerabilities: Path Traversal, Missing Authorization, Improper Restriction of XML External Entity Reference, SQL Injection 2. RISK EVALUATION Successful...

Advantech WISE-PaaS/RMM Multiple Security Vulnerabilities

...

Advantech WISE-PaaS Dashboard Detection (Windows SMB Login)

Detects the installed version of Advantech WISE-PaaS Dashboard for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Wise Chat Plugin < 2.7 Mashandling of External Links Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

WordPress Wise Chat Plugin Has Unspecified Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.Wise Chat plugin is used in one of the live chat plugin. An unspecified vulnerability exists in the WordPress Wis...

Wise Chat <= 2.6.3 - Reverse Tabnabbing

The Wise Chat WordPress plugin was affected by a Reverse Tabnabbing security vulnerability...

WordPress Wise Chat plugin <= 2.6.3 - Reverse Tabnabbing vulnerability

Reverse Tabnabbing vulnerability found by MTK in WordPress Wise Chat plugin versions = 2.6.3. Solution Update the WordPress Wise Chat plugin to the latest available version at least 2.7...

WordPress Wisechat 2.6.3 Forced Redirect / Phishing

Exploit Title: Wordpress Plugin Wisechat if window.opener window.opener.parent.location.replace'http://mtk911.cf/'; if window.parent != window window.parent.location.replace'http://mtk911.cf/'; Open Redirect TEST when you click on that user. This opens in a new tab, and the parent tab is silently...

CVE-2019-6780

The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...

CVE-2019-6780

The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...

Code injection

The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...

CVE-2019-6780

The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...

CVE-2019-6780

The CVE-2019-6780 entry concerns the WordPress Wise Chat plugin prior to 2.7. The root cause is in WiseChatLinksPostFilter.php, where external links are mishandled due to omission of noopener and noreferrer attributes when rendering links. Public references in connected documents corroborate this...

Code Execution Vulnerability in ThinkSNS V4

ThinkSNS is an open source social system under Wise Software Beijing Co. A code execution vulnerability exists in ThinkSNS V4, which can be exploited by an attacker to gain control of the web server...

Researchers Defeat AMD's SEV Virtual Machine Encryption

German security researchers claim to have found a new practical attack against virtual machines VMs protected using AMD's Secure Encrypted Virtualization SEV technology that could allow attackers to recover plaintext memory data from guest VMs. AMD's Secure Encrypted Virtualization SEV technology...

Wise Boot Assistant 4.28.416 Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Wise Boot Assistant Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage:http://www.wisecleaner.com/ Software Link:...

Wise Boot Assistant 4.28.416 Privilege Escalation

Exploit Title: Wise Boot Assistant Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage:http://www.wisecleaner.com/ Software Link: http://downloads.wisecleaner.com/soft/WiseCare365.exe version : 4.28.416 Latest Tested on: Windows 7 Wis...

Wise Care 365 4.27 Wise Disk Cleaner 9.29 - Unquoted Service Path Privilege Escalation

Wise Care 365 4.27 Wise Disk Cleaner 9.29 - Unquoted Service Path Privilege Escalation Exploit Title: Wisecleaner Software Multiple Unquoted Service Path Elevation of Privilege Date: 23/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor...