539 matches found
CVE-2019-6780
The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...
CVE-2019-6780
The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...
CVE-2019-6780
The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...
CVE-2019-6780
The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...
CVE-2019-6780
The CVE-2019-6780 entry concerns the WordPress Wise Chat plugin prior to 2.7. The root cause is in WiseChatLinksPostFilter.php, where external links are mishandled due to omission of noopener and noreferrer attributes when rendering links. Public references in connected documents corroborate this...
PT-2019-18339
Name of the Vulnerable Software and Affected Versions Wise Chat plugin for WordPress versions prior to 2.7 Description The issue arises from the mishandling of external links due to the omission of noopener and noreferrer in the rendering/filters/post/WiseChatLinksPostFilter.php file...
CVE-2019-6780: URL Redirection to Untrusted Site
The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...
Code Execution Vulnerability in ThinkSNS V4
ThinkSNS is an open source social system under Wise Software Beijing Co. A code execution vulnerability exists in ThinkSNS V4, which can be exploited by an attacker to gain control of the web server...
Researchers Defeat AMD's SEV Virtual Machine Encryption
German security researchers claim to have found a new practical attack against virtual machines VMs protected using AMD's Secure Encrypted Virtualization SEV technology that could allow attackers to recover plaintext memory data from guest VMs. AMD's Secure Encrypted Virtualization SEV technology...
Wise Boot Assistant 4.28.416 Privilege Escalation
Exploit Title: Wise Boot Assistant Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage:http://www.wisecleaner.com/ Software Link: http://downloads.wisecleaner.com/soft/WiseCare365.exe version : 4.28.416 Latest Tested on: Windows 7 Wis...
Wise Boot Assistant 4.28.416 Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits Exploit Title: Wise Boot Assistant Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage:http://www.wisecleaner.com/ Software Link:...
Wise Care 365 4.27 / Wise Disk Cleaner 9.29 - Unquoted Service Path Privilege Escalation
Exploit for windows platform in category local exploits Exploit Title: Wisecleaner Software Multiple Unquoted Service Path Elevation of Privilege Date: 23/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: http://www.wisecleaner.com...
Wise Care 365 4.27 / Wise Disk Cleaner 9.29 - Unquoted Service Path Privilege Escalation
Exploit Title: Wisecleaner Software Multiple Unquoted Service Path Elevation of Privilege Date: 23/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.wisecleaner.com Software Link:...
Wise Care 365 4.27 Wise Disk Cleaner 9.29 - Unquoted Service Path Privilege Escalation
Wise Care 365 4.27 Wise Disk Cleaner 9.29 - Unquoted Service Path Privilege Escalation Exploit Title: Wisecleaner Software Multiple Unquoted Service Path Elevation of Privilege Date: 23/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor...
Wise-FTP 8.0.2 DLL Hijack
Technical Details & Description: ================================ A local dll injection vulnerability has been discovered in the official Wise-FTP v8.0.2 software. The issue allows local attackers to inject code to vulnerable libraries to compromise the process or to gain higher access privileges...
WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability
Document Title: =============== WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1498 Release Date: ============= 2015-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 149...
WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability
Document Title: =============== WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1498 Release Date: ============= 2015-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 149...
WordPress Wise Search Widget Plugin <= 1.1 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability via "s" parameter. Solution Upgrade this plugin...
