Linux Distros Unpatched Vulnerability : CVE-2019-17673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header. CVE-2019-17673 Note tha...

usaco-pg.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1124627 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

adoboloco.com Cross Site Scripting vulnerability

Security Researcher Codingboy Helped patch 14 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting adoboloco.com website and its users. Following coordinated and responsible vulnerabili...

cnasr.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1016489 Security Researcher m0nk3ysr Helped patch 2 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting cnasr.it website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 2914...

WordPress 5.2.4 Cross Origin Resource Sharing

Exploit Title: Wordpress 5.2.4 - Cross-Origin Resource Sharing Date: 2019-10-28 Exploit Author: Milad Khoshdel Software Link: https://wordpress.org/download/ Version: Wordpress 5.2.4 Tested on: Linux Apache/2 PHP/7.2 Vulnerable Page: https://Your-Domain/wp-json POC: The web application fails to...

Fedora 31 : wordpress (2019-f21ad78845)

WordPress 5.2.4 Security Release WordPress versions 5.2.3 and earlier are affected by these bugs, which are fixed in version 5.2.4. Security Updates - Props to Evan Ricafort for finding an issue where stored XSS cross-site scripting could be added via the Customizer. - Props to J.D. Grimes who...

CVE-2019-17669

WordPress before 5.2.4 has a Server Side Request Forgery SSRF vulnerability because URL validation does not consider the interpretation of a name as a series of hex characters...