NETGEAR ADSL router JNR1010 with firmware version 1.0.0.16 suffers from a file disclosure vulnerability.
Monthly Archives: November 2016
D-Link ADSL Router DSL-2730U IN_1.02 Remote File Disclosure
D-Link ADSL router DSL-2730U with firmware version IN_1.02 suffers from a file disclosure vulnerability.
MOVISTAR ADSL Router BHS_RTA BHS_RTA_C0_019 Remote File Disclosure
MOVISTAR ADSL router BHS_RTA BHS_RTA_C0_019 suffers from a file disclosure vulnerability.
WordPress Caldera Forms 1.3.5.3 Cross Site Scripting
WordPress Caldera Forms plugin version 1.3.5.3 suffers from a cross site scripting vulnerability.
WordPress Quotes Collection 2.0.5 Cross Site Scripting
WordPress Quotes Collection plugin version 2.0.5 suffers from a cross site scripting vulnerability.
WordPress YITH WooCommerce Compare 2.0.9 PHP Object Injection
WordPress YITH WooCommerce Compare plugin version 2.0.9 suffers from a PHP object injection vulnerability.
Bart Ransomware (Win32/Filecoder.Bart) (Kidnapping) Resource Hacking
This report explains the ability to change the code of Bart. An attacker can edit the code and seamlessly put their own dark website with a different Bitcoin account.
Adobe Releases Security Updates
Original release date: November 08, 2016
Adobe has released security updates to address vulnerabilities in Flash Player and Connect. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.
US-CERT encourages users and administrators to review Adobe Security Bulletins APSB16-37 and APSB16-35 and apply the necessary updates.
This product is provided subject to this Notification and this Privacy & Use policy.
Adobe Patches Nine Code Execution Flaws in Flash Player
Adobe again released a security update for Flash Player, patching nine remote code execution vulnerabilities. Adobe Connect for Windows was also updated.
Stored Cross-Site Scripting vulnerability in 404 to 301 WordPress Plugin
Posted by Summer of Pwnage on Nov 08
————————————————————————
Stored Cross-Site Scripting vulnerability in 404 to 301 WordPress Plugin
————————————————————————
Alyssa Milburn <amilburn.at.zall.org>, July 2016
————————————————————————
Abstract
————————————————————————
A stored Cross-Site…