Full Disclosure
Posted by Summer of Pwnage on Jul 11
————————————————————————
Persistent Cross-Site Scripting in WordPress Activity Log plugin
————————————————————————
Han Sahin, July 2016
https://sumofpwn.nl/advisory/2016/activity-log-plugin.png
————————————————————————
Abstract
————————————————————————
A…
Posted by Securify B.V. on Jul 11
————————————————————————
Persistent Cross-Site Scripting in WP Live Chat Support plugin
————————————————————————
Han Sahin, July 2016
————————————————————————
Abstract
————————————————————————
A persistent Cross-Site Scripting (XSS) vulnerability has been…
Posted by Summer of Pwnage on Jul 09
————————————————————————
Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin
————————————————————————
David Vaartjes, July 2016
————————————————————————
Abstract
————————————————————————
A stored Cross-Site Scripting vulnerability was…
Posted by Summer of Pwnage on Jul 09
————————————————————————
Ultimate Member Local File Inclusion vulnerability
————————————————————————
Burak Kelebek, July 2016
————————————————————————
Abstract
————————————————————————
It was discovered that Ultimate Member is vulnerable to PHP File…
Posted by Vulnerability Lab on Jul 08
Document Title:
===============
BMW ConnectedDrive – (Update) VIN Session Vulnerability
References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=1736
Release Date:
=============
2016-07-07
Vulnerability Laboratory ID (VL-ID):
====================================
1736
Common Vulnerability Scoring System:
====================================
6
Product & Service Introduction:…
Posted by Vulnerability Lab on Jul 08
Document Title:
===============
BMW – (Token) Client Side Cross Site Scripting Vulnerability
References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=1737
Release Date:
=============
2016-07-06
Vulnerability Laboratory ID (VL-ID):
====================================
1737
Common Vulnerability Scoring System:
====================================
3.6
Product & Service Introduction:…
Posted by Egidio Romano on Jul 07
—————————————————————————
IPS Community Suite <= 4.1.12.3 Autoloaded PHP Code Injection Vulnerability
—————————————————————————
[-] Software Link:
[-] Affected Versions:
Version 4.1.12.3 and prior versions.
[-] Vulnerability Description:
The vulnerable code is located in the…
Posted by CFP on Jul 07
Dear all,
CODE BLUE in Tokyo is looking for innovative and creative research topics
regarding to security to be presented at the conference.
We are calling for U24 submissions while General/Tech submissions.
CODE BLUE is an international conference in Tokyo with the cutting egdes
talks from all over the world, and is a place for all participants to
exchange information and interact beyond borders and languages.
We will support the travel…
Posted by David Coomber on Jul 07
Acer Portal Android Application – MITM SSL Certificate Vulnerability
(CVE-2016-5648)
Posted by Vulnerability Lab on Jul 07
Title: Zero-day flaw lets hackers tamper with your car through BMW portal
