CampTix Event Ticketing <= 1.4.2 – CSV Injection and XSS
More info:
https://wpvulndb.com/vulnerabilities/9464
Capability Manager Enhanced <= 1.5.8 – Authenticated SQLi
More info:
https://wpvulndb.com/vulnerabilities/9465
Category Specific RSS feed Subscription <= 2.0 – Cross-Site Request Forgery (CSRF)
More info:
https://wpvulndb.com/vulnerabilities/9462
CampTix Event Ticketing <= 1.5.0 – CSV Injection Bypasses and XSS
More info:
https://wpvulndb.com/vulnerabilities/9463
The Strange Case of the Malicious Favicon
http://feedproxy.google.com/~r/sucuri/blog/~3/9MCY9d6Frd0/the-strange-case-of-the-malicious-favicon.html During the past year, our Remediation department has seen a large increase in the number of fully spammed sites. The common factors are strangely named and unusually located favicon.ico files, along with the creation of “bak.bak” index files peppered around the website. In the majority of the cases, the pattern is similar regardless of […]
More info:
http://feedproxy.google.com/~r/sucuri/blog/~3/9MCY9d6Frd0/the-strange-case-of-the-malicious-favicon.html
Linux kernel vulnerability CVE-2016-0723
Linux kernel vulnerability CVE-2016-0723 Security Advisory Security Advisory Description Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows ...
More info:
https://support.f5.com/csp/article/K43650115
Everest Forms <= 1.4.9 – SQL Injection
More info:
https://wpvulndb.com/vulnerabilities/9466