Collaborate Disseminate
In sum, they tried 10 different commands. The site is ran on Wordpress, but has a security plugin that, “blocked a page visit to your site.” I’m curious as to what they were trying to go after though. Also not sure why most… Continue reading Got warnings last night from a SQL injection attack – What were they trying to do?
I’ve tried to download a local copy of our website to play about with some minor front-end tweaks and my anti-virus flagged and prevented the download.
I used a plugin to scan WordPress and it flagged a file with this code:
… Continue reading WordPress Suspicious:PHP Help [on hold]
Researchers have uncovered another serious bug in WP Live Chat that could lead to the mass compromise of websites. Continue reading WordPress plugin sees second serious security bug in six weeks
I try to Scan MR robot machine with wpscan — url 192.168.0.5 — wp-content-dir wp-login — force — passwords sorted.dic -U Elliot and it doesn’t show me anything
A cross-site scripting flaw in a popular WordPress plugin enables an unauthenticated attacker to insert JavaScript payloads into impacted websites. Continue reading WordPress WP Live Chat Support Plugin Fixes XSS Flaw
The top 5 mistakes that create field days for hackers, WordPress 5.2 brings new security features, a discontinued Insulin pump with security a security flaw in high demand, and how to communicate privately in the age of digital policing! Paul’… Continue reading Security News – Paul’s Security Weekly #603
WordPress 5.2 is out and brings a number of functional improvements, but the great news for those who are worried about the security of their installation is the implementation of digital signing of update packages. Increased security WordPress provide… Continue reading WordPress updates are digitally signed at last!
A Wordpress site I manage has the WordFence security plugin installed.
Legitimate users occasionally get blocked by the Brute Force protection aspect of the plugin, even though they haven’t made any bungled login attempts.
… Continue reading Hundreds of empty-username logins in WordPress site
After researchers were able to bypass a file upload validation flaw patch in WP Live Chat, a new patch has been issued. Continue reading WP Live Chat WordPress Plugin Re-Patches File Upload Flaw
This week, how a politicians’ kids accessed his laptop through facial recognition, critical flaws in WordPress and Qualcomm chips, how 2 million IoT security cameras and baby monitors are vulnerable to takeover, and how a new Emotet variant u… Continue reading April 30, 2019 – Hack Naked News #216