CVE-2016-4381

CVE-2016-4381 affects HPE XP7 Command View Advanced Edition (CVAE) Suite 6.x–8.x prior to 8.4.1-02. When Replication Manager and Device Manager are enabled, local users can bypass intended access restrictions via unspecified vectors. The NVD entry lists local attack with moderate complexity and p...

pushkino.pw Open Redirect vulnerability

Vulnerable URL: http://pushkino.pw/redirect?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:48 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 29169291 VIP websit...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : libgcrypt (SSA:2016-236-02)

New libgcrypt packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-236-02. Th...

pyknet.net XSS vulnerability

Vulnerable URL: http://pyknet.net/submit.php?srchstring=%5B%27%27%5D%22%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 71948 VIP website...

Design/Logic Flaw

EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2016:1305-1)

This update for flash-player fixes the following issues : - Security update to 11.2.202.621 bsc979422 : - APSA16-02, APSB16-15, CVE-2016-1096, CVE-2016-1097, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1101, CVE-2016-1102, CVE-2016-1103, CVE-2016-1104, CVE-2016-1105, CVE-2016-1106,...

Security update for flash-player (important)

This security update for flash-player to 11.2.202.621 fixes the following issues boo979422: A critical vulnerability CVE-2016-4117 exists in Adobe Flash Player 21.0.0.226 and earlier versions for Windows, Macintosh, Linux, and Chrome OS. Successful exploitation could cause a crash and potentially...

Security update for flash-player (important)

This security update for flash-player to 11.2.202.621 fixes the following issues boo979422: A critical vulnerability CVE-2016-4117 exists in Adobe Flash Player 21.0.0.226 and earlier versions for Windows, Macintosh, Linux, and Chrome OS. Successful exploitation could cause a crash and potentially...

Security update for flash-player (important)

This security update for flash-player to 11.2.202.621 fixes the following issues boo979422: A critical vulnerability CVE-2016-4117 exists in Adobe Flash Player 21.0.0.226 and earlier versions for Windows, Macintosh, Linux, and Chrome OS. Successful exploitation could cause a crash and potentially...

openSUSE Security Update : flash-player (openSUSE-2016-585)

This security update for flash-player to 11.2.202.621 fixes the following issues boo979422 : A critical vulnerability CVE-2016-4117 exists in Adobe Flash Player 21.0.0.226 and earlier versions for Windows, Macintosh, Linux, and Chrome OS. Successful exploitation could cause a crash and potentiall...

Solaris 10 (sparc) : 152252-02 (deprecated)

SunOS 5.10: sudo Patch. Date this patch was last updated by Sun : Feb/09/17 This plugin has been deprecated and either replaced with individual 152252 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

Immunity Canvas: JENKINS_JRMP_DESERIALIZATION

Name| jenkinsjrmpdeserialization ---|--- CVE| CVE-2016-0788 Exploit Pack| CANVAS Description| jenkinsjrmpdeserialization Notes| CVE Name: CVE-2016-0788 VENDOR: Jenkins NOTES: Versions tested: Ubuntu Linux 14.04.3 Jenkins 1.598 - 6 / 7 / 8 Jenkins 1.649 - 7 / 8 Windows 7 Ultimate SP1 Jenkins 1.598...

WordPress Bulk Delete 5.5.3 Privilege Escalation

Exploit Title: Bulk Delete Privilege Escalation Discovery Date: 2016-02-10 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: http://bulkwp.com/ Software Link: https://wordpress.org/plugins/bulk-delete/ Version: 5.5.3 Tested on: WordPress 4.4.2...

Debian DSA-3498-1 : drupal7 - security update

Multiple security vulnerabilities have been found in the Drupal content management framework. For additional information, please refer to the upstream advisory at %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Jenkins 低权限用户 API 服务调用 可致远程命令执行

漏洞演示 将 Jenkins 跑起来后，在低权限用户下构造 XML 文档： hashCode open /Applications/Calculator.app false 0 0 0 start 1 发送 Payload 至接口 http://...:8080/jenkins/createItem?name=knownsec： 成功后服务端会运行 计算器 程序。 漏洞影响 影响版本： 1.650 （1.650版本已修复该问题） 从zoomeye.org上搜索设备指纹“Jenkins” 从搜索的结果来看，约存在20000个潜在受到影响的目标。 相关链接...

velvetparkmedia.com Open Redirect vulnerability

Vulnerable URL: http://velvetparkmedia.com/openx/www/delivery/ck.php?oaparams=2bannerid=51zoneid=0cb=017a5f726boadest=https://xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability

Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1766 View Video: https://www.youtube.com/watch?v=QKSQvP5xGY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1725 Release Dat...

UBNT AirCRM - 3 x Persistent Cross Site Scripting

Document Title: =============== UBNT AirCRM - 3 x Persistent Cross Site Scripting References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1739 Video View: https://www.youtube.com/watch?v=5uiXWxJzNFk Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1728 Release Date:...

Chamilo LMS Cross Site Scripting

Document Title: =============== Chamilo LMS - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Video: https://www.youtube.com/watch?v=gNZsQjmtiGI Release Date: ============= 2016-02-17 Vulnerability Laborator...

XM Easy Personal FTP Server 5.8.0 - 'HELP' Remote Denial of Service

!/usr/bin/python XM Easy Personal FTP Server 5.8.0 HELP Denial of Service Tested on : Windows XP SP 3 EN Author : Pawan Lal [email protected] Date : 18-02-2016 import socket import sys def Usage: print "Usage: ./ftpxmftpdosbackup.py \n" buffer= "A" 4500 def starthostname, username, passwd: sock...