UBUNTU-CVE-2014-0179

libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service read block and hang via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the 1 virConnectCompareCPU or 2 virConnectBaselineCPU API method, relate...

Knews 1.2.5 - Unspecified XSS

The Knews Multilingual Newsletters WordPress plugin was affected by an Unspecified XSS security vulnerability...

OpenDocMan 1.2.5 index.php last_message Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Wireshark 1.2.5 LWRES getaddrbyname BOF - calc.exe

No description provided by source. !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow Discovered by babi Reference: http://www.exploit-db.com/exploits/11288 Exploit Dev by Nullthreat & Pure|Hate import socket, sys try: host = sys.argv1 except: print usage: +...

Zoom VoIP Phone Adapater ATA1+1 1.2.5 - CSRF Exploit

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 html form action=http://10.1.1.165/callwzd.html method=post input name=DIRTYPAGE value=3 input name=HELPPAGE value=html.html input...

OpenDocMan 1.2.5 department.php XSS

No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

OpenDocMan 1.2.5 admin.php last_message Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

WordPress Unconfirmed Plugin 's'插件跨站脚本漏洞

Bugtraq ID:66781 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress Unconfirmed插件不正确过滤's'参数，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 WordPress Unconfirmed Plugin 1.2.4 WordPress Unconfirmed 1.2.5版本已修复该漏洞，建议用户下载使用： http://wordpress.org/plugins/unconfirmed...

Sharebar <= 1.2.5 - Reflected Cross-Site Scripting (XSS)

sharebar-admin.php page Parameter XSS...

WordPress Sharebar 1.2.5 Cross Site Scripting

Exploit Title : Wordpress sharebar plugin Cross site scripting Vulnerability Exploit Author : Ashiyane Digital Security Team Google Dork: : inurl:/wp-content/plugins/sharebar Date: 2013/09/24 Vendor Homepage : http://wordpress.org/plugins/sharebar Software Link :...

Modoer 1.2.5 /ajax.php SQL注入漏洞

No description provided by source...

PT-2013-1897 · Rack +1 · Rack +1

Name of the Vulnerable Software and Affected Versions: Rack versions 1.1.3 and earlier Rack versions 1.2.x through 1.2.5 Rack versions 1.3.x through 1.3.6 Rack versions 1.4.x through 1.4.1 Description: The issue is caused by an incorrect regular expression in lib/rack/multipart.rb, which allows...

WebCalendar Pre-Auth PHP Code Execution

Added: 05/18/2012 CVE: CVE-2012-1495 BID: 53207 OSVDB: 80097 Background WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. Problem WebCalendar fails to properly...

Modoer 1.2.5 injection 0day exploit methods of proof the wrong use-vulnerability warning-the black bar safety net

Keyword: intitle:Powered by Modoer intitle:game can according to the needs of their own to take the stand ! ! ! Testing for vulnerabilities:ajax. php? action=digg&idtype=shop&keyid= FROM modoeradmin Where id=1 and substringSelect adminname FROM modoeradmin Where id=1,1,1=0x61 %2 3 There is MySQL...

PYSEC-2011-31

Cross-site scripting XSS vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload...

PYSEC-2011-31

Cross-site scripting XSS vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload...

CVE-2011-0697

Cross-site scripting XSS vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload...

Fedora 12 : webkitgtk-1.2.5-1.fc12 (2010-15982)

New stable release, API and ABI compatible with previous 1.2.x versions. - The patches to fix the following CVEs are included with help from Vincent Danen and other members of the Red Hat security team : CVE-2010-3113 CVE-2010-1814 CVE-2010-1812 CVE-2010-1815 CVE-2010-3115 CVE-2010-1807...

Fedora 13 : webkitgtk-1.2.5-1.fc13 (2010-15957)

New stable release, API and ABI compatible with previous 1.2.x versions. - The patches to fix the following CVEs are included with help from Vincent Danen and other members of the Red Hat security team : CVE-2010-3113 CVE-2010-1814 CVE-2010-1812 CVE-2010-1815 CVE-2010-3115 CVE-2010-1807...

CVE-2010-2441

WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295...