UBUNTU-CVE-2014-1427

A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2...

CVE-2014-1427

A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2...

CVE-2014-1428 uuid.uuid1() is not suitable as an unguessable identifier/token

A vulnerability in generatefilestoragekey of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2...

Cross-Site Scripting

Overview Versions of jingo prior to 1.9.2 are vulnerable to Cross-Site Scripting XSS. If malicious input such as alert1 is placed in the content of a wiki page, Jingo does not properly encode the input and it is executed instead of rendered as text. Recommendation Upgrade to version 1.9.2...

WTF - A Personal Information Dashboard For Your Terminal

A personal terminal-based dashboard utility, designed for displaying infrequently-needed, but very important, daily data. Quick Start Download and run the latest binary or install from source: go get -u github.com/senorprogrammer/wtf cd $GOPATH/src/github.com/senorprogrammer/wtf make install make...

Debian DLA-1314-1 : simplesamlphp security update

Cure53 discovered that in SimpleSAMLphp, in rare circumstances an invalid signature on the SAML 2.0 HTTP Redirect binding could be considered valid. Additionally this update fixes a regression introduced in DLA-1298 by the backported patch for SSA-201802-01/CVE-2018-7644. For Debian 7 'Wheezy',...

CloudMe Sync 1.9.2 Remote Buffer Overflow

!/usr/bin/python CloudMe Sync 1.9.2 Remote Exploit Written by r00tpgp @ http://www.r00tpgp.com Usage: python CloudMe-1.9.2-Exploit.py Spawns reverse meterpreter LHOST=192.168.0.68 LPORT=1990 CVE: CVE-2018-6892 CloudMe Installer: https://org.cloudme.com/en/sync Tested on Windows 7 32b SP1 import...

Joomla VMap 1.9.2 SQL Injection

Title: Joomla! VMap 1.9.2 - SQL injection Credit: Bilal KARDADOU Vendor: https://www.wdmtech.com URL: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/vmap/ Product: 'Joomla! VMap 1.9.2' Developer: WDMtech Extension type: Plugin Last updated: Apr 29 2017...

WordPress Landing Pages Plugin Arbitrary Code Execution Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WordPress Landing Pages is one of the landing page plugin. A security vulnerability exists in versions of the...

WEBrick Improper Input Validation vulnerability

WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrar...

WordPress Content Audit 1.9.1 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

WordPress Content Audit plugin version 1.9.1 suffers from cross site request forgery and cross site scripting vulnerabilities. Details ================ Software: Content Audit Version: 1.9.1 Homepage: https://wordpress.org/plugins/content-audit/ Advisory report:...

Ansible chroot, jail and zone connection plugin backlink vulnerability

Ansible is a computer system configuration manager that can be used to publish, manage, and orchestrate computer systems. chroot, jail, and zone connection are among the plug-ins. chroot is a root directory modification plug-in; jail is a process or application restriction plug-in; and zone...

Ruby URI.decode_www_form_component Method Denial of Service Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language developed by Japanese software developer Yukihiro Matsumoto. A security vulnerability exists in the URI.decodewwwformcomponent method in Ruby versions prior to 1.9.2-p330. A remote attacker can exploit this...

Design/Logic Flaw

The URI.decodewwwformcomponent method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service catastrophic regular expression backtracking, resource consumption, or application crash via a crafted string...

CVE-2017-12144

In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12142

In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12144

In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file...

ytnef 'TNEFFillMapi' function denial of service vulnerability

ytnef is an application library for extracting data from winmail.dat files. A security vulnerability exists in the 'TNEFFillMapi' function of the ytnef.c file in ytnef version 1.9.2. An attacker can exploit this vulnerability to cause a denial of service with the help of a specially crafted file...

SoundTouch 1.9.2 - Multiple Vulnerabilities

Exploit for linux platform in category dos / poc SoundTouch multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= SoundTouch is an open-source audio processing library for changing the Tempo, Pitch and Playback Rates of audio streams or audio files...

SoundTouch Denial of Service Vulnerability

SoundTouch is an open-source audio processing library for changing the speed, pitch, and playback rate of an audio stream, among other things. A security vulnerability exists in the 'TDStretchSSE::calcCrossCorr' function in the source/SoundTouch/sseoptimized.cpp file in SoundTouch version 1.9.2. ...