CVE-2016-1566

Cross-site scripting XSS vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when file transfer is enabled to a location shared by multiple users, allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename. NOTE: this vulnerability was fixed in...

CVE-2016-1566

Cross-site scripting XSS vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when file transfer is enabled to a location shared by multiple users, allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename. NOTE: this vulnerability was fixed in...

CVE-2016-1566

Cross-site scripting XSS vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when file transfer is enabled to a location shared by multiple users, allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename. NOTE: this vulnerability was fixed in...

CVE-2016-1566

CVE-2016-1566 is an XSS vulnerability in Guacamole’s file browser (versions 0.9.8 and 0.9.9) where crafted filenames could inject script/HTML when file transfer targets are shared by multiple users. The issue was fixed in guacamole.war on 2016-01-13, though the version number was not updated. Con...

DNN (DotNetNuke) < 7.4.0 Unspecified Persistent XSS

The version of DNN installed on the remote host is affected by an unspecified, persistent cross-site scripting vulnerability due to a failure to properly sanitize user-supplied input. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

CVE-2015-1566

Cross-site scripting XSS vulnerability in DotNetNuke DNN before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-1566

CVE-2015-1566 affects DotNetNuke (DNN) before version 7.4.0, where an XSS flaw could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The concrete root cause is not detailed in the provided documents beyond the vendor’s version bound; no exploit vectors are d...

CVE-2014-1566

Mozilla Firefox before 31.1 on Android does not properly restrict copying of local files onto the SD card during processing of file: URLs, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application. NOTE: this vulnerability exists because o...

CVE-2014-1566

CVE-2014-1566 affects Mozilla Firefox on Android (before 31.1). Affected component: processing of file: URLs allows a crafted application to copy local files to the SD card and exfiltrate data from the Firefox profile directory. Root cause noted as an incomplete fix for CVE-2014-1515. Impact desc...

Interactive Graphical SCADA System Remote Command Injection

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::Tcp def initializeinfo =...

CVE-2011-1566

creationtimestamp| type| source ---|---|--- 2013-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29129 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/igssexec17.rb 2018-05-29 15:50:33+00:00| seen|...

Interactive Graphical SCADA System - Remote Command Injection (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Interactive Graphical SCADA System Remote Command Injection', 'Description' = %q This module abuses a directory traversal flaw in...

Roxio Creator 9.x <= 9.0.136 Image Handling Integer Overflow

According to its version, the Roxio Creator install on the remote host is 9.x earlier than or equal to 9.0.136. It is, therefore, affected by an integer overflow vulnerability related to image handling that could allow arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"...

CVE-2013-1566

Technical details about CVE-2013-1566 are not provided in the connected documents. The initial entry notes an unspecified InnoDB-related impact in MySQL 5.6.10 and earlier. Monitor for updates and vendor advisories for concrete impact, affected versions, and fixes.

Ubuntu: Security Advisory (USN-1566-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : bind9 vulnerability (USN-1566-1)

It was discovered that Bind incorrectly handled certain specially crafted long resource records. A remote attacker could use this flaw to cause Bind to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...

7T Interactive Graphical SCADA System Arbitrary File Execution (CVE-2011-1566)

A file execution vulnerability has been reported in 7T Interactive Graphical SCADA System IGSS. 7-Technologies' IGSS is a Supervisory Control and Data Acquisition SCADA system used for monitoring and controlling industrial processes. A remote attacker may exploit this vulnerability to execute...

7T Interactive Graphical SCADA System dc.exe Directory Traversal

Added: 06/03/2011 CVE: CVE-2011-1566 BID: 46936 OSVDB: 72349 Background 7-Technologies Interactive Graphical SCADA System IGSS is a Supervisory Control and Data Acquisition SCADA solution used mainly in Denmark and the US. Problem An input validation error in the Data Collector service dc.exe whe...

7T Interactive Graphical SCADA System dc.exe Directory Traversal

Added: 06/03/2011 CVE: CVE-2011-1566 BID: 46936 OSVDB: 72349 Background 7-Technologies Interactive Graphical SCADA System IGSS is a Supervisory Control and Data Acquisition SCADA solution used mainly in Denmark and the US. Problem An input validation error in the Data Collector service dc.exe whe...

CVE-2011-1566

CVE-2011-1566 affects 7-Technologies IGSS (Interactive Graphical SCADA System); dc.exe (v9.00.00.11059 and earlier) is vulnerable to a directory-traversal flaw that allows remote code execution via crafted opcodes 0xa and 0x17 sent to TCP port 12397. The issue enables arbitrary program execution ...