PT-2020-10244 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop versions prior to 2.5.4 Combodo iTop versions prior to 2.6.3 Combodo iTop versions prior to 2.7.0 Description: A post-authentication privilege escalation issue in the web application of Combodo iTop allows regular authenticated...

Vanilla Forums 2.6.3 - Persistent Cross-Site Scripting

Exploit Title: Vanilla Forums 2.6.3 - Persistent Cross-Site Scripting Google Dork: N/A Date: 2020-02-10 Exploit Author: Sayak Naskar Vendor Homepage: https://vanillaforums.com/en/ Version: 2.6.3 Tested on: Windows, Linux CVE : CVE-2020-8825 A Stored xss was found in Vanillaforum 2.6.3...

CVE-2020-8825

index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...

CVE-2020-8825

index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...

Cross site scripting

index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...

CVE-2018-21018

Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions...

Code injection

Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions...

CVE-2018-21018

Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions...

Rapid7's Windows InsightIDR Local Elevation of Privilege Vulnerability

Rapid7 Insight Agent is a lightweight software from Rapid7 USA. The software is capable of collecting data from IT assets. A security vulnerability exists in Rapid7 Insight Agent 2.6.3 and earlier versions. An attacker can exploit the vulnerability to elevate privileges to SYSTEM...

Wireshark MS-WSP Dissector Denial of Service Vulnerability (wnpa-sec-2018-47) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Debian DSA-4315-1 : wireshark - security update

Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer which could result in denial of service or the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

CVE-2018-18226

In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach...

CVE-2018-18226

In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach...

CVE-2018-18225

In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed...

Wireshark Denial of Service Vulnerability (CNVD-2019-18506)

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in the CoAP parser in Wireshark versions 2.6.0...

MODX Revolution Cross-Site Scripting Vulnerability (CNVD-2018-13269)

MODX Revolution is a PHP-based open source content management system CMS from the U.S. company MODX. The system supports online collaboration, search engine optimization SEO, add-ons and more. A cross-site scripting vulnerability exists in MODX Revolution version 2.6.3. A remote attacker can...

MODX Revolution CMS <= 2.6.3 Stored XSS Vulnerability

MODX CMS is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cross site scripting

MODX Revolution 2.6.3 has XSS...

CVE-2018-10382

MODX Revolution 2.6.3 has XSS...

CVE-2018-10382

MODX Revolution 2.6.3 has XSS...