342 matches found
Security fix for the ALT Linux 9 package wireshark version 2.6.4-alt1
Oct. 13, 2018 Anton Farygin 2.6.4-alt1 - 2.6.4 fixes: CVE-2018-18227, CVE-2018-18225, CVE-2018-18225, CVE-2018-12086 - disabled build gtk+ UI...
Modx Revolution Remote Code Execution Vulnerability
MODX Revolution is a PHP-based open source content management system CMS from the U.S. company MODX. The system supports online collaboration, search engine optimization SEO, add-ons and more. A remote code execution vulnerability exists in Modx Revolution versions prior to 2.6.4, which can be...
Modx Revolution < 2.6.4 - Remote Code Execution Exploit
Exploit for php platform in category web applications Exploit Title: Modx Revolution ' if requests.get target + '/connectors/system/phpthumb.php', verify=verify.statuscode != 404: printFore.GREEN + '/connectors/system/phpthumb.php - found' url = target + '/connectors/system/phpthumb.php' payload ...
MODX Revolution Directory Traversal Vulnerability (CNVD-2018-17478)
MODX Revolution is a collection of easy-to-use content management systems CMS and application frameworks. A directory traversal vulnerability exists in /core/model/modx/modmanagerrequest.class.php in MODX Revolution 2.6.4 and earlier versions. An attacker can exploit the vulnerability by deleting...
CVE-2018-1000207
MODX Revolution version =2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appea...
CVE-2018-1000207
MODX Revolution version =2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appea...
MODX CMS 2.x - 2.6.4 XSS Vulnerability
MODX CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:modx:revolution"; ...
WordPress Woocommerce 2.6.2 API Cross Site Scripting
------------------------------------------------------------------------ Persistent Cross-Site Scripting in Woocommerce WordPress plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a malicious individual to compromise the confidentiality of protected information
The vulnerability of the fam-devel-2.6.4 package of the Red Hat Enterprise Linux operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited locally...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a malicious individual to compromise the confidentiality of protected information
The vulnerability of the fam-2.6.4 package of the Red Hat Enterprise Linux operating system can lead to a violation of the confidentiality of protected information. Exploitation of this vulnerability can be carried out locally...
WebGate eDVR Manager 2.6.4 AudioOnlySiteChannel Stack Buffer Overflow Exploit
Exploit for windows platform in category remote exploits var arg1 = ""; var arg2 = 1; var arg3 = 1; var nops = ""; var shellcode = ""; var buff2 = ""; for i=0; i128; i++ arg1 += "B"; var nseh = "\xeb\x10PD"; var seh = "\xa0\xf2\x07\x10"; for i=0;i80; i++ nops += "\x90"; shellcode =...
WebGate eDVR Manager 2.6.4 SiteName Stack Overflow Exploit
WebGate eDVR Manager version 2.6.4 suffers from a SiteName stack overflow vulnerability. var buff1= ""; var buff2= "PraveenD"; var nops = ""; for i=0; i128; i++ buff1 += "B"; var nseh = "\xeb\x08PD"; var seh = "\xa0\xf2\x07\x10"; for i=0;i80; i++ nops += "\x90"; //calc.exe payload sc =...
CVE-2014-5316
Cross-site scripting XSS vulnerability in Dotclear before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted page...
CVE-2014-5316
Cross-site scripting XSS vulnerability in Dotclear before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted page...
CVE-2014-5316
Dotclear contains a cross-site scripting (XSS) vulnerability (CVE-2014-5316) affecting Dotclear versions prior to 2.6.4. The flaw allows remote attackers to inject arbitrary web script/HTML via a crafted page, potentially executing code in the browser of a logged-in user when they view the page. ...
JVN#61637002: Dotclear vulnerable to cross-site scripting
Dotclear is a weblog software. Dotclear contains a cross-site scripting vulnerability. Impact If a user views a crafted page while logged in, an arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the infomration...
Updated moodle package fixes security vulnerabilities
In Moodle before 2.6.4, serialised data passed by repositories could potentially contain objects defined by add-ons that could include executable code CVE-2014-3541. In Moodle before 2.6.4, it was possible for manipulated XML files passed from LTI servers to be interpreted by Moodle to allow acce...
CVE-2014-3546
Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in 1 notes/index.php and 2 user/edit.php, which allows remote attackers to obtain potentially sensitive username and course information via a...
CVE-2014-3542
mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...
