PT-2020-10609 · Gnu +2 · Gnu Patch +2

Name of the Vulnerable Software and Affected Versions: GNU patch versions prior to 2.7.7 Description: The issue is related to a Double Free vulnerability in the another hunk function in pch.c, which can cause a denial of service via a crafted patch file. Recommendations: For GNU patch versions...

NetIQ iManager Cross-Site Scripting Vulnerability (CNVD-2017-36346)

NetIQ iManager is a WEB-based application from American NetIQ. You can use wireless devices to manage and configure eDirectory objects. A cross-site scripting vulnerability exists in NetIQ iManager versions prior to 2.7.7 Patch 10 HF2 and prior to 3.0.3.2. A remote attacker can exploit this...

CVE-2017-7425

Multiple potential reflected XSS issues exist in NetIQ iManager versions before 2.7.7 Patch 10 HF2 and 3.0.3.2...

Fedora 22 : php-symfony-2.7.7-2.fc22 / php-twig-1.23.1-2.fc22 (2015-0b89738311)

Twig 1.23.1 2015-11-05 fixed some exception messages which triggered PHP warnings fixed BC on TwigTestNodeTestCase Twig 1.23.0 2015-10-29 - deprecated the possibility to override an extension by registering another one with the same name deprecated TwigExtensionInterface::getGlobals added...

Fedora 23 : php-symfony-2.7.7-2.fc23 / php-twig-1.23.1-2.fc23 (2015-0efcb5fbc5)

Twig 1.23.1 2015-11-05 fixed some exception messages which triggered PHP warnings fixed BC on TwigTestNodeTestCase Twig 1.23.0 2015-10-29 - deprecated the possibility to override an extension by registering another one with the same name deprecated TwigExtensionInterface::getGlobals added...

DEBIAN-CVE-2015-8124

Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id...

WordPress Plugin Ninja Forms 2.7.7 - Authentication Bypass

WordPress Plugin Ninja Forms 2.7.7 - Authentication Bypass source: https://www.securityfocus.com/bid/69740/info The Ninja Forms Plugin for WordPress is prone to an authorization-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthoriz...

Debian Security Advisory DSA 2991-1 (modsecurity-apache - security update)

Martin Holst Swende discovered a flaw in the way chunked requests are handled in ModSecurity, an Apache module whose purpose is to tighten the Web application security. A remote attacker could use this flaw to bypass intended modsecurity restrictions by using chunked transfer coding with a...

Bigace 2.7.7 <= CSRF add admin

Exploit for php platform in category web applications » Bigace 2.7.7 » --- Date : 29- 03- 2012 » --- Author : Expl0!Ts » --- Software Link : http://www.bigace.de/plugins/download/219-bigace2.7.7.zip » --- Version: 2.7.7 » --- Category: php » --- Tested on: wind xp & ubuntu 10.10 » --- Dork : your...

Mandriva Update for pidgin MDVA-2010:232 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVA-2010:232 pidgin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

HP Linux Imaging and Printing System Security Bypass Vulnerability

This host is installed with HP Linux Imaging and Printing System and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodhplipsecbypassvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ HP Linux Imaging and Printing System Security Bypass Vulnerability Authors: Sujit Ghosal...

CVE-2006-6072

CVE-2006-6072: SQL injection in BPG-InfoTech Easy Publisher and Smart Publisher/Pro 2.7.7 via the vjob parameter in bpg/publications_list.asp. Root cause: unsafe SQL construction allowing remote execution of arbitrary commands. Impact: remote attacker could execute arbitrary SQL, with partial con...