Apache Hadoop Privilege Escalation Vulnerability (Jun 2017)

Apache Hadoop is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:hadoop"; i...

GitHub Enterprise Remote Code Execution Vulnerability

GitHub Enterprise is the enterprise version of the code hosting platform launched by GitHub, which includes all the main features of Github, including commit history, code browsing, comparison view, push requests, issue tracking, Wiki, Gist shared snippets, team management, and more. A remote cod...

GitHub Enterprise 2.8.0 < 2.8.6 - Remote Code Execution Exploit

Exploit for ruby platform in category web applications !/usr/bin/ruby require "openssl" require "cgi" require "net/http" require "uri" SECRET = "641dd6454584ddabfed6342cc66281fb" puts ' . . ' puts ' \ | | | ' puts '/ \\ / /\ \ | | | | | / \ ' puts '\ / /\ \ / /// \ ' puts ' / / / / / '...

Github Enterprise Default Session Secret And Deserialization Vulnerability

This module exploits two security issues in Github Enterprise, version 2.8.0 - 2.8.6. The first is that the session management uses a hard-coded secret value, which can be abused to sign a serialized malicious Ruby object. The second problem is due to the use of unsafe deserialization, which allo...

WordPress InfiniteWP Admin Panel 2.8.0 Command Injection

------------------------------------------------------------------------ Command injection in InfiniteWP Admin Panel ------------------------------------------------------------------------ Sipke Mellema, July 2016 ------------------------------------------------------------------------ Abstract...

WordPress InfiniteWP Admin Panel 2.8.0 Authorization Bypass

------------------------------------------------------------------------ Authorization bypass in InfiniteWP Admin Panel ------------------------------------------------------------------------ Sipke Mellema, July 2016 ------------------------------------------------------------------------ Abstra...

Design/Logic Flaw

OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service service outage via a message...

PT-2018-19151

Name of the Vulnerable Software and Affected Versions mbed TLS versions prior to 2.1.11 mbed TLS versions prior to 2.7.2 mbed TLS versions prior to 2.8.0 Description The issue is related to a buffer over-read in the ssl parse server key exchange function, which could cause a crash when handling...

JVN#65668004: Dotclear vulnerable to cross-site scripting

Dotclear is a weblog software. Dotclear contains a cross-site scripting vulnerability. Impact If a user views a specially crafted page while logged in, an arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the...

OS Solution OSProperty 2.8.0 - SQL Injection

OS Solution OSProperty 2.8.0 was vulnerable to an unauthenticated SQL injection in the countryid parameter of the request made to retrieve a list of states for a given country. The version was not bumped when the vulnerability was fixed, but if you download after April 27th, you downloaded a fixe...

Debian Security Advisory DSA 2978-1 (libxml2 - security update)

Daniel P. Berrange discovered a denial of service vulnerability in libxml2 entity substitution. OpenVAS Vulnerability Test $Id: deb2978.nasl 6724 2017-07-14 09:57:17Z teissa $ Auto-generated from advisory DSA 2978-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright:...

DSA-2978-1 libxml2 - security update

Bulletin has no description...

GIMP 2.8.0 FIT File Format DoS

No description provided by source. Summary ======= There is a file handling DoS in GIMP the GNU Image Manipulation Program for the 'fit' file format affecting all versions Windows and Linux up to and including 2.8.0. A file in the fit format with a malformed 'XTENSION' header will cause a crash i...

CVE-2012-0841

libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted XML data...

CVE-2012-5883

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via vectors...

CVE-2012-5883

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via vectors...

CVE-2012-5883

CVE-2012-5883 is a cross-site scripting (XSS) vulnerability in the Flash component infrastructure of YUI (versions 2.8.0–2.9.0) used by Bugzilla 3.7.x/4.0.x (before 4.0.9), 4.1.x/4.2.x (before 4.2.4), and 4.3.x/4.4.x (before 4.4rc1). The issue allows remote attackers to inject arbitrary script/HT...

CVE-2012-0989

CVE-2012-0989 affects OneOrZero AIMS 2.8.0 Trial Edition build231211 (and possibly earlier). The vulnerability is a Cross‑site Scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. According to NVD, the base score is 4.3 (Medium) with ...

CVE-2010-5250

Untrusted search path vulnerability in the pthreadwin32processattachnp function in pthreadGC2.dll in Pthreads-win32 2.8.0 allows local users to gain privileges via a Trojan horse quserex.dll file in the current working directory. NOTE: some of these details are obtained from third party informati...

Debian Security Advisory DSA 2521-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 2521-1. OpenVAS Vulnerability Test $Id: deb25211.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2521-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...