WordPress ProfileGrid – User Profiles, Groups and Communities plugin <= 2.8.5 - Authenticated Code Execution vulnerability

Authenticated Code Execution vulnerability found in WordPress ProfileGrid– User Profiles, Groups and Communities plugin versions = 2.8.5. Solution Update the WordPress ProfileGrid – User Profiles, Groups and Communities plugin to the latest available version at least 2.8.6...

WordPress Smooth Slider Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Smooth Slider plugin is one of the slider to add plug-ins . A SQL injection vulnerability exists in the...

GitHub Enterprise Remote Code Execution Vulnerability

GitHub Enterprise is the enterprise version of the code hosting platform launched by GitHub, which includes all the main features of Github, including commit history, code browsing, comparison view, push requests, issue tracking, Wiki, Gist shared snippets, team management, and more. A remote cod...

[SECURITY] Fedora 24 Update: pulp-puppet-2.8.6-2.fc24

Provides a collection of platform plugins, client extensions and agent handlers that provide Puppet support...

[SECURITY] Fedora 24 Update: pulp-rpm-2.8.6-2.fc24

Provides a collection of platform plugins, client extensions and agent handlers that provide RPM support...

Moodle Sealed User Login Vulnerability

Moodle is an open source web-based teaching and learning application. Versions of Moodle prior to 2.6.11, 2.7.8, 2.8.6, and 2.9 have a security vulnerability when self-registration is enabled, which allows blocked users to bypass restrictions on logging into the application...

Moodle Sensitive Course Structure Disclosure Vulnerability

Moodle is an open source web-based teaching and learning application. A security vulnerability exists in Moodle versions prior to 2.6.11, 2.7.8, 2.8.6, and 2.9, which allows remote attackers to exploit the vulnerability to view course structure information...

Moodle site-wide event monitoring rule subscription vulnerability

Moodle is an open source web-based teaching and learning application. Moodle versions prior to 2.6.11, 2.7.8, 2.8.6, and 2.9 suffer from a security vulnerability in the site-wide rules in the event monitoring tool that allows remote, authenticated attackers to subscribe to event monitoring rules...

Cross site scripting

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

OpenX 2.8.6 File Upload

File upload vulnerability in OpenX ofcuploadimage.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Plugin Bannerize 2.8.6 - SQL Injection

Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0-- " -H "X-Requested-With:XMLHttpRequest" http://www.site.com/wp-content/plugins/wp-bannerize/ajaxclickcounter.php --------------- Vulnerable code --------------- if @isset$SERVER'HTTPXREQUESTEDWITH'...

WordPress Multiple Vulnerabilities (Nov 2009)

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...

Fedora 12 : wordpress-2.8.6-2.fc12 (2009-11710)

2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended. Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 10 : lynx-2.8.6-18.fc10 (2008-9952)

Fri Nov 7 2008 Jiri Moskovcak - 2.8.6-18 - Fixed CVE-2008-4690 lynx: remote arbitrary command execution. via a crafted lynxcgi: URL thoger Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

XChat PySys_SetArgv函数命令执行漏洞

BUGTRAQ ID: 33444 CVECAN ID: CVE-2009-0315 X-Chat是一款免费开放源代码的IRC客户端。 xchat的Python模块中使用了不可信任的搜索路径，本地用户可以在当前工作目录中放置恶意的Python文件并利用PySysSetArgv函数调用中的安全漏洞（CVE-2008-5983）执行任意代码。 X-Chat X-Chat 2.8.7b X-Chat X-Chat 2.8.6 厂商补丁： X-Chat ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Fedora 8 : lynx-2.8.6-12.fc8 (2008-9597)

Mon Nov 10 2008 Jiri Moskovcak - 2.8.6-12 - Fixed CVE-2008-4690 lynx: remote arbitrary command execution. via a crafted lynxcgi: URL thoger - Fri May 30 2008 Jiri Moskovcak - 2.8.6-11 - updated to latest upstream version 2.8.6rel5 - Resolves: 214205 - Wed Jan 9 2008 Jiri Moskovcak - 2.8.6-10 -...

CVE-2006-2095

Phex before 2.8.6 allows remote attackers to cause a denial of service application hang by initiating multiple chat requests to a single user and then logging off...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...