CVE-2013-4691

The CVE-2013-4691 entry documents an XSS vulnerability in Sencha Labs Connect (Node.js HTTP server framework) via the connect.methodOverride() function. The root cause is a lack of proper validation of client-supplied data by the web application, enabling potential execution of client-side code. ...

CVE-2013-3085

creationtimestamp| type| source ---|---|--- 2019-12-27 02:40:14+00:00| seen| https://t.me/cibsecurity/8866 2024-03-17 10:46:48+00:00| seen| https://t.me/ctinow/209858...

CVE-2013-3088

creationtimestamp| type| source ---|---|--- 2019-12-27 02:40:13+00:00| seen| https://t.me/cibsecurity/8865 2024-03-17 10:46:49+00:00| seen| https://t.me/ctinow/209859...

CVE-2013-2011

creationtimestamp| type| source ---|---|--- 2019-12-27 00:55:10+00:00| seen| https://t.me/cibsecurity/8862 2024-03-17 10:46:47+00:00| seen| https://t.me/ctinow/209857...

CVE-2013-4318

creationtimestamp| type| source ---|---|--- 2019-12-27 00:55:09+00:00| seen| https://t.me/cibsecurity/8861 2020-01-02 18:49:08+00:00| seen| https://t.me/cibsecurity/8944 2024-03-17 10:46:50+00:00| seen| https://t.me/ctinow/209860...

CVE-2013-3088

Belkin N900 router F9K1104v1 contains an Authentication Bypass using "Javascript debugging"...

CVE-2013-3085

An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2...

CVE-2013-3088

The CVE-2013-3088 entry concerns the Belkin N900 router (F9K1104v1), which is vulnerable to an authentication bypass via a Javascript debugging issue. The NVD description explicitly states an Authentication Bypass using

CVE-2013-3088

Belkin N900 router F9K1104v1 contains an Authentication Bypass using "Javascript debugging"...

CVE-2013-3085

CVE-2013-3085 concerns Belkin F5D8236-4 v2 where an authentication bypass exists in the device’s web management interface. The CVSS-based metrics indicate a high to critical impact: CVSS 2.0 base score 7.5 (Network attack, no authentication, partial confidentiality/integrity/availability impact) ...

CVE-2013-2011

CVE-2013-2011 affects the WordPress plugin W3 Super Cache (aka WP Super Cache) for versions before 1.3.2. The issue is a PHP code-execution vulnerability caused by an incomplete fix from CVE-2013-2009, allowing remote attackers to inject arbitrary code. Affected: WordPress/W3 Super Cache plugin p...

CVE-2013-2011

WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of an incomplete fix for CVE-2013-2009...

CVE-2013-4318

CVE-2013-4318 affects the Ruby Gems Features package (Ruby Features 0.3.0). The issue is a file handling flaw where input submitted to /tmp/out.html is not properly validated, enabling a local cross-site scripting (XSS) attack. Some sources describe the risk as a local XSS, while others reference...

Exploit for CVE-2013-0422

K8tools 20191130 声明: 工具仅供安全研究或授权渗透，非法用途后果自负。 下载: https://github.com/k8gege/K8tools PS: 不定期更新,文件比较大，可按需下载。工具有BUG或建议可直接Github上留言 提权工具均可在远控Cmd或WebShell运行，大部份经过修改编译兼容性稳定性更好 注意：不保证永久有效,喜欢自行保存。 综合工具 + 扫描工具 Ladon 5.7 大型内网渗透扫描神器内置40个功能,支持Cobalt Strike + 扫描工具 K8Cscan5.4 大型内网渗透扫描器内置30个功能,支持Cobalt Strike +...

Security Bulletin: Vulnerability in OSPFv2 Routing Protocol Used in IBM i Operating System (CVE-2013-0149 and CVE-2013-5385)

Problem : The OSPFv2 routing protocol specified in RFC 2328 has an ambiguity that can be exploited and allow for traffic to be black-holed and/or redirected. A PTF is provided. Resolving The Problem VULNERABILITY DETAILS: DESCRIPTION: A potential protocol vulnerability has been identified in the...

Security Bulletin: Cross frame scripting vulnerability in Connect:Enterprise HTTP (CVE-2013-6327)

Summary IBM Sterling Connect:Enterprise HTTP Option is vulnerable to cross frame scripting attacks. Vulnerability Details CVE ID: CVE-2013-6327 DESCRIPTION: IBM Sterling Connect:Enterprise HTTP Option could allow a cross-frame scripting attack, caused by improper validation of input within a fram...

EulerOS 2.0 SP3 : perl (EulerOS-SA-2019-2648)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - 1 cpan/Archive-Tar/bin/ptar, 2 cpan/Archive-Tar/bin/ptardiff, 3 cpan/Archive-Tar/bin/ptargrep, 4 cpan/CPAN/scripts/cpan, 5 cpan/Digest-SHA/shasum,...

Security Bulletin:IBM Sterling Connect:Direct File Agent is affected by a vulnerability in the IBM Runtime Environment, Java™ Technology Edition (CVE-2013-1500)

Summary IBM Sterling Connect:Direct File Agent is shipped with IBM Runtime Environment, Java™ Technology Edition the “IBM RE”, that is based on an Oracle Java Runtime Environment JRE. Oracle has released the June 2013 critical patch updates CPU that contain security vulnerability fixes for the JR...

CVE-2013-0202

creationtimestamp| type| source ---|---|--- 2019-12-17 20:54:12+00:00| seen| https://t.me/cibsecurity/8724 2024-03-12 15:11:35+00:00| seen| https://t.me/ctinow/205737...

Description of the security update for SharePoint Foundation 2013: November 12, 2019

Description of the security update for SharePoint Foundation 2013: November 12, 2019 Summary This security update resolves an information disclosure vulnerability that exists in Microsoft SharePoint if an attacker uploads a specially crafted file to the SharePoint Server. To learn more about the...