CVE-2014-10379

CVE-2014-10379 affects the WordPress WordPress Duplicate Post plugin. The connected documents consistently describe a SQL injection vulnerability in the plugin’s code path related to the duplication feature, with the plugin version before 2.6 identified as affected. The root cause is a SQL inject...

CVE-2014-10380

CVE-2014-10380 affects the WordPress Profile Builder plugin prior to 1.1.66, with multiple XSS flaws in forms. The connected Red Hat/CVE pages and other sources reiterate the same description. No explicit exploitation details, impact scope, or remediation/version-specific fixes are provided in th...

CVE-2014-10381

creationtimestamp| type| source ---|---|--- 2019-08-20 18:28:57+00:00| seen| https://t.me/cibsecurity/6232...

CVE-2014-10381

CVE-2014-10381 involves the WordPress plugin user-domain-whitelist prior to 1.5, which has a CSRF vulnerability . The issue stems from inadequate validation of requests, permitting an attacker to trigger unintended actions on a vulnerable site. The available data lists a CVSS v3 base score of 8.8...

Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple security vulnerabilities

Summary IBM Security Privileged Identity Manager has addressed the following security vulnerabilities. Vulnerability Details CVEID: CVE-2012-6708 DESCRIPTION: jQuery is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the jQuerystrInput function. A remot...

CVE-2014-10376

creationtimestamp| type| source ---|---|--- 2019-08-17 01:38:06+00:00| seen| https://t.me/cibsecurity/6199...

CVE-2014-10376

The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection...

CVE-2014-10376

CVE-2014-10376 affects the WordPress plugin i-recommend-this (before version 3.7.3). The vulnerability is a SQL injection in the plugin, allowing potential arbitrary SQL execution with network access and no authentication. CVSS: 3.0 base score 9.8 (CRITICAL) across confidentiality, integrity, and...

CVE-2014-10375

creationtimestamp| type| source ---|---|--- 2019-08-14 12:48:37+00:00| seen| https://t.me/cibsecurity/6116...

CVE-2014-10375

Removed by vendor...

CVE-2014-10375

CVE-2014-10375 concerns eXosip’s handling of TLS messages in the eXtl_tls.c module (pre-5.0.0) where a negative value in a Content-Length header is mishandled. The vulnerability originates from the content-length parsing logic in handle_messages, enabling malformed TLS headers to affect eXosip pr...

Lighthouse Remote 2014 Airborne Particle Counter

Binary data 764911.prm...

BSI Advance Hotel Booking System 2.0 - (booking_details.php) Persistent Cross-Site Scripting Vulnera

Exploit for php platform in category web applications Exploit Title:BSI Advance Hotel Booking System Persistent XSS Google Dork: intext:Hotel Booking System v2.0 © 2008 - 2012 Copyright Best Soft Inc Exploit Author: Angelo Ruwantha Vendor Homepage: http://www.bestsoftinc.com Software Link:...

NewStart CGSL CORE 5.04 / MAIN 5.04 : openssh Multiple Vulnerabilities (NS-SA-2019-0036)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openssh packages installed that are affected by multiple vulnerabilities: - scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded...

CVE-2014-8184

creationtimestamp| type| source ---|---|--- 2019-08-02 16:28:31+00:00| seen| https://t.me/cibsecurity/5894 2019-08-08 20:28:28+00:00| seen| https://t.me/cibsecurity/6009...

CVE-2014-8184

CVE-2014-8184 affects liblouis, version 2.5.x before 2.5.4. A stack-based buffer overflow in findTable() could cause a crash or potentially allow arbitrary code execution when a malformed file is opened. Applications using liblouis (e.g., Orca) are affected. The provided documents confirm the aff...

CVE-2014-8183

creationtimestamp| type| source ---|---|--- 2019-08-01 18:27:55+00:00| seen| https://t.me/cibsecurity/5869...

CVE-2014-8183

It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations...

CVE-2014-8183

CVE-2014-8183 affects Foreman in Red Hat Satellite 6.x (Foreman 1.x.x before 1.15.6). The root cause is improper enforcement of access controls on certain resources via the API, allowing an attacker with API access and knowledge of a resource name to access resources in other organizations. The R...

EulerOS 2.0 SP2 : util-linux (EulerOS-SA-2019-1737)

According to the version of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.CVE-2014-9114 Note that Tenable Network Security has extracted...