CVE-2014-10378

CVE-2014-10378 affects the WordPress duplicate-post plugin. The vulnerable component is the duplicate-post plugin prior to version 2.6, with a cross-site scripting (XSS) flaw that could allow an attacker to execute client-side code in a victim’s browser. The provided documents do not include expl...

CVE-2014-10378

The duplicate-post plugin before 2.6 for WordPress has XSS...

CVE-2014-10379

CVE-2014-10379 affects the WordPress WordPress Duplicate Post plugin. The connected documents consistently describe a SQL injection vulnerability in the plugin’s code path related to the duplication feature, with the plugin version before 2.6 identified as affected. The root cause is a SQL inject...

CVE-2014-10380

CVE-2014-10380 affects the WordPress Profile Builder plugin prior to 1.1.66, with multiple XSS flaws in forms. The connected Red Hat/CVE pages and other sources reiterate the same description. No explicit exploitation details, impact scope, or remediation/version-specific fixes are provided in th...

CVE-2014-10381

creationtimestamp| type| source ---|---|--- 2019-08-20 18:28:57+00:00| seen| https://t.me/cibsecurity/6232...

CVE-2014-10381

CVE-2014-10381 involves the WordPress plugin user-domain-whitelist prior to 1.5, which has a CSRF vulnerability . The issue stems from inadequate validation of requests, permitting an attacker to trigger unintended actions on a vulnerable site. The available data lists a CVSS v3 base score of 8.8...

Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple security vulnerabilities

Summary IBM Security Privileged Identity Manager has addressed the following security vulnerabilities. Vulnerability Details CVEID: CVE-2012-6708 DESCRIPTION: jQuery is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the jQuerystrInput function. A remot...

CVE-2014-10376

creationtimestamp| type| source ---|---|--- 2019-08-17 01:38:06+00:00| seen| https://t.me/cibsecurity/6199...

CVE-2014-10376

The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection...

CVE-2014-10376

CVE-2014-10376 affects the WordPress plugin i-recommend-this (before version 3.7.3). The vulnerability is a SQL injection in the plugin, allowing potential arbitrary SQL execution with network access and no authentication. CVSS: 3.0 base score 9.8 (CRITICAL) across confidentiality, integrity, and...

CVE-2014-10375

creationtimestamp| type| source ---|---|--- 2019-08-14 12:48:37+00:00| seen| https://t.me/cibsecurity/6116...

CVE-2014-10375

Removed by vendor...

CVE-2014-10375

CVE-2014-10375 concerns eXosip’s handling of TLS messages in the eXtl_tls.c module (pre-5.0.0) where a negative value in a Content-Length header is mishandled. The vulnerability originates from the content-length parsing logic in handle_messages, enabling malformed TLS headers to affect eXosip pr...

Lighthouse Remote 2014 Airborne Particle Counter

Binary data 764911.prm...

BSI Advance Hotel Booking System 2.0 - (booking_details.php) Persistent Cross-Site Scripting Vulnera

Exploit for php platform in category web applications Exploit Title:BSI Advance Hotel Booking System Persistent XSS Google Dork: intext:Hotel Booking System v2.0 © 2008 - 2012 Copyright Best Soft Inc Exploit Author: Angelo Ruwantha Vendor Homepage: http://www.bestsoftinc.com Software Link:...

NewStart CGSL CORE 5.04 / MAIN 5.04 : openssh Multiple Vulnerabilities (NS-SA-2019-0036)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openssh packages installed that are affected by multiple vulnerabilities: - scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded...

CVE-2014-8184

creationtimestamp| type| source ---|---|--- 2019-08-02 16:28:31+00:00| seen| https://t.me/cibsecurity/5894 2019-08-08 20:28:28+00:00| seen| https://t.me/cibsecurity/6009...

CVE-2014-8184

CVE-2014-8184 affects liblouis, version 2.5.x before 2.5.4. A stack-based buffer overflow in findTable() could cause a crash or potentially allow arbitrary code execution when a malformed file is opened. Applications using liblouis (e.g., Orca) are affected. The provided documents confirm the aff...

CVE-2014-8183

creationtimestamp| type| source ---|---|--- 2019-08-01 18:27:55+00:00| seen| https://t.me/cibsecurity/5869...

CVE-2014-8183

It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations...