Fedora Update for wordpress FEDORA-2012-6511

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD : wordpress -- multiple vulnerabilities (b384cc5b-8d56-11e1-8d7b-003067b2972c)

Wordpress reports : External code has been updated to non-vulnerable versions. In addition the following bugs have been fixed : - Limited privilege escalation where a site administrator could deactivate network-wide plugins when running a WordPress network under particular circumstances. -...

CVE-2012-2404

wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via unspecified vectors...

CVE-2012-2404

wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via unspecified vectors...

CVE-2012-2404

wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via unspecified vectors...

CVE-2012-2404

CVE-2012-2404 affects WordPress WP-Comments post handling; wp-comments-post.php pre-3.3.2 allows offsite redirects that enable remote XSS via unspecified vectors. Affected software: WordPress prior to 3.3.2. Root cause: offsite redirects in wp-comments-post.php leading to cross-site scripting. Im...

CVE-2012-2404

wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via unspecified vectors...

Design/Logic Flaw

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4786...

Design/Logic Flaw

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787...

MS11-090: Cumulative Security Update of ActiveX Kill Bits (2618451)

The remote Windows host has one or more ActiveX controls installed that could be abused to execute arbitrary code remotely if a user can be tricked into viewing a malicious web page using Internet Explorer. Three of these controls are from Microsoft itself while the others are from third-party...

HP Easy Printer Care Software HPTicketMgr.dll Directory Traversal (CVE-2011-2404)

A code execution vulnerability has been reported in HP Easy Printer Care Software. The vulnerability is due to insufficient input validation by an ActiveX control within the affected product. A remote attacker may exploit this vulnerability by enticing an affected user to open a malicious link...

HP Easy Printer Care Software HPTicketMgr.dll ActiveX Control Remote Code Execution

Added: 08/29/2011 CVE: CVE-2011-2404 BID: 49100 OSVDB: 74510 Background HP Easy Printer Care Software is a tool to control and monitor up to 20 HP printers. Problem HP Easy Printer Care Software HPTicketMgr.dll is vulnerable to directory traversal due to insufficient input validation by the...

HP Easy Printer Care Software HPTicketMgr.dll ActiveX Control Remote Code Execution

Added: 08/29/2011 CVE: CVE-2011-2404 BID: 49100 OSVDB: 74510 Background HP Easy Printer Care Software is a tool to control and monitor up to 20 HP printers. Problem HP Easy Printer Care Software HPTicketMgr.dll is vulnerable to directory traversal due to insufficient input validation by the...

HP Easy Printer Care XMLSimpleAccessor Class ActiveX Code Execution

Exploit for windows platform in category remote exploits $Id: hpeasyprintercarexmlsimpleaccessor.rb 13593 2011-08-20 00:11:22Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for...

CVE-2011-2404

creationtimestamp| type| source ---|---|--- 2011-08-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17697 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/hpeasyprintercarexmlsimpleaccessor.rb 2025-02-06...

[security bulletin] HPSBPI02698 SSRT100404 rev.1 - HP Easy Printer Care Software Running on Windows, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02949847 Version: 1 HPSBPI02698 SSRT100404 rev.1 - HP Easy Printer Care Software Running on Windows, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be...

DSquare Exploit Pack: D2SEC_HPEASY

Name| d2sechpeasy ---|--- CVE| CVE-2011-2404 Exploit Pack| D2ExploitPack Description| HP Easy Printer Care ActiveX Control Remote Code Execution Vulnerability Notes|...

CVE-2011-2404

CVE-2011-2404 affects HP Easy Printer Care Software 2.5 and earlier, via an ActiveX control in HPTicketMgr.dll. It allows remote attackers to download an arbitrary program to a client machine and execute it, via unspecified vectors; this is a separate vulnerability from CVE-2011-4786 and CVE-2011...

CVE-2010-2404

CVE-2010-2404 is a persistent cross-site scripting vulnerability in Oracle iRecruitment (File Uploading Module) within Oracle E-Business Suite. The advisory notes a vulnerable flow on the account information page where users upload resumes (Word documents), enabling an attacker to inject XSS payl...

Sagem Routers Remote Authentication Bypass

!/usr/bin/perl Exploit Title: Sagem routers Remote auth bypass Exploit Date: 04/03/2010 Author: AlpHaNiX Software Link: null Version: Sagem Routers F@ST 1200/1240/1400/1400W/1500/1500-WG/2404 Tested on: Sagem F@ST 2404 Code : use HTTP::Request; use HTTP::Headers; use LWP::UserAgent; system'cls';...