CVE-2017-8382

admidio 3.2.8 has CSRF in admprogram/modules/members/membersfunction.php with an impact of deleting arbitrary user accounts...

CVE-2017-8382

CVE-2017-8382 affects Admidio 3.2.8 via a Cross-Site Request Forgery in the file adm_program/modules/members/members_function.php, allowing an attacker to delete arbitrary user accounts. The vulnerability is CSRF-based; exploitation relies on a crafted request from an authenticated session (requi...

Wordpress enhanced-tooltipglossary plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . enhanced-tooltipglossary is one of the plug-ins to improve the performance of the view image caching . A...

CVE-2016-1000132

Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8...

Nokia Multimedia Player 1.0 SEH Unicode Exploit

No description provided by source. ? Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp sp3 running on VMwa...

Web Host Automation Ltd. Helm 3.2.8 ForgotPassword.ASP Cross-Site Scripting Vulnerability

No description provided by source...

Kiwi CatTools TFTP <= 3.2.8 - Remote Path Traversal Vulnerability

No description provided by source. Path traversal security vulnerability in Kiwi CatTools TFTP up to 3.2.8 server can lead to information disclosure and remote code execution Risk: High DISCUSSION Kiwi CatTools TFTP server doesn.t properly verify filename in PUT and GET request which can be used ...

Maxthon Browser 3.0.20.1000 - .ref .replace DoS

No description provided by source. ?html head Exploit Title: Maxthon Browser v3.0.20.1000 .ref .replace DOS Date: January 30 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://dl.maxthon.com/mx3/mx3.0.20.3000.exe Version: v3.0.20.1000 Tested on: Windows xp sp3 ,windows 7 ,linux...

DEBIAN-CVE-2014-1904

Cross-site scripting XSS vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action...

CVE-2014-1904

Cross-site scripting XSS vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action...

DSA-2712-1 otrs2 - privilege escalation

Bulletin has no description...

[SECURITY] Fedora 18 Update: rubygem-activerecord-3.2.8-5.fc18

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

[SECURITY] Fedora 18 Update: rubygem-activerecord-3.2.8-3.fc18

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

CVE-2012-3464

Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' quote character...

Google Chrome 8.0.552.237 Denial Of Service

Exploit Title: Google Chrome v8.0.552.237 .replace DOS Date: January 30 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.google.com/chrome Version: v8.0.552.237 Tested on: Windows xp sp3 ,windows 7 ,linux running on VMware Fusion 3.1 and VirtualBox 3.2.8 mail----...

Maxthon Browser v3.0.20.1000 .ref .replace DOS

Exploit for windows platform in category dos / poc  Exploit Title: Maxthon Browser v3.0.20.1000 .ref .replace DOS Date: January 30 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://dl.maxthon.com/mx3/mx3.0.20.3000.exe Version: v3.0.20.1000 Tested on: Windows xp sp3 ,windows 7...

Bugzilla Informaton Disclosure Vulnerability

This host is running Bugzilla and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbbugzillainfodisclosurevuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Bugzilla Informaton Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbone Networks...

Audiotran 1.4.2.4 - Local Overflow (SEH) (DEP Bypass)

Audiotran 1.4.2.4 - Local Overflow SEH DEP Bypass Exploit Title: Audiotran 1.4.2.4 SEH Overflow Exploit DEP Bypass Date: 09/20/10 Credit/Bug found by : Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Author: Muhamad Fadzil Ramli - mind1355 at gmail dot com Software Link:...

Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH

Exploit for windows platform in category local exploits =========================================================== Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH =========================================================== Exploit Title: Acoustica MP3 Audio Mixer 2.471 Extended M3U...

Cross site scripting

Cross-site scripting XSS vulnerability in forgotPassword.asp in Helm Hosting Control Panel 3.2.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the txtEmailAddress parameter...