Sitepress Multilingual 3.6.3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications FULL DISCLOSURE Product : Sitepress Multilingual CMS Plugin Exploit Author : Rahul Pratap Singh Version : 3.6.3 and Below Home page Link : https://wpml.org/ Website: https://0x62626262.wordpress.com Date : 08/10/2018 Unauthenticated Stored XSS...

Sitepress Multilingual 3.6.3 Cross Site Scripting

FULL DISCLOSURE Product : Sitepress Multilingual CMS Plugin Exploit Author : Rahul Pratap Singh Version : 3.6.3 and Below Home page Link : https://wpml.org/ Website: https://0x62626262.wordpress.com Date : 08/10/2018 Unauthenticated Stored XSS Vulnerability: aaaaaaaaaaaaa- Description:...

Input validation

A vulnerability in the Secure Copy Protocol SCP server of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to access the shell of the underlying Linux operating system on the affected device. The vulnerability is due to improper input validation of...

Design/Logic Flaw

In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software including Microsoft Excel. For example, the CSV data may contai...

Code injection

DISPUTED Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that...

DEBIAN-CVE-2017-17522

Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is...

PT-2017-4242 · Python +2 · Python +2

Name of the Vulnerable Software and Affected Versions: Python versions through 3.6.3 Description: The issue is related to insufficient neutralization of special elements in a request, which may allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of...

Core Security Bypass Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other features.Joomla! Core is a Joomla! kernel . A security bypass vulnerability exists in Joomla! Core versions 3.4.4 through 3.6.3...

Joomla 3.4.4 - 3.6.3 not authorized to create user vulnerability

Author: p0wd3r know Chong Yu 404 security lab Date: 2016-10-26 0x00 vulnerability overview 1. Vulnerability description Joomla is a free open source content management system, recently researchers found in its 3. 4. 4 to 3. 6. 3 version there are two vulnerabilities: CVE-2016-8869, the...

Joomla! There create an account/privilege elevation vulnerability please update-vulnerability warning-the black bar safety net

Vulnerability description Account creation the Account Creation） Affected version: 3.4. 4 to 3. 6. 3 Report Date: 2 0 1 6 years 1 0 months 1 No. 8 Fix the date: 2 0 1 6 years 1 0 month 2 5 Number CVE number: CVE-2 0 1 6-8 8 7 0 Description: not strictly check the Allow users on the site does not...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the tcpdump-3.6.3 package of the Red Hat Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

window.print() DoS on multiple browsers

No description provided by source. -- Firefox 3.6.3 window.print DoS version 2 Found By: DrIDE Credits: Asheesh kumar Mani Tripathi Reference: http://www.exploit-db.com/exploits/11432 Tested On: Firefox 3.6.3 on OSX 10.6.3; Safari 4.0.5 on OSX 10.6.3 Tested On: -- html titleDrIDE Firefox 3.6.3 &...

WordPress Better WP Security 3.6.3 XSS / Disclosure

Exploit Title: Wordpress Plugin - Better WP Security multiple vulnerability Date: 2014 11 Fabruary Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: https://wordpress.org/plugins/better-wp-security/ Tested on: Lin...

Apache Solr Directory Traversal Vulnerability (SOLR-4882, SOLR-5520) - Linux

Apache Solr is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...

Siteserver 3.6.3 version SQL injection vulnerability-vulnerability warning-the black bar safety net

! The latest official version 3. 6. 4。 Scan siteserver 3.6.3 version of the directory structure, get URL as follows http://www.domain.gov.cn/siteserver/CMS/consoletableMetadata.aspx?ENName=cmsContent&TableType=BackgroundContent The injection point there ENName, completely without any filtering...

CVE-2013-2782

CVE-2013-2782 affects Schneider Electric Trio J-Series License Free Ethernet Radio firmware 3.6.0–3.6.3, where the AES encryption key is reused across different customer installations due to improper key generation. This weakens cryptographic protection and could allow remote attackers to access ...

PT-2013-3398 · Gnome · Gnome Online Accounts +1

Name of the Vulnerable Software and Affected Versions: Gnome Online Accounts GOA versions 3.6.x through 3.6.2 Gnome Online Accounts GOA versions 3.7.x through 3.7.90 Description: The issue is related to the improper validation of SSL certificates when creating accounts for providers who use the...

Fedora 18 : gnome-online-accounts-3.6.3-1.fc18 (2013-3414)

Update to 3.6.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 18 : kernel-3.6.3-3.fc18 (2012-16787)

The Linux 3.6.3 stable update contains a large number of bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for kernel FEDORA-2012-16669

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-16669 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...