595 matches found
Flowdock API Script Insertion
Document Title: =============== Flowdock API Bug Bounty 3 - Invite Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1574 Release Date: ============= 2015-09-24 Vulnerability Laboratory ID VL-ID:...
Flowdock API Script Insertion
Document Title: =============== Flowdock API Bug Bounty 1 - Description Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1560 Release Date: ============= 2015-09-22 Vulnerability Laboratory ID VL-ID:...
PT-2022-3252 · Python +11 · Python +11
Name of the Vulnerable Software and Affected Versions: Python versions prior to 3.10.8 Python versions 3.7, 3.8, 3.9 Description: The issue is related to insufficient argument validation in the mailcap module of the Python interpreter. This may allow a remote attacker to inject shell commands int...
[SECURITY] Fedora 20 Update: mingw-libtasn1-3.8-2.fc20
libtasn1 is the ASN.1 library used in GNUTLS. This package contains the MinGW Windows cross compiled libtasn1 library...
[SECURITY] Fedora 20 Update: libtasn1-3.8-3.fc20
A library that provides Abstract Syntax Notation One ASN.1, as specified by the X.680 ITU-T recommendation parsing and structures management, and Distinguished Encoding Rules DER, as per X.690 encoding and decoding func tions...
Abrt / Apport Race Condition / Symlink
Hello, this is CVE-2015-1318 and CVE-2015-1862 essentially the same bugs in two different implementations, apport and abrt respectively. These were discussed on the vendors list last week. If the first character of kern.corepattern sysctl is a pipe, the kernel will invoke the specified program, a...
CVE-2015-0644
AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service device reload via a crafted TCP packet, aka Bug ID...
DLA-158-1 request-tracker3.8 - security update
Bulletin has no description...
activePDF WebGrabber 3.8 ActiveX Control 缓冲区溢出漏洞
No description provided by source...
WordPress 3.7.1 & 3.8 - Cleartext Admin Credentials Disclosure
...
Xpient Cash Drawer Operation Vulnerability
No description provided by source. Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Xpient Cash Drawer Operation Vulnerability 1. Advisory Information Title: Xpient Cash Drawer Operation Vulnerability Advisory ID: CORE-2013-0517 Advisory URL:...
vBulletin Advanced User Tagging Mod - Stored XSS Vulnerability
No description provided by source. Exploit Title: Advanced User Tagging vBulletin - Stored XSS Vulnerability Google Dork: intext:usertagpro Date: 10.07.2013 Exploit Author: 0iZy5 Vendor Homepage: www.backtrack-linux.ro Software Link:...
IglooFTP PRO 3.8 - Multiple Buffer Overflow Vulnerabilities (2)
No description provided by source. source: http://www.securityfocus.com/bid/8117/info IglooFTP PRO for Windows platforms has been reported prone to multiple buffer overrun vulnerabilities. The issue likely presents itself due do a lack of sufficient bounds checking performed on data that is copie...
TCPDB 3.8 - Remote Content Change Bypass Vulnerabilities
No description provided by source. Securitylab.ir Application Info: Name: TCPDB Version: 3.8 Website: http://www.tcpdb.com/ Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Contents Change...
EggAvatar 2.3.2 for vBulletin 3.8.x Local File Read
No description provided by source. !/usr/bin/env perl use LWP::UserAgent; sub banner print \n; print DSecurity \n; print \n; print Email:dsecurity.vnatgmail.com \n; print \n; if@ARGV2 print Usage: $0 address filename\n; print Example: $0 http://localhost/vbb test test index.php\n; exit;...
TerminatorX 3.8 - Multiple Command-Line and Environment Buffer Overrun Vulnerabilities (2)
No description provided by source...
Linux Kernel 3.8.x - open-time Capability file_ns_capable() Privilege Escalation
No description provided by source. / usernsrootsploit.c by / / Copyright c 2013 Andrew Lutomirski. All rights reserved. / / You may use, modify, and redistribute this code under the GPLv2. / define GNUSOURCE include unistd.h include sched.h include sys/types.h include sys/wait.h include sys/mman....
Typo3 3.7/3.8/4.0 Class.TX_RTEHTMLArea_PI1.PHP Multiple Remote Command Execution Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21680/info TYPO3 is prone to multiple vulnerabilities that allow attackers to execute arbitrary commands. This issue occurs because the application fails to properly sanitize user-supplied data. Exploiting these issues...
SA-CONTRIB-2014-054 - Views - Access Bypass
The Views module provides a flexible method for Drupal site designers to control how lists and tables of content, users, taxonomy terms and other data are presented. The module doesn't sufficiently check handler access when returning the list of handlers from viewplugindisplay::gethandlers. The...
CVE-2014-0165
WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php...