1398 matches found
CVE-2015-8861
The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted...
phpMyAdmin Open Redirect Vulnerability
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. An open redirection vulnerability exists in phpMyAdm...
Network Scanner 4.0.0 - SEH Local Buffer Overflow
Author: k0Sh1 Vulnerability reproduction Network Scanner is a scan tool, which has a directed domain scanning function, but this function for loading the string is not strict control, such as Textbox length, or the length of the checksum result if you do not enter the domain name, but change the...
Network Scanner 4.0.0 - Local Buffer Overflow (SEH)
!/usr/bin/python -- coding: utf-8 -- Network Scanner Version 4.0.0.0 - SEH Overflow Exploit by n30m1nd Date: 2016-10-21 Exploit Author: n30m1nd Exploit Title: Network Scanner Version 4.0.0.0 SEH Based Exploit Vendor Homepage: http://www.mitec.cz/ Software Link:...
Cybozu Garoon Open Redirect Vulnerability (CNVD-2016-06711)
Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. An open redirection vulnerability exists in Cyboz...
Micro Focus (Novell) Filr Detection (SSH Login)
SSH login-based detection of Micro Focus Novell Filr. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Samba libcli/smb/smbXcli_base.c Security Mechanism Bypass Vulnerability
Samba is a freeware implementation of the SMB protocol on Linux and UNIX systems, consisting of a server and a client program. Samba 4.0.0 - 4.4.4 libcli/smb/smbXclibase.c suffers from a security vulnerability in its implementation, which allows a man-in-the-middle attacker, via the...
JVN#41772178: Apache Cordova vulnerable to arbitrary plugin execution
Apache Cordova provided by the Apache Software Foundation is a framework for creating mobile applications for various platforms. iOS applications built using Apache Cordova contain a vulnerability where arbitrary plugins may be executed. Impact Accessing a specially crafted URL may result in...
"server signing = mandatory" not enforced
Description Due to a regression introduced in Samba 4.0.0, an explicit "server signing = mandatory" in the global section of the smb.conf was not enforced for clients using the SMB1 protocol. As a result it does not enforce smb signing and allows man in the middle attacks. This problem applies to...
JVN#27548431: gollum vulnerable to file exposure
gollum is a wiki system that uses git repositories. gollum contains a vulnerability which may allow an attacker to view arbitrary files on the server. Impact A remote attacker may view arbitrary files on the server. Solution Update the Software Update to the latest version according to the...
RT -- two XSS vulnerabilities
Best Practical reports: RT 4.0.0 and above are vulnerable to a cross-site scripting XSS attack via the user and group rights management pages. This vulnerability is assigned CVE-2015-5475. It was discovered and reported by Marcin Kopec at Data Reliance Shared Service Center. RT 4.2.0 and above ar...
PHP News Script 4.0.0 - SQL Injection
Exploit Title: PHP News Script 4.0.0 Sql Injection Date: 2015-08-01 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://phpnewsscript.com/ Version: 4.0.0 Tested on: CentOS Exploit : http://server/allgallery.php?id=-9999%27+sql-command+%23 Test :...
Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in the samba4-4.0.0 operating system package from CentOS; their exploitation may lead to breaches of confidentiality, integrity, and accessibility of protected information...
Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities exist in the samba4-pidl-4.0.0 package for the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities may lead to violations of the confidentiality, integrity, and accessibility of protected information...
Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The Samba4-python-4.0.0 package for the Red Hat Enterprise Linux operating system has multiple vulnerabilities. Its use may lead to violations of confidentiality, integrity, and accessibility of the protected information...
Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities of the samba4-devel-4.0.0 package for the Red Hat Enterprise Linux operating system may lead to violations of confidentiality, integrity, and accessibility of protected information...
Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities exist in the samba4-dc-4.0.0 package for the CentOS operating system. Exploitation of these vulnerabilities may lead to violations of the confidentiality, integrity, and accessibility of protected information...
Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in the samba4-swat-4.0.0 package for the CentOS operating system; its use may lead to violations of confidentiality, integrity, and accessibility of protected information...
Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities exist in the samba4-dc-4.0.0 package for the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities may lead to violations of the confidentiality, integrity, and accessibility of protected information...
InstantASP InstantForum.NET Multiple Cross-Site Scripting Vulnerabilities
InstantASP InstantForum.NET is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...