corrieredellosport.it XSS vulnerability

Vulnerable URL: http://www.corrieredellosport.it/search?l=10=1=%22%3E%3Cscript%3Ealert/openbugbounty/%3C/script%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

CakePHP Cache Corruption Code Execution (CVE-2010-4335)

A remote code execution vulnerability exists in CakePHP. The vulnerability is due to the way the security component of CakePHP fails to validate user input. A remote attacker can exploit this issue by sending a specially crafted HTTP request...

CVE-2016-4335

CVE-2016-4335 is a stack-based buffer overflow in Lexmark Perceptive Document Filters during XLS parsing. The root cause is reading a user-controlled size from the header (MSOFBH) and using it for a memcpy into a fixed-size stack buffer, which, for a specific header instance (notably 0xF016, a ms...

openSUSE Security Update : redis (openSUSE-2015-634)

redis was updated to version 2.8.22 boo934048 to fix a LUA sandbox update. CVE-2015-4335 Details can be found on http://benmmurphy.github.io/blog/2015/06/04/redis-eval-lua-sandbox-esc ape/ For the other changes see in the package: /usr/share/doc/packages/redis/00-RELEASENOTES %NASLMINLEVEL 70300 ...

Fedora 22 : redis-2.8.21-1.fc22 (2015-9498)

Upstream 2.8.21 - Fix Lua sandbox escape and arbitrary code execution RHBZ 1228331 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for redis FEDORA-2015-9488

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for redis FEDORA-2015-9498

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-44232 CVE-2015-4335 affecting package compat-lua 5.1.5-17

Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command...

CVE-2015-4335

Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command...

BELL-CVE-2015-4335 CVE-2015-4335 does not affect BellSoft software

Bulletin has no description...

CVE-2015-4335

CVE-2015-4335: Redis EVAL Lua sandbox escape . The vulnerability affects Redis up to 2.8.21 and 3.x up to 3.0.2, where remote attackers could abuse the EVAL Lua command to execute arbitrary Lua bytecode, potentially escaping the sandbox and running code with Redis process privileges. Debian’s adv...

Debian DSA-3279-1 : redis - security update

It was discovered that redis, a persistent key-value database, could execute insecure Lua bytecode by way of the EVAL command. This could allow remote attackers to break out of the Lua sandbox and execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

[SECURITY] [DSA 3279-1] redis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3279-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini June 06, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3279-1 (redis - security update)

It was discovered that redis, a persistent key-value database, could execute insecure Lua bytecode by way of the EVAL command. This could allow remote attackers to break out of the Lua sandbox and execute arbitrary code. OpenVAS Vulnerability Test $Id: deb3279.nasl 6609 2017-07-07 12:05:59Z...

CVE-2014-4335

CVE-2014-4335 affects BarracudaDrive 6.7.2, where multiple XSS vulnerabilities allow remote attackers to inject arbitrary script or HTML via the rtl/protected/admin/ddns/ parameters (host or password). Root cause: insufficient input sanitization in the affected web interface. Impact: attacker can...

CVE-2012-4335

CVE-2012-4335 affects Samsung NET-i viewer 1.37.120316. A flaw in TCP handling allows remote attackers to trigger a denial of service (infinite loop) by sending a negative size value to NiwMasterService or NiwStorageService. Root cause is malformed input in TCP requests that produce looping behav...

CVE-2012-4335

creationtimestamp| type| source ---|---|--- 2012-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18765...

CVE-2011-4335

Contao CMS CVE-2011-4335 is an XSS vulnerability affecting Contao before 2.10.2. The issue arises in PATH_INFO handling to index.php (in teachers.html or teachers/ action), caused by insufficient input sanitization. OpenVAS entries describe the flaw as a cross-site scripting vulnerability in Cont...

CVE-2011-4335

creationtimestamp| type| source ---|---|--- 2011-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36225...

CVE-2010-4335

The validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted dataTokenfields value that is processed by the unserialize function, as demonstrated by...