CVE-2016-3177

Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors...

CVE-2016-3177

CVE-2016-3177 concerns GIFLIB 5.1.2 and affects the gifcolor.c component, with multiple use-after-free and double-free vulnerabilities described as having unspecified impact and attack vectors. The provided documents do not specify affected product variants beyond GIFLIB 5.1.2, nor provide remedi...

Liferay Portal 5.1.2 - Persistent XSS

No description provided by source...

CVE-2016-3977

Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service application crash via the background color index in a GIF file...

Crlf injection

CRLF injection vulnerability in the drupalsetheader function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP...

emlog 5.1.2 admin/plugin.php 存在本地文件包含漏洞

No description provided by source...

Internet Bug Bounty: Use after free with assign by ref to overloaded objects

Reported: 2015-07-15 16:30 UTC Fixed: 2015-07-21 14:20 UTC Bug Report: https://bugs.php.net/bug.php?id=70083 Fixed in PHP 5.6: http://git.php.net/?p=php-src.git;a=commitdiff;h=f57cb13c566613eec0e1c2f6d96d18565436a9b7 Fixed in 7:...

Authentication Bypass

Overview Versions of hapi-auth-jwt2 prior to version 5.1.2 are affected by a complete authentication bypass vulnerability when in the try authentication mode. Recommendation Update to version 5.1.2 or later. References - Issue 111 - PR 112 - GitHub Advisory...

vBulletin 5.1.2 Unserialize Code Execution Exploit

This Metasploit module exploits a PHP object injection vulnerability in vBulletin 5.1.2 to 5.1.9 This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'vBulletin 5.1.2 Unserialize Code...

vBulletin 5.1.2 Unserialize Code Execution

This module exploits a PHP object injection vulnerability in vBulletin 5.1.2 to 5.1.9 Module Options msf use exploit/multi/http/vbulletin/unserialize msf undefinedunserialize show actions ...actions... msf undefinedunserialize set ACTION msf undefinedunserialize show options ...show and set...

Fortinet FortiWeb Cross-Site Scripting Vulnerability

Fortinet FortiWeb is the United States of America Fitta Fortinet a protection, load balancing and acceleration of web applications, database information exchange between the web application layer firewall. A cross-site scripting vulnerability in Fortinet FortiWeb versions 5.1.2 through 5.3.4 allo...

CVE-2014-8619

Cross-site scripting XSS vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

vBulletin 5.1.2 SQL Injection Exploit 0day

vBulletin 5.1.2 SQL Injection Exploit + bonus fresh vBulletin forum database A security issue has been reported to us that affects the versions of vBulletin listed here: 5.0.4, 5.0.5, 5.1.0, 5.1.1, and 5.1.2 We have released security patches to account for this vulnerability. The issue may allow...

PHP 4.x tempnam() Function open_basedir Restriction Bypass

No description provided by source. source: http://www.securityfocus.com/bid/17439/info PHP is prone to multiple 'safemode' and 'openbasedir' restriction-bypass vulnerabilities. Successful exploits could allow an attacker to access sensitive information or to write files in unauthorized locations...

Horde 5.1.2 CSRF / Cross Site Scripting Vulnerabilities

Horde version 5.1.2 suffers from cross site request forgery and cross site scripting vulnerabilities. Exploit Title : CSRF Horde Groupware Web mail Edition Author:Marcela Benetrix Date: 10/28/13 version: 5.1.2 software link:http://www.horde.org/apps/webmail GroupWare Web mail Edition Horde...

CVE-2013-3033

SQL injection vulnerability in the server component in IBM Tivoli Remote Control 5.1.2 before 5.1.2-TIV-TRC512-IF0015 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-3033

CVE-2013-3033 affects IBM Tivoli Remote Control 5.1.2 servers. The vulnerability is an SQL injection in the server component that allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. The cited fix is 5.1.2-TIV-TRC512-IF0015, implying the issue was addressed...

TWiki 5.1.2 Command Execution

This security advisory alerts you of a potential security issue with TWiki installations: The %MAKETEXT% TWiki variable allows arbitrary shell command execution. The problem is caused by an underlying security issue in the Locale::Maketext CPAN module. Vulnerable Software Version Attack Vectors...

TWiki MAKETEXT Remote Command Execution

This module exploits a vulnerability in the MAKETEXT Twiki variable. By using a specially crafted MAKETEXT, a malicious user can execute shell commands since user input is passed to the Perl "eval" command without first being sanitized. The problem is caused by an underlying security issue in the...

Authentication flaw

modcluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, which allows remote attackers to bypass access restrictions and gain access to applications deployed...