CVE-2020-5233

CVE-2020-5233 affects the OAuth2 Proxy project (github.com/pusher/oauth2_proxy) prior to version 5.0, where an open redirect vulnerability exists in the redirect handling. The vulnerable component is the redirect/redirect URL validation path, enabling an attacker to silently harvest authenticatio...

CVE-2019-5233

CVE-2019-5233 affects Huawei smartphones, specifically Taurus-AL00B with firmware earlier than 10.0.0.41 (SP2C00E41R3P2). The issue is an improper authentication vulnerability that, if exploited, could allow an attacker to access certain components. The underlying root cause and affected componen...

CVE-2018-5233

Cross-site scripting XSS vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/tools...

CVE-2018-5233

Grav CMS

Grav CMS 1.2.4 Cross Site Scripting

CVE-2018-5233 Grav CMS admin plugin Reflected Cross Site Scripting XSS vulnerability Description Grav CMS is a flat-file CMS using Markdown files for content management Official Website. It has been elected "Best Open Source CMS of 2016" by CMS critic. The application does not always filter user...

Multiple Vulnerabilities Affecting Four Rapid7 Products

Today, we'd like to announce eight vulnerabilities that affect four Rapid7 products, as described in the table below. While all of these issues are relatively low severity, we want to make sure that our customers have all the information they need to make informed security decisions regarding the...

tophotels.ru XSS vulnerability

Vulnerable URL: http://www.tophotels.ru//hotels/?xss"posed=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5233 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability...

CVE-2015-5202

CVE-2015-5233 describes a vulnerability in Foreman where versions before 1.8.4 and 1.9.x before 1.9.1 do not properly enforce the view_hosts permissions. This allows remote authenticated users with the view_reports permission to read reports from arbitrary hosts, or users with the destroy_reports...

CVE-2017-5233

CVE-2017-5233 involves a DLL preloading vulnerability in Rapid7 AppSpider Pro installers. Installers prior to version 6.14.053 could load a malicious DLL located in the current working directory when the installer is executed, allowing code execution under the context of the installer. Connected ...

CVE-2016-5233

Summary: CVE-2016-5233 affects specific Huawei Mate 8 models running NXT-AL10/NXT-CL00/NXT-DL00/NXT-TL00 firmwares prior to their builds ending in C00B182, C92B182, C17B182, and C01B182. A remote attacker could use a rogue base station to obtain sensitive subscriber signal strength information du...

CVE-2016-5233

Huawei Mate 8 smartphones with software NXT-AL10 before NXT-AL10C00B182, NXT-CL00 before NXT-CL00C92B182, NXT-DL00 before NXT-DL00C17B182, and NXT-TL00 before NXT-TL00C01B182 allow remote base stations to obtain sensitive subscriber signal strength information via vectors involving improper...

CVE-2015-5233

Foreman is vulnerable due to improper enforcement of the view_hosts permission in versions before 1.8.4 and 1.9.x before 1.9.1. This allows remote authenticated users with read access to reports (view_reports) to read reports from arbitrary hosts, and users with delete access (destroy_reports) to...

GeniXCMS 0.0.1 - Multiple Vulnerabilities

Exploit for php platform in category web applications GeniXCMS v0.0.1 Remote Unauthenticated SQL Injection Exploit Vendor: MetalGenix Product web page: http://www.genixcms.org Affected version: 0.0.1 Summary: GenixCMS is a PHP Based Content Management System and Framework CMSF. It's a simple and...

GeniXCMS 0.0.1 - Multiple Vulnerabilities

GeniXCMS v0.0.1 Remote Unauthenticated SQL Injection Exploit Vendor: MetalGenix Product web page: http://www.genixcms.org Affected version: 0.0.1 Summary: GenixCMS is a PHP Based Content Management System and Framework CMSF. It's a simple and lightweight of CMSF. Very suitable for Intermediate...

CVE-2014-5233

Siemens SIMATIC WinCC Sm@rtClient for iOS (pre-1.0.2) has an information-credential flaw: an error in the credential-processing/handling allows a physically proximate attacker with local access to extract Sm@rtServer credentials. The issue is tied to the app’s credential-storage/processing mechan...

CVE-2011-5233

Summary: CVE-2011-5233 is a heap-based buffer overflow in IrfanView prior to 4.32, triggered by crafted TIFF images (Rows Per Strip and Samples Per Pixel). Affected software: IrfanView before 4.32. Impact per sources: remote code execution due to memory corruption in TIFF handling (as described)....

CVE-2012-5233

Cross-site scripting XSS vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote authenticated users with edit stickynotes privileges to inject arbitrary web script or HTML via unspecified vecotrs...

CVE-2012-5233

Cross-site scripting XSS vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote authenticated users with edit stickynotes privileges to inject arbitrary web script or HTML via unspecified vecotrs...

CVE-2012-5233

CVE-2012-5233 affects the Drupal Stickynote module (versions before 7.x-1.1). The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote authenticated users with edit_stickynotes privileges to inject arbitrary script or HTML through unspecified vectors. Impact is web page/script in...

CVE-2010-5233

CVE-2010-5233 affects Virtual DJ 6.1.2 Trial b301 and is described as an untrusted search path vulnerability (DLL hijacking) where a trojan HDJAPI.dll placed in the current working directory can grant local privileges, demonstrated with a directory containing an mp3 file. This is the core technic...