70 matches found
Attackers Target 1M+ WordPress Sites To Harvest Database Credentials
Attackers were spotted targeting over one million WordPress websites in a campaign over the weekend. The campaign unsuccessfully attempted to exploit old cross-site scripting XSS vulnerabilities in WordPress plugins and themes, with the goal of harvesting database credentials. The attacks were...
VulnCheck KEV: CVE-2015-5468
Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter to includes/download.php...
CVE-2014-5468
CVE-2014-5468 is a Railo Remote File Include vulnerability affecting Railo 4.2.1 and earlier. A specially crafted request to thumbnail.cfm can cause the server to include a malicious PNG, enabling an attacker to download arbitrary PNGs and, via directory traversal, append ColdFusion markup to the...
CVE-2019-5468
CVE-2019-5468 describes a privilege escalation vulnerability in GitLab prior to versions 12.1.2, 12.0.4, and 11.11.6 when using Mattermost slash commands with a blocked account. The connected documents confirm the affected product (GitLab) and the vulnerable condition but do not provide further t...
CVE-2017-5468
An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox 53...
CVE-2017-5468
The CVE-2017-5468 issue affects Mozilla Firefox before version 53, related to an incorrect ownership model of privateBrowsing information exposed via developer tools. The underlying problem is in how privateBrowsing ownership is tracked in the developer tools, which can trigger a non-exploitable ...
CVE-2018-5468
Philips Intellispace Portal, all 7.0.x and 8.0.x versions, contains a remote desktop access vulnerability that could allow an attacker to gain unauthorized access and, in some cases, escalate privileges or execute arbitrary code. According to linked sources, the issue is being addressed by Philip...
CVE-2015-5468
Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter to includes/download.php...
CVE-2015-5468
The CVE-2015-5468 entry concerns WordPress WP e-Commerce Shop Styling plugin, affected version: before 2.6. The vulnerability is a Directory Traversal in includes/download.php, allowing a remote attacker to read arbitrary files by supplying a .. in the filename parameter. Impact is file disclosur...
CVE-2015-5468
Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter to includes/download.php...
CVE-2017-5468
An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox 53...
FreeBSD : mozilla -- multiple vulnerabilities (5e0a038a-ca30-416d-a2f5-38cbf5e7df33)
Mozilla Foundation reports : Please reference CVE/URL list for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors Redistribution a...
Railo Remote File Include (CVE-2014-5468)
This module exploits a remote file include vulnerability in Railo. A vulnerability in thumbnail.cfm allows an attacker to download an arbitrary PNG file, and by taking advantage of a directory traversal, an attacker can append cold fusion markup to the PNG file, and have it interpreted by the...
CVE-2016-5468
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5451...
CVE-2016-5468
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5451...
CVE-2016-5468
Summary: CVE-2016-5468 affects Oracle Siebel CRM (8.1.1, 8.2.2, IP2014, IP2015, IP2016) and specifically the Siebel UI Framework subcomponent (EAI). What’s vulnerable: A vulnerability in the Siebel UI Framework (EAI) that can be exploited by a remote, authenticated attacker over network access (H...
CVE-2015-5468
creationtimestamp| type| source ---|---|--- 2015-07-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37530...
Railo Remote File Include
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...
CVE-2014-5468
creationtimestamp| type| source ---|---|--- 2014-09-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34669 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/railocfmlrfi.rb 2025-02-06 03:13:41+00:00| seen|...