WordPress Plugin Mail Masta 1.0 - SQL Injection

WordPress Plugin Mail Masta 1.0 - SQL Injection Exploit Title: Multiple SQL injection vulnerabilities in Mail Masta aka mail-masta plugin 1.0 for Wordpress. Date: 02/18/2017 Exploit Author: Hanley Shun Vendor Homepage: https://wpcore.com/plugin/mail-masta Software Link:...

WordPress plugin Mail Masta 1.0 - Multiple SQL Injection vulnerabilities

Multiple SQL Injection vulnerabilities found in WordPress plugin Mail Masta version 1.0 CVE-2017-6095, CVE-2017-6096, CVE-2017-6097, CVE-2017-6098. Solution No information available. We were unable to find this plugin on WordPress.org plugin repository at the moment of creation of this database...

CVE-2015-6096

CVE-2015-6096 affects Microsoft .NET Framework 2.0 SP2 onward to 4.6. The root cause is an XML DTD parser vulnerability that allows an external entity declaration to be processed with an entity reference, enabling an attacker to read local files (XXE information disclosure). The connected advisor...

Microsoft .NET Framework CVE-2015-6096 XML Handling Information Disclosure Vulnerability

Description The Microsoft .NET Framework is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. Technologies Affected Microsoft .NET Framework 2.0 SP2 Microsoft .NET Framework 3.5 Microso...

Microsoft .NET Information Disclosure (MS15-118: CVE-2015-6096)

An information disclosure vulnerability exists in Microsoft .NET Framework. The specific vulnerability involves DTD problem in the underlying calls to XmlParser. An attacker who successfully exploited this vulnerability could gain read access to local files on the target system...

Nagios-history.cgi-Exec-Code

CVE-2012-6096 - Nagios history.cgi Remote Command Execution Another year, another reincarnation of classic and trivial bugs to exploit. This time we attack Nagios.. or more specifically, one of its CGI scripts. !/usr/bin/python CVE-2012-6096 - Nagios history.cgi Remote Command Execution...

GLSA-201412-23 : Nagios: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-23 Nagios: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Nagios. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to execute arbitrary code,...

CVE-2014-6096

Cross-site scripting XSS vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-6096

IBM Security Identity Manager 6.x is vulnerable to cross-site scripting (XSS) via crafted URLs, due to improper input validation. Affected: SIM 6.0 family up to 6.0.0.3 (IF14). Impact per publicly cited sources indicates potential for script execution in a victim’s browser within the site’s conte...

Nagios history.cgi Remote Command Execution Vulnerability

No description provided by source. !/usr/bin/python CVE-2012-6096 - Nagios history.cgi Remote Command Execution =========================================================== Another year, another reincarnation of classic and trivial bugs to exploit. This time we attack Nagios.. or more specifically...

openSUSE Security Update : icinga (openSUSE-SU-2013:0169-1)

imported upstream version 1.7.4 - bnc797237 - core: add fix for CVE-2012-6096 - history.cgi remote command execution Eric Stanley, Markus Frosch 3532 - MF - core: fix embedded perl segfault 3027 - MF - core: fix duplicated events on check scheduling logic for new events Andreas Ericsson 2676 2993...

openSUSE Security Update : icinga (openSUSE-SU-2013:0206-1)

fixed Stack based buffer overflow in web interface: bnc797237 - CVE-2012-6096 - icinga-fix-bnc797237.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-54. The text...

Fedora Update for nagios FEDORA-2013-10950

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2653-1] icinga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2653-1 [email protected] http://www.debian.org/security/ Florian Weimer March 26, 2013 http://www.debian.org/security/faq -...

SuSE 11.2 Security Update : nagios (SAT Patch Number 7328)

This update fixes a stack overflow in nagios web interface. CVE-2012-6096 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 10 Security Update : nagios (ZYPP Patch Number 8460)

This update fixes a stack overflow in the nagios web interface. CVE-2012-6096 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid64927;...

[SECURITY] [DSA 2616-1] nagios3 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2616-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire February 03, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2616-1] nagios3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2616-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire February 03, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2616-1 (nagios3 - buffer overflow in CGI scripts)

A buffer overflow problem has been found in nagios3, a host/service/network monitoring and management system. A malicious client could craft a request to history.cgi and cause application crashes. OpenVAS Vulnerability Test $Id: deb2616.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated fro...

Nagios 3 history.cgi Command Injection

Added: 01/28/2013 CVE: CVE-2012-6096 BID: 56879 OSVDB: 88322 Background Nagios is a network host and service monitoring and management system. Problem The Nagios history.cgi script is vulnerable to a stack overflow when parsing the host parameter. This may allow an attacker to execute arbitrary...