172 matches found
CVE-2018-6104
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
CVE-2018-6104
CVE-2018-6104 affects Google Chrome/Chromium where the URL Formatter mishandled confusable characters (IDN homographs), enabling domain spoofing. The issue lies in the URL formatting component and could allow a remote attacker to lure users to a spoofed domain. Vulnerable versions are Chrome/Chro...
CVE-2018-6104
Removed by vendor...
Security Bulletin: IBM Security Key Lifecycle Manager is affected by upload of files of dangerous types (CVE-2016-6104)
Summary IBM Security Lifecycle Manager allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. Vulnerability Details CVEID: CVE-2016-6104 DESCRIPTION: IBM Tivoli Key Lifecycle Manager could allow a remote attacker to...
Fedora 27 : chromium (2018-812b5d5a71)
Update to 66.0.3359.181. Security fix for CVE-2018-6085 CVE-2018-6086 CVE-2018-6087 CVE-2018-6088 CVE-2018-6089 CVE-2018-6090 CVE-2018-6091 CVE-2018-6092 CVE-2018-6093 CVE-2018-6094 CVE-2018-6095 CVE-2018-6096 CVE-2018-6097 CVE-2018-6098 CVE-2018-6099 CVE-2018-6100 CVE-2018-6101 CVE-2018-6102...
Critical: Red Hat Security Advisory: chromium-browser security update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
CVE-2013-6104
This CVE entry is rejected/not used per the initial description.
WordPress Multiple Plugin File Upload
import requests import random import string print "---------------------------------------------------------------------" print "Multiple Wordpress Plugin - Remote File Upload Exploit\nDiscovery: Larry W. Cashdollar\nExploit Author: Munir Njiru\nCWE: 434\n\n1. Zen App Mobile Native =3.0...
Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0
./ zen-mobile-app-native/server/images.php code for missing authentication Mobile App WordPress plugin lets you turn your website into a full-featured mobile application in minutes using Mobile App Builder. Vulnerability: The code in the file ./ zen-mobile-app-native/server/images.php doesn't...
CVE-2017-6104
Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0...
CVE-2017-6104
CVE-2017-6104 concerns the WordPress plugin Mobile App Native 3.0, where the file upload endpoint at zen-mobile-app-native/server/images.php accepts uploads without authentication and without validating the file content. The vulnerability allows an attacker to upload arbitrary files (e.g., PHP sh...
CVE-2017-6104
Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0...
WordPress Mobile App Native 3.0 Shell Upload
Title: Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0 Vulnerability Date: 2017-02-27 Download: https://wordpress.org/plugins/zen-mobile-app-native/ Vendor: https://profiles.wordpress.org/zendkmobileapp/ Notified: 2017-02-27 Vendor Contact: Description: Mobile App...
CVE-2016-6104
IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager) versions 2.5 (2.5.0.7 fixes) and 2.6 (2.6.0.2 fixes) are affected by CVE-2016-6104. The root cause is improper validation of file extensions, allowing a remote attacker to upload arbitrary files and potentially execute cod...
CVE-2015-6104
creationtimestamp| type| source ---|---|--- 2015-11-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38713 2026-07-29 12:01:37+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:58+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...
CVE-2015-6104
The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted embedded...
Remote code execution
The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted embedded...
CVE-2015-6104
CVE-2015-6104 affects the Adobe Type Manager Library in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8/8.1, 2012, RT/8.1, 10 Gold/1511). The vulnerability allows remote code execution via a crafted embedded font, due to a flaw in font processing in Win32k/font handling (Windo...
UBUNTU-CVE-2012-6104
blog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows remote attackers to obtain sensitive information from site-level blogs by leveraging the guest role and reading an RSS feed...