7778 matches found
Command injection
Command injection vulnerability in Trend Micro Smart Protection Server Standalone 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations...
CVE-2017-11396
Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement remote code injections...
Fake IRS notice delivers customized spying tool
While macro-based documents and scripts make up for the majority of malspam attacks these days, we also see some campaigns that leverage documents embedded with exploits. Case in point, we came across a malicious Microsoft Office file disguised as a CP2000 notice. The Internal Revenue Service IRS...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 first name or 2 last name user details, or the 3 repository, 4 repository group, or 5 user group description...
CVE-2015-1864
Multiple cross-site scripting XSS vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 first name or 2 last name user details, or the 3 repository, 4 repository group, or 5 user group description...
CVE-2015-1864
Kallithea (before 0.2.1) is vulnerable to multiple XSS in the administration pages via the first/last name user details and repository/repository group/user group descriptions. Affected component: admin pages; root cause: unsanitized input in multiple fields. Impact: potential injection of arbitr...
CVE-2015-1864
Multiple cross-site scripting XSS vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 first name or 2 last name user details, or the 3 repository, 4 repository group, or 5 user group description...
outis - Custom Remote Administration Tool (RAT)
outis is a custom Remote Administration Tool RAT or something like that. Think Meterpreter or Empire-Agent. However, the focus of this tool is neither an exploit toolkit there are no exploits nor persistent management of targets. The focus is to communicate between server and target system and to...
CVE-2017-14600
Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $GET'delblack', resulting in Information Disclosure...
OpenFire 3.10.2 < 4.0.1 - Multiple Vulnerabilities
Several vulnerabilities doscovered in OpenFire version 3.10.2 to 4.0.1 Product Description OpenFire is an opensource project under GNU GPL licence. It provides a Jabber/XMPP server fully develloped in Java. It's develloped by the Ignite realtime community. The actual version of the product is...
RHEL 7 : 389-ds-base (RHSA-2017:2569)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2569 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server an...
Red Hat 389 Administration Server Elevation of Privilege Vulnerability
Red Hat 389 Administration Server is an enterprise-class Linux directory server from Red Hat. The server fully supports the LDAPv3 specification and features scalability, multi-master replication, and more. A security vulnerability exists in Red Hat 389 Administration Server versions prior to...
China Enforces Real-Name Policy to Regulate Online Comments
If you reside in China, your Internet life within the borders will soon be even more challenging. Last Friday, China's top Internet regulator announced a new set of rules that would force citizens to post comments using their real-world identities on Internet forums and other web platforms. Yes,...
CVE-2015-0233
Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38...
UBUNTU-CVE-2015-0233
Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38...
Design/Logic Flaw
Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38...
CVE-2015-0233
Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38...
CVE-2015-0233
Removed by vendor...
CVE-2015-0233
CVE-2015-0233 affects the 389 Administration Server prior to version 1.1.38. The issue is described as multiple insecure temporary file vulnerabilities in the server. Impact is limited to confidentiality, integrity, and availability (per CVSS), with local attack vector and the need for high privi...