CVE-2017-8778

GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document...

CVE-2017-8778

Removed by vendor...

Kingsoft Wordsmith Android app has multiple overstepping vulnerabilities

Kingsoft Wordsmith is a translation and learning software from Kingsoft Corporation. Kingsoft Wordmaster Android app has multiple overstepping vulnerabilities. Attackers can use this vulnerability to traverse other people's information and modify their avatars and nicknames...

Multiple Cross-Site Scripting Vulnerabilities in b2evolution

b2evolution is a PHP and MySQL based blogging software developed by software developer FrancoisPlanque. A cross-site scripting vulnerability exists in the file type table of b2evolution versions prior to 6.8.3. The vulnerability can be exploited by remote attackers to inject arbitrary web script ...

Age of Avatars-艾瓦達榮耀 - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Age of Avatars-艾瓦達榮耀 published at the 'play' market has multiple vulnerabilities...

SOOP Portal Raven 1.0b Shell Upload Vulnerability

No description provided by source. Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability Google Dork: Powered by SOOP Portal Raven 1.0b Date: 06-12-2010 Author: Sun Army Version: Raven 1.0b Tested on: Win 2003 Exploit 1.Register On Site 2.Shell Renamed to .asp.jpg shell.asp.jpg...

User avatar upload endpoint is vulnerable to XSRF

Stash, as 2.12, will allows users to upload local avatars to their account STASHDEV-6182. That upload is submitted to a non-API end point that accepts a POST request with the avatar as data-uri|https://en.wikipedia.org/wiki/DataUri. Currently, because the form is submitted by AJAX, the end point ...

Several REST interfaces vulnerable to XSRF

Several REST web services are vulnerable to XSRF|https://www.owasp.org/index.php/Cross-SiteRequestForgeryCSRF, allowing malicious web pages to execute them under the context of a logged in users browser. It's understood that JIRA REST interfaces are typically protected against XSRF based on the...

Several REST interfaces vulnerable to XSRF

Several REST web services are vulnerable to XSRF|https://www.owasp.org/index.php/Cross-SiteRequestForgeryCSRF, allowing malicious web pages to execute them under the context of a logged in users browser. It's understood that JIRA REST interfaces are typically protected against XSRF based on the...

SA-CONTRIB-2011-003 - Janrain Engage (RPX) - Multiple Vulnerabilities

RPX recently renamed Janrain Engage is a service that acts as a middleman between a site and external login providers like Facebook, Yahoo, WindowsLive, etc. As part of this functionality it offers the ability to take a user's avatar on these services and download it for use as the user's profile...

SOOP Portal Raven 1.0b Shell Upload Vulnerability

Exploit for asp platform in category web applications ================================================= SOOP Portal Raven 1.0b Shell Upload Vulnerability ================================================= Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability Google Dork: "Powered...

Fedora 13 : kvirc-4.0.0-1.fc13 (2010-10522)

KVIrc 4.0.0 Notable new features of this release include: - Definitive and stable port to the Qt4 libraries - Better support for server tecnologies: CAPS, STARTTLS, SASL, irc services... - A new UPnP module to control and remotely map your router ports for DCC - A totally rewritten MDI subsystem,...

Fedora 12 : kvirc-4.0.0-1.fc12 (2010-10529)

KVIrc 4.0.0 Notable new features of this release include: - Definitive and stable port to the Qt4 libraries - Better support for server tecnologies: CAPS, STARTTLS, SASL, irc services... - A new UPnP module to control and remotely map your router ports for DCC - A totally rewritten MDI subsystem,...

Burning Board Lite 1.0.2 Shell Upload

======================================================================================== | Title : Burning Board Lite 1.0.2 Upload Shell Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Powered by Burning Board Lite 1.0.2 | Tested on: windo...

Amiro.CMS <= 5.4.0.0 xss

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-004 Amiro.CMS Multiple XSS Objective: Amiro = 5.4.0.0 Type: Cross-site scripting Threat: Medium Date Discovered: 01.07.2009 Date of notification...

CVE-2009-3053

Directory traversal vulnerability in the Agora comagora component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter to the avatars page, reachable through index.php...

USN-791-1: Moodle vulnerabilities

Thor Larholm discovered that PHPMailer, as used by Moodle, did not correctly escape email addresses. A local attacker with direct access to the Moodle database could exploit this to execute arbitrary commands as the web server user. CVE-2007-3215 Nigel McNie discovered that fetching https URLs di...

Simple Machines Forum Multiple Vulnerabilities

This host has Simple Machines Forum installed which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbsimplemachinesforummultvulnapr09.nasl 4869 2016-12-29 11:01:45Z teissa $ Simple Machines Forum Multiple Vulnerabilities. Authors: Nikita MR Copyright: Copyright c 2009...

Simple Machines Forum (SMF) 1.x < 1.1.7 Multiple Vulnerabilities

Simple Machines Forum SMF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

vBulletin 3.8.2 Cross Site Scripting

vBulletin 3.8.2 adminCP Cross-Site Scripting R.I.P DrtRp - We miss you --------------------------------------------- Original Post at http://forum.aria-security.com/en/showthread.php?p=1179 Greetz to Aura & all Aria-Security Mods & Members These were all tested on vbulletin 3.8.0 RC2 so other...