CVE-2015-3359

Multiple cross-site scripting XSS vulnerabilities in the Room Reservations module before 7.x-1.1 for Drupal allow remote authenticated users with the "Administer the room reservations system" permission to inject arbitrary web script or HTML via the 1 node title of a "Room Reservations Category" ...

PayPal Wants To Integrate Password with Human Body

You would have been holding a number of online accounts for different services, but how many of you hold a different and unique password for every single account? Probably a very few of you. The majority of people have one or two passwords that are quite simple and easy to remember and comfortabl...

SpringMVC in the XXE vulnerability testing-vulnerability warning-the black bar safety net

SpringMVC framework support for XML to Object mapping, the interior is the use of two global interface Marshaller and Unmarshaller, one implementation is to use the Jaxb2Marshaller class implementation, the class nature implements two global interfaces for XML and Object bi-directional parsing. A...

F5 BIG-IP - ASM cross-site scripting (XSS) vulnerability CVE-2015-1050

F5 BIG-IP is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if...

tipask注入漏洞

简要描述： sql注入漏洞（2次注入） 详细说明： 官方最新源码测试 在control中answer.php中 追问模块---追问 / function onappend $this-load"message"; $qid = intval$this-get2 ? $this-get2 : intval$this-post'qid'; $aid = intval$this-get3 ? $this-get3 : intval$this-post'aid'; $question = $ENV'question'-get$qid; $answer = $ENV'answer'-get$aid...

openSUSE Security Update : privoxy (openSUSE-2015-115)

privoxy was updated to version 3.0.23 to fix three security issues. These security issues were fixed : - Fixed a DoS issue in case of client requests with incorrect chunk-encoded body. When compiled with assertions enabled the default they could previously cause Privoxy to abort CVE-2015-1380. -...

DEBIAN-CVE-2015-1380

jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service abort via a crafted chunk-encoded body...

UBUNTU-CVE-2015-1380

jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service abort via a crafted chunk-encoded body...

CVE-2015-1380

jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service abort via a crafted chunk-encoded body...

Code injection

jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service abort via a crafted chunk-encoded body...

CVE-2015-1380

jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service abort via a crafted chunk-encoded body...

PT-2015-5253

Name of the Vulnerable Software and Affected Versions Privoxy versions prior to 3.0.23 Description The issue allows remote attackers to cause a denial of service, resulting in an abort, by sending a crafted chunk-encoded body. Recommendations For versions prior to 3.0.23, update to version 3.0.23...

CVE-2015-1380: Improper Input Validation

jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service abort via a crafted chunk-encoded body...

PT-2015-4029

Name of the Vulnerable Software and Affected Versions QPR Portal versions 2014.1.1 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the note-creation page. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the...

CVE-2014-8266: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body field...

F5 BIG-IP Application Security Manager Cross-Site Scripting Vulnerability

The F5 BIG-IP Application Security Manager ASM is a BIG-IP application security manager from F5 USA that provides users with application delivery security solutions, as well as secure remote access, protection of email, and simplified Web access control, while enhancing network and application...

Cross site scripting

Cross-site scripting XSS vulnerability in F5 BIG-IP Application Security Manager ASM before 11.6 allows remote attackers to inject arbitrary web script or HTML via the Response Body field when creating a new user account...

PT-2015-5037

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Application Security Manager ASM versions prior to 11.6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Response Body field when creating a new user account. This...

CVE-2015-1050: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in F5 BIG-IP Application Security Manager ASM before 11.6 allows remote attackers to inject arbitrary web script or HTML via the Response Body field when creating a new user account...

DEBIAN-CVE-2014-3571

OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake bod...