CVE-2017-16356: Improper Neutralization of Input During Web Page Generation

Reflected XSS in Kubik-Rubik SIGE aka Simple Image Gallery Extended before 3.3.0 allows attackers to execute JavaScript in a victim's browser by having them visit a plugins/content/sige/pluginsige/print.php link with a crafted img, name, or caption parameter...

UBUNTU-CVE-2017-14741

The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service infinite loop via a crafted font file...

maywood.com XSS vulnerability

Vulnerable URL: http://www.maywood.com/EVCommerce/ViewImage.asp?ImageName=/EVCommerce/images/edgeCrimped.jpg=1"...

DEBIAN-CVE-2016-10146

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service memory consumption via unspecified vectors...

CVE-2016-10146

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service memory consumption via unspecified vectors...

CVE-2016-10146: Undefined Security Weakness

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service memory consumption via unspecified vectors...

UBUNTU-CVE-2016-10146

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service memory consumption via unspecified vectors...

PT-2016-3136 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue is related to multiple memory leaks in the caption and label handling code, allowing remote attackers to cause a denial of service due to memory consumption via unspecified...

SQL Injection Vulnerability in the CaptionType Parameter of the GetCaption.ashx Page of Nanjing Fargo Streaming Media System

Nanjing Fargo streaming media system is mainly used for applications such as network TV, live event broadcasting, remote education, enterprise roadshow and multimedia public information service, etc. The system integrates computer, network, audio and video and mobile communication and other relat...

Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar (MS15-061)

Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar MS15-061 Source: https://code.google.com/p/google-security-research/issues/detail?id=321 The PoC triggers a crashes due to a pool buffer overflow while drawing the caption bar of window. The trigger depends on the current window...

Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar (MS15-061)

Source: https://code.google.com/p/google-security-research/issues/detail?id=321 The PoC triggers a crashes due to a pool buffer overflow while drawing the caption bar of window. The trigger depends on the current window layout and resolution. The PoC takes an offset on the command line to be able...

PT-2015-6986

Name of the Vulnerable Software and Affected Versions October CMS versions prior to build 272 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image. Recommendations For October CMS versions prior to build...

CVE-2015-5612: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image...

Shopify: XSS in experts.shopify.com

Hi, XSS vulnerability in experts.shopify.com, Steps to verify: 1. Go to https://experts.shopify.com 2. Sign up for an expert. Please do note that you must create a new account if you already have, do not use existing account or an account that did not yet apply for an expert then you will ask to...

jmd-cms - Multiple Vulnerabilities

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-19-jmd-cms-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : JMD-CMS Multiple Remote...

PT-2014-4618

Name of the Vulnerable Software and Affected Versions Thank You Counter Button plugin version 1.8.7 Description The issue allows remote attackers to inject arbitrary web script or HTML via the thanks caption, thanks caption style, or thanks style parameter to "wp-admin/options.php". This can lead...

PT-2013-5056

Name of the Vulnerable Software and Affected Versions Review Board versions 1.6.x through 1.6.20 Review Board versions 1.7.x through 1.7.16 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the Branch field or the caption of an uploaded...

CVE-2013-4519: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the 1 Branch field or 2 caption of an uploaded file...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Scald module 7.x-1.x before 7.x-1.1 for Drupal allow remote attackers to inject arbitrary web script or HTML via the 1 flashuri, 2 flashwidth, or 3 flashheight in the scaldflashscaldprerender function in...

CVE-2013-4174

Multiple cross-site scripting XSS vulnerabilities in the Scald module 7.x-1.x before 7.x-1.1 for Drupal allow remote attackers to inject arbitrary web script or HTML via the 1 flashuri, 2 flashwidth, or 3 flashheight in the scaldflashscaldprerender function in...