9438 matches found
CVE-2014-1839
The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file...
CVE-2014-1839
The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file...
CVE-2014-0094
The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method...
MyBB < 1.6.12 Multiple Vulnerabilities
According to its version number, the MyBB install hosted on the remote web server is affected by multiple vulnerabilities : - A cross-site scripting flaw exists in misc.php due to improper validation of input when generating a small popup list of smilies. This allows a remote attacker to create a...
phpMyAdmin 3.5.x - 4.0.x < 4.0.5 'Header.class.php' Clickjacking Bypass
Binary data 8150.prm...
[SECURITY] Fedora 20 Update: perl-CGI-Application-4.50-9.fc20
CGI::Application is an Object-Oriented Perl module which implements an Abstract Class. It is not intended that this package be instantiated directly. Instead, it is intended that your Application Module will be implemented as a Sub-Class of CGI::Application...
Design/Logic Flaw
java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows attackers to execute arbitrary Java code by leveraging access to the searchBoxJavaBridge interface at certain Android API...
CVE-2014-1939
java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows attackers to execute arbitrary Java code by leveraging access to the searchBoxJavaBridge interface at certain Android API...
EasyTalk 2.5 /Home/Lib/Action/IndexAction.class.php SQL注入漏洞
No description provided by source...
PHPCMS 9.5.3 /phpcms/modules/vote/classes/vote_tag.class.php SQL注入漏洞
No description provided by source...
CVE-2014-0731
The administration interface in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to bypass authentication and read Java class files via a direct request, aka Bug ID CSCum46497...
Cisco Unified Communications Manager Java Class File Availability Vulnerability
A vulnerability in the administration interface of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to access Java class files. The vulnerability is due to insufficient authentication enforcement. An attacker could exploit this vulnerability by...
Easytalk任意文件包含漏洞
简要描述： 过滤不严。 详细说明： 在appaction.class.php中 public function index parent::tologin; $appname=trim$this-get'appname'; $action=$this-get'action';//直接调用方法 $out=urldecode$GET'out'; //是否开启应用 $app=M'Plugins'-where"directory='$appname' AND available=1"-find; $this-assign'app',$app; if !$app...
CVE-2014-1478
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the MPostWriteBarrier class in...
CVE-2014-1478
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the MPostWriteBarrier class in...
Oracle Java MBeanInstantiator.findClass Remote Code Execution - Ver2 (CVE-2013-0422)
A code execution vulnerability has been reported in Oracle Java. The vulnerability is due to an access control failure in the com.sun.jmx.mbeanserver package and in the invokeWithArguments method of the java.lang.invoke.MethodHandle class. A remote attacker could trigger this vulnerability by usi...
MW6 Technologies Aztec - ActiveX Data Buffer Overflow (PoC)
MW6 Technologies Aztec - ActiveX Data Buffer Overflow PoC object id=TestObj clas...
MW6 Technologies Aztec - ActiveX 'Data' Buffer Overflow (PoC)
object id=TestObj classid="CLSID:F359732D-D020-40ED-83FF-F381EFE36B54" style="width:...
MW6 Technologies MaxiCode - ActiveX 'Data' Buffer Overflow (PoC)
!-- =========================================================================== Problem: The Data parameter is subject to a buffer overflow DEFINITELY leading to arbitrary code execution. COM Object - 2355C601-37D1-42B4-BEB1-03C773298DC8 MW6MaxiCode Class File Description : MaxiCode ActiveX File...