Cisco Adaptive Security Appliance Message Authentication Code Checking Vulnerability

A vulnerability in the Transport Layer Security TLS code on the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to modify the contents of an encrypted TLS packet without detection of the modifications. The vulnerability is due to an error on the firmware of t...

CVE-2015-2821

TYPO3 Neos is affected: versions 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allow remote editors to access, create, and modify content nodes in other editors’ workspaces via unspecified vectors. The connected docs confirm the affected versions and the nature of the access, but do not provide the r...

CVE-2015-2821

TYPO3 Neos 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allows remote editors to access, create, and modify content nodes in the workspace of other editors via unspecified vectors...

逐浪cms多处绕过验证导致的安全问题。

简要描述： RT 详细说明： 哎，通过DEMO的测试站点来枚举一下吧 http://demo.zoomla.cn/Admin/I/Shop/Orderlistinfo.aspx?id=9 http://demo.zoomla.cn/Admin/I/Content/ShowContent.aspx?GID=43&modeid=19 http://demo.zoomla.cn/Admin/Template/LabelManage.aspx http://demo.zoomla.cn/Admin/Content/NodeManage.aspx...

TCLHttpd 3.4.2 - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/8688/info It has been reported that several of the modules included with TCLHTtpd are vulnerable to cross-site scripting attacks. According to the report, the Status, Debug, Mail and Admin modules are affected by these...

CVE-2014-2116: Improper Input Validation

Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882...

OkCupid: Stored XSS on your site..

Affected site: http://www.okcupid.com/ Vulnerability:XSS. Severity:Medium/High. Description: Cross site scripting also referred to as XSS is a vulnerability that allows an attacker to send malicious code usually in the form of Javascript to another user. Because a browser cannot know if the scrip...

CVE-2013-2123

The Node access user reference module 6.x-3.x before 6.x-3.5 and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to content containing a user reference field when the author update/delete grants are enabled and the author's user account is deleted, which allows remote attacke...

CVE-2013-2123

The CVE-2013-2123 issue affects the Drupal module Node access user reference (nodeaccess_userreference) for Drupal 6.x-3.x (before 6.x-3.5) and Drupal 7.x-3.x (before 7.x-3.10). The root cause is inadequate access restriction for content containing a user reference field when author update/delete...

CVE-2013-2123: Undefined Security Weakness

The Node access user reference module 6.x-3.x before 6.x-3.5 and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to content containing a user reference field when the author update/delete grants are enabled and the author's user account is deleted, which allows remote attacke...

phAlbum PHP Gallery Script Cross Site Scripting

Exploit Title: phAlbum php Gallery Script Reflected XSS Vulnerability Date: 2012 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr Issue: Reflected XSS Risk level: High Malicious users may inject JavaScript, VBScript, ActiveX, HTML or...

CMS Wizard Cross Site Scripting

================================================================= -=CMS wizard Cross Site Scripting ================================================================= Author: XaDaL Date: 14-02-2012 vendor: http://www.cmswizard.co.uk/ tested on: windows mobile dork : powered by CMS wizard This...

[SECURITY] [DSA 2263-2] movabletype-opensource security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2263-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 30, 2011 http://www.debian.org/security/faq -...

DSA-2263-2 movabletype-opensource - several

Bulletin has no description...

KLA10184 Vulnerability in Fenrir Grani

Script interaction prevention was missing in Fenrir Grani. By exploiting this vulnerability malicious users can modify clipboard content. This vulnerability can be exploited remotely via a specially designed web site. Original advisories Original bulletin Related products Sleipnir Grani CVE list...

CVE-2010-3919: Undefined Security Weakness

Fenrir Grani 4.5 and earlier does not prevent interaction between web script and the clipboard, which allows remote attackers to read or modify the clipboard contents via a crafted web site...

Opera < 10.53 Asynchronous Content Modification Uninitialized Memory Access

Binary data 5527.prm...

Opera < 10.53 Asynchronous Content Modification Uninitialized Memory Access

Binary data 800846.prm...

Avant Browser Address Bar Spoofing Vulnerability

This host is installed with Avant Browser and is prone to Address Bar Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbavantbrowseraddrbarspoofingvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Avant Browser Address Bar Spoofing Vulnerability Authors: Sharath S Copyright: Copyright c 2009...

bingo!CMS core and bingo!CMS vulnerable to cross-site request forgery

Overview bingo!CMS core and bingo!CMS contain a cross-site request forgery vulnerability. bingo!CMS core and bingo!CMS are content management systems CMS. bingo!CMS core and bingo!CMS contain a cross-site request forgery vulnerability. Masako Oono reported this vulnerability to IPA. JPCERT/CC...