9524 matches found
RHEL 5 : MRG (RHSA-2014:0859)
An updated cumin package that fixes two security issues is now available for Red Hat Enterprise MRG 2.5 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...
RHEL 6 : MRG (RHSA-2014:0858)
An updated cumin package that fixes two security issues is now available for Red Hat Enterprise MRG 2.5 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...
Citrix Netscaler Disclosure / Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Citrix NetScaler Application Delivery Controller Citrix NetScaler Gateway vulnerable...
cumin: session cookies lack httponly setting
It was found that Cumin did not set the HttpOnly flag on session cookies. This could allow a malicious script to access the session cookie...
cumin: session cookies lack httponly setting
It was found that Cumin did not set the HttpOnly flag on session cookies. This could allow a malicious script to access the session cookie...
PerfectView CRM Cross Site Scripting
Affected software: PerfectView CRM Description: PerfectView CRM is a software for Relationship Management, Marketing & Sales Type of vulnerability: XSS Persistent URL: http://perfectviewcrm.com Discovered by: Provensec Website: http://www.provensec.com Description: PerfectView is prone to a...
WordPress Releases Security Update
WordPress 3.8.2 has been released to address multiple vulnerabilities, one of which could allow an attacker to gain unauthorized access using forged authentication cookies. WordPress 3.7.1 users will be updated to 3.7.2, which contains the same security fixes as 3.8.2. Users operating older,...
CVE-2014-0867
rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits aka ACLM 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query string...
Design/Logic Flaw
rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits aka ACLM 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query string...
CVE-2014-0867
rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits aka ACLM 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query string...
FoeCMS Multiple Vulnerabilities
FoeCMS suffers from cross site scripting, open redirect, and remote SQL injection vulnerabilities. Exploit Title : FoeCMS multiple vulnerability Author : Govind Singh aka NullPort Vendor : http://foecms.com/ Download Link : https://github.com/themarioga/FoeCMS/archive/master.zip Date : 05/07/2014...
FoeCMS XSS / SQL Injection / Open Redirect
Exploit Title : FoeCMS multiple vulnerability Author : Govind Singh aka NullPort Vendor : http://foecms.com/ Download Link : https://github.com/themarioga/FoeCMS/archive/master.zip Date : 05/07/2014 Discovered at : IHT Lab 1ND14N H4X0R5 T34M Love to : Manish Tanwar, DeadMan India, Hardeep Singh,...
Zurmo CRM - 储存型XSS
No description provided by source. Affected software: Zurmo CRM Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. Type of vulnerability: XSS Stored URL:...
Zurmo CRM - Persistent XSS Vulnerability
Exploit for php platform in category web applications Affected software: Zurmo CRM Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. Type of vulnerability: XSS...
Zurmo CRM - Persistent Cross-Site Scripting
Zurmo CRM - Persistent Cross-Site Scripting Affected software: Zurmo CRM Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. Type of vulnerability: XSS Stored UR...
MemHT Portal 4.0.1 [user agent] Persistent Cross Site Scripting
No description provided by source. !/usr/bin/perl MemHT Portal 4.0.1 Persistent Cross Site Scripting Vulnerability user agent by ZonTa - zontahackersatgmaildotcom After successful inject wait for the admin to view statistic page. Fix is available :...
paBugs <= 2.0 Beta 3 (main.php cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 4 usage; exit; $host = $ARGV0; Host $path = $ARGV1; Path to paBugs directory $pref = $ARGV2; prefix for admin tables $usid = $ARGV3; user id $www = new LWP::UserAgent; $sql =...
Dr. Web Control Center 6.00.3.201111300 XSS Vulnerability
No description provided by source. Dr. Web Control Center Admin UI Remote Script Code Injection ============================================================= Affected Products/Versions -------------------------- Product Name: Dr. Web Enterprise Server Version Number: 6.00.3.201111300...
YourTube <= 2.0 Arbitrary Database Disclosure Exploit
No description provided by source. ? //= exploit : YourTube = 2.0 Remote SQL Database Disclosure //= info : http://www.ac4p.com //= DORK: powered by yourtube //= found by: Security Code Team - thanks for sniper code and Qabandi -- //= our home: WwW.Sec-Code.com //= greats 4 our members in our hom...
Maian Weblog <= 4.0 Insecure Cookie Handling Vulnerability
No description provided by source. -+================================================================================+- -+ Maian Weblog = v4.0 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By: S.W.A.T...