Google Android 跨站脚本漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an input validation error that could be exploited by attackers to trigger a cross-site attack on a victim's device...

Cross-Site Request Forgery (CSRF) in myvesta/vesta

✍️ Description Attacker is able to delete any file on the server if logged in user visits attacker website. 🕵️‍♂️ Proof of Concept Create a test.txt file under /home/user when you logged in open this POC.html in a browser you can check test.txt deletes. //PoC.html history.pushState'', '', '/'...

Couchbase Server Cross-Site Request Forgery Vulnerability

Couchbase Server is a distributed open source NoSQL non-relational database from the U.S. company Couchbase , which mainly supports data query , full-text search and active global replication and other functions . A cross-site request forgery vulnerability exists in Couchbase Server version 6.0. ...

CVE-2020-1103

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks a variant of cross-site request forgery, CSRF. When users are simultaneously logged in to Microsoft SharePoint Server and visit a...

Microsoft SharePoint Information Disclosure Vulnerability

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks a variant of cross-site request forgery, CSRF. When users are simultaneously logged in to Microsoft SharePoint Server and visit a...

Moodle 2.4.x < 2.4.1 Multiple Vulnerabilities

Binary data 9414.prm...

openSUSE Security Update : xulrunner (openSUSE-2015-966)

Xulrunner was updated to 38.5.0 to fix several security issues. The following vulnerabilities were fixed boo959277 : - CVE-2015-7201: Miscellaneous memory safety hazards - CVE-2015-7210: Use-after-free in WebRTC when datachannel is used after being destroyed - CVE-2015-7212: Integer overflow...

SUSE-SU-2015:2334-1 Security update for MozillaFirefox

MozillaFirefox was updated to version 38.5.0 esr to fix the following issues: Following security issues were fixed: MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous memory safety hazards rv:43.0 / rv:38.5 MFSA 2015-138/CVE-2015-7210 Use-after-free in WebRTC when datachannel is used after...

Spyce 2.1.3 docs/examples/redirect.spy Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution. An attacker may leverage these issues to execute arbitrary script code in the...

Mapbar of cross-site attacks a vulnerability analysis-vulnerability warning-the black bar safety net

Original source: Tosec information security teamwww.tosec.cn to Article author: Nobug32 Affected versions: Mapbar map query system Vulnerability page: mapview/index. jsp Brief Description: page the action data is directly output, but is not strictly a filtering operation leads to cross-site Test...

Wordpress Forced Upgrade Vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2008-001 - Original release date: January 3rd, 2008 - Last revised: December 22nd, 2008 - Discovered by: Jesus Olmos Gonzalez - Severity: 2/5 ============================================= I. VULNERABILITY...

The instance profile“cross-site intrusion” watch out for MSN account lost-vulnerability warning-the black bar safety net

Last time we introducedwhat is thecross-site attacksCross Site Scripting, today we look at a specific example, and describes how to avoid suffering cross-site attacks. “Cross-site intrusion”crime reduction: cross-site intrusion MSN hacking We according to users provide clues to his MSN account is...

Detailed WINRAR self-extracting cross-site attack vulnerabilities-vulnerability warning-the black bar safety net

Listen to many people say WINRAR self-extracting format of the file in the installation interface can be cross-site, the author personally tested, this not alone that is across Station, originally thought it was a new out of the vulnerability of it, the original is WINRAR itself defects, in which...

VihorDesign.txt

Website : http://www.vihor.de I.Remote Exucete : Vulnerable : http://www.site.com/path/index.php?page=evilcode.txt?&cmd=id II. Cross Attack http://www.site.com/path/index.php?page=alertdocument.cookie http://www.site.com/path/index.php?page=alertPatriotic Hackers Patriotic Hackers Greetz ;...