WordPress Plugin Google Doc Embedder 'options-general.php' HTML Injection Vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. An HTML injection vulnerability in the WordPress plugin Google Doc Embedder 'options-general.php' allows attackers to run supplied HTML and script code or steal...

WordPress Google Doc Embedder 2.5.18 Cross Site Scripting

Title: WordPress 'Google Doc Embedder' plugin - XSS Version: 2.5.18 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2015/01/26 Download: https://wordpress.org/plugins/google-document-embedder/ Contacted WordPress: 2015/01/26 ==========================================================...

Threat Outbreak Alert RuleID13354: Email Messages Distributing Malicious Software on January 30, 2015

Medium Alert ID: 37246 First Published: 2015 January 30 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13354 and RuleID13354KVR may contain the...

Microsoft-Office-2010-Exec-Code

Exploit Title: MS Office 2010 Download Execute Google Dork: NA Date: 19 Feb 2013 Exploit Author: g11tch Vendor Homepage: Software Link: Version: ALL import binascii import sys import time print "Microsoft Office 2010, download -N- execute " print " What do you want to name your .doc ? " print "...

Fedora 20 : icecast-2.4.1-1.fc20 (2014-16394)

fix CVE-2014-9091 1168146, 1168147, 1168148, 1168149 fix CVE-2014-9018 1165880, 1165882, 1165883, 1165885 enabled fully hardened build 954320 - update new to release v2.4.1 1101950 - added doc-subpkg Note that Tenable Network Security has extracted the preceding description block directly from th...

Google Document Embedder <= 2.5.16 - SQL Injection

The Google Doc Embedder WordPress plugin was affected by a SQL Injection security vulnerability...

CVE-2014-9173

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter...

Sql injection

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter...

CVE-2014-9173

Affected software: WordPress Google Doc Embedder plugin. Vulnerability: SQL injection in view.php via the gpid parameter. Versions: affected up to 2.5.15 (e.g., before 2.5.15; 2.5.14 noted in sources). Impact: remote attackers could execute arbitrary SQL commands. Root cause: unsafeguarded gpid u...

CVE-2014-9173

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter...

Google Document Embedder <= 2.5.14 - SQL Injection

The Google Doc Embedder WordPress plugin was affected by a SQL Injection security vulnerability...

WordPress Plugin Google Document Embedder 2.5.14 - SQL Injection

WordPress Plugin Google Document Embedder 2.5.14 - SQL Injection Exploit Title: Google Doc Embedder 2.5.14 SQL Injection Date: 10-11-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl http://twitter.com/KacperSzurek Software Link:...

hdwiki sql注射漏洞

简要描述： rt 详细说明： control/doc.php：docreate方法 …… 流程条件省略 …… else//点击发布词条 if$this-setting'checkcode'!=3 && $this-setting'docverificationcreatecode' && strtolower$this-post'code'!=$ENV'user'-getcode $this-message$this-view-lang'codeError','BACK',0;...

[SE-2014-01] Missing patches / inaccurate information regarding Oracle Oct CPU

Hello All, We've been recently informed by a 3rd party that Oracle planned to release fixes for the vulnerabilities covered by our SE-2014-01 1 project in Nov 2014. We initially thought that someone mistakenly took Oct for Nov Oracle CPU was released on Oct 14, 2014, but the credibility of the...

openSUSE Security Update : krb5 / krb5-doc / krb5-mini (openSUSE-SU-2014:1043-1)

Thit MIT krb5 update fixes the following security issue : - buffer overrun in kadmind with LDAP backend bnc891082, CVE-2014-4345 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Google Document Embedder 2.4.6 - pdf.php file Parameter Arbitrary File Disclosure

The Google Doc Embedder WordPress plugin was affected by a pdf.php file Parameter Arbitrary File Disclosure security vulnerability...

Debian DSA-2980-1 : openjdk-6 - security update

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

Threat Outbreak Alert RuleID10631: Email Messages Distributing Malicious Software on July 11, 2014

Medium Alert ID: 34905 First Published: 2014 July 14 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10631 may contain the following files: Name | Siz...

DEBIAN-CVE-2014-0247

LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx...

OpenDock Easy Doc <= 1.4 - (doc_directory) File Include Vulnerabilities

No description provided by source. ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...