4172 matches found
SS Downloads 1.4.4.1 - templates/emailsent.php Multiple Parameter Reflected XSS
The SS Downloads WordPress plugin was affected by a templates/emailsent.php Multiple Parameter Reflected XSS security vulnerability...
SS Downloads 1.4.4.1 - templates/emailform.php Multiple Parameter Reflected XSS
The SS Downloads WordPress plugin was affected by a templates/emailform.php Multiple Parameter Reflected XSS security vulnerability...
Paid Downloads <= 2.01 - SQL Injection
The Paid Downloads WordPress plugin was affected by a SQL Injection security vulnerability...
WordPress Delightful Downloads Plugin <= 1.3.1.1 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in includes/functions.php User-Agent HTTP header. Solution Update the plugin...
WordPress Delightful Downloads Plugin <= 1.3.1.1 - BYPASS
This plugin is prone to a bypass vulnerability in meta-boxes.php dedometaboxessave function. Solution Update the plugin...
WordPress Delightful Downloads Plugin <= 1.3.1.1 - BYPASS
This plugin is prone to a bypass vulnerability in meta-boxes.php dedometaboxessave function. Solution Update the plugin...
CVE-2014-2356
Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request...
Cross site request forgery (csrf)
Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request...
CVE-2014-2356
CVE-2014-2356 affects Innominate mGuard devices. Affected firmware prior to 7.6.4 and 8.x before 8.0.3 allow remote attackers to download configuration snapshots via a crafted HTTPS request without authentication, enabling unauthorized information disclosure (network exposure). The ICS-CERT advis...
Mozilla Improves Malware Blocking in Firefox 31
Attackers have any number of methods for getting their malware onto users’ machines, but one of the easier and more effective ones is through drive-by downloads. Browser vendors have been adding defenses to mitigate this threat for some time, and the newest version of Mozilla Firefox includes an...
CVE-2014-4554
Cross-site scripting XSS vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter...
CVE-2014-4554
The CVE concerns the WordPress SS Downloads plugin (templates/download.php) where an XSS vulnerability allows an attacker to inject arbitrary script/HTML via the title parameter in versions before 1.5. Impact is remote script injection; no exploitation details are provided in the documents. Remed...
CVE-2014-4554
Cross-site scripting XSS vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter...
Active Collab "chat module" <= 2.3.8 - Remote PHP Code Injection Exploit
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
GREED 0.81 GRX File List Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12034/info greed Get and Resume Elite Edition is prone to unauthorized command execution. This issue is exposed when the application processes a GRX file list that specifies shell metacharacters and commands in file names...
PostNuke 0.6/0.7 Downloads Module TTitle Cross-site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8374/info It has been reported that a cross site scripting vulnerability exists in the Downlaods and WebLinks modules of PostNuke. It is possible that an attacker may construct a link containing malicious script code that...
phpBB Insert User Mod <= 0.1.2 - Remote File Include Exploit
No description provided by source. !/usr/bin/perl PHPBB insert user 0.1.2 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://www.grahameames.co.uk/phpbb/downloads/insertuser0.1.2.zip...
DaFun Spirit 2.2.5 - Multiple Remote File Include Vulnerability
No description provided by source. \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- DaFun Spirit 2.2.5 Multiple Remote File Include Vulnerability Script: http://code.google.com/p/dafunspirit/downloads/list Author: mat Mail: [email protected]...
Sendmail 8.12.6 Trojan Horse Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5921/info Reportedly, the server hosting sendmail, ftp.sendmail.org, was compromised recently. It has been reported that the intruder made modifications to the source code of sendmail to include Trojan Horse code. Downloa...