Lucene search
+L

266 matches found

OSV
OSV
added 2016/12/15 6:59 a.m.9 views

CVE-2016-5124

An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev14. Adding images from external sources to HTML editors by drag&drop can potentially lead to script code execution in the context of the active user. To exploit this, a user needs to be tricked to use an image from a specially...

6.1CVSS6.1AI score0.01341EPSS
SaveExploits1References4
Microsoft KB
Microsoft KB
added 2016/12/09 12:00 a.m.12 views

Cumulative Update for Windows 10 Version 1607 and Windows Server 2016: December 9, 2016

None None...

6.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2016/12/07 7:08 p.m.8 views

chromium-browser: limited xss in blink

Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar...

6.1CVSS7.4AI score0.00737EPSS
SaveExploits0References5
OSV
OSV
added 2016/09/22 10:59 p.m.5 views

CVE-2016-5279

Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code...

4.3CVSS6.8AI score0.01383EPSS
SaveExploits0References5
OSV
OSV
added 2016/09/22 12:00 a.m.6 views

UBUNTU-CVE-2016-5279

Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code...

4.3CVSS6.8AI score0.01383EPSS
SaveExploits0References4
Fedora
Fedora
added 2016/08/29 8:08 a.m.17 views

[SECURITY] Fedora 25 Update: filezilla-3.21.0-1.fc25

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...

0.8AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2016/08/09 12:00 a.m.5 views

August 9, 2016 — KB3176492 (OS Build 10240.17071)

None None...

6.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2015/10/01 1:25 p.m.8 views

Mozilla: Dragging and dropping images exposes final URL after redirects (MFSA 2015-110)

Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element...

4.3CVSS7.5AI score0.02732EPSS
SaveExploits0References5
Fedora
Fedora
added 2015/06/13 6:39 a.m.18 views

[SECURITY] Fedora 22 Update: filezilla-3.11.0.2-1.fc22

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...

0.8AI score
SaveExploits0
Patchstack
Patchstack
added 2015/05/15 12:00 a.m.16 views

WordPress Drag & Drop Plugin <= 1.1.4 - Shell Upload

This plugin is prone to shell upload vulnerability. Solution Update the plugin...

1.7AI score
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2015/01/12 11:28 p.m.29 views

Instant PDF Password Protector - Password Protect PDF file

Instant PDF Password Protector is the Free tool to quickly Password Protect PDF file on your system. With a click of button, you can lock or protect any of your sensitive/private PDF documents. You can also use any of the standard Encryption methods - RC4/AES 40-bit, 128-bit, 256-bit based upon t...

7.2AI score
SaveExploits0
Kitploit
Kitploit
added 2014/07/16 12:53 a.m.26 views

Hash Compare - File Integrity Comparison Tool

Hash Compare is the FREE File Hash comparison tool. It performs Hash based Integrity Comparison using any of the the popular hash algorthms such as MD5 , SHA1 or SHA256. To make the task easier and quicker, it also supports the 'File Drag & Drop' feature. That means you can just drag & drop one o...

7.3AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.37 views

iClone SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iClone SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.reallusion.com/iclone/ Platform: Windows Price:$199 Author...

7.1AI score
SaveExploits0
Kitploit
Kitploit
added 2014/04/22 5:16 p.m.40 views

Instant PDF Password Remover v3.5 - Free PDF Password & Restrictions Removal Tool

Instant PDF Password Remover is the FREE tool to instantly remove Password of protected PDF document. It can remove both User & Owner password along with all PDF file restrictions such as Copy, Printing, Screen Reader etc. Often we receive password protected PDF documents in the form of mobile...

7.2AI score
SaveExploits0
zdt
zdt
added 2013/11/01 12:00 a.m.36 views

ImpressPages CMS 3.6 Multiple Vulnerabilities

ImpressPages CMS version 3.6 suffers from a remote arbitrary file deletion , multiple SQL injection vulnerabilities that can be leveraged to commit cross site scripting attacks. ImpressPages CMS v3.6 Remote Arbitrary File Deletion Vulnerability Vendor: ImpressPages UAB Product web page:...

7.9AI score
SaveExploits0
Packet Storm
Packet Storm
added 2013/10/31 12:00 a.m.51 views

ImpressPages CMS 3.6 Cross Site Scripting / SQL Injection

ImpressPages CMS v3.6 Multiple XSS/SQLi Vulnerabilities Vendor: ImpressPages UAB Product web page: http://www.impresspages.org Affected version: 3.6 Summary: ImpressPages CMS is an open source web content management system with revolutionary drag & drop interface. Desc: Input passed via several...

0.7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2013/10/31 12:00 a.m.38 views

ImpressPages CMS 3.6 - Multiple Cross-Site Scripting / SQL Injection Vulnerabilities

ImpressPages CMS v3.6 Multiple XSS/SQLi Vulnerabilities Vendor: ImpressPages UAB Product web page: http://www.impresspages.org Affected version: 3.6 Summary: ImpressPages CMS is an open source web content management system with revolutionary drag & drop interface. Desc: Input passed via several...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2013/10/31 12:00 a.m.23 views

ImpressPages CMS 3.6 - Multiple Cross-Site Scripting SQL Injection Vulnerabilities

ImpressPages CMS 3.6 - Multiple Cross-Site Scripting SQL Injection Vulnerabilities ImpressPages CMS v3.6 Multiple XSS/SQLi Vulnerabilities Vendor: ImpressPages UAB Product web page: http://www.impresspages.org Affected version: 3.6 Summary: ImpressPages CMS is an open source web content managemen...

0.9AI score
SaveExploits0
Fedora
Fedora
added 2013/09/30 12:48 a.m.29 views

[SECURITY] Fedora 18 Update: filezilla-3.7.3-1.fc18

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...

6.8CVSS0.8AI score0.03447EPSS
SaveExploits4
NVD
NVD
added 2012/11/30 10:55 p.m.18 views

CVE-2012-4478

Cross-site request forgery CSRF vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to hijack the authentication of administrators...

6.8CVSS7.1AI score0.0057EPSS
SaveExploits0References2
Rows per page
Query Builder