Show In Browser 0.0.3 Ruby Gem File Injection Vulnerability

Show In Browser 0.0.3 is a Ruby Gem that suffers from a file injection vulnerability, allowing arbitrary text to be opened in a browser. TITLE: Show In Browser 0.0.3 Ruby Gem /tmp file injection vulnerability. DATE: 5/15/2023 AUTHOR: Larry W. Cashdollar @larry0 DOWNLOAD:...

Nagios XI 2012R1.5b XSS / Command Execution / SQL Injection / CSRF

Nagios XI version 2012R1.5b suffers from cross site request forgery, cross site scripting, remote command injection, and remote SQL injection vulnerabilities. Reflected XSS: Alert Cloud Component: Example URL: http://nagiosxiserver/nagiosxi/includes/components/alertcloud/index.php?width=800";...

Nagios XI 2012R1.5b XSS / Command Execution / SQL Injection / CSRF

Reflected XSS: Alert Cloud Component: Example URL: http://nagiosxiserver/nagiosxi/includes/components/alertcloud/index.php?width=800"; alert'xss'; var aa="a" : "b" : " The vulnerable code in Alert Cloud's index.php appears to have been copied and pasted into several other components as well...

dedecms 5.7 edit. inc. php file injection-vulnerability warning-the black bar safety net

Vulnerability file edit. inc. php specific code:? php if! defined'DEDEINC' exit'Request Error!'; if! empty$COOKIE'GUESTBOOKPOS' $GUESTBOOKPOS = $COOKIE'GUESTBOOKPOS'; else $GUESTBOOKPOS = "guestbook.php"; $id = intval$id; ifempty$job $job='view'; if$job=='del' && $gisadmin $dsql-ExecuteNoneQuery"...

Fedora 17 : openstack-nova-2012.1.1-15.fc17 (2012-11756)

Fix package dependencies for updates - Fix CA cert permissions issue introduced in 2012.1.1-10 - Split out into more sub packages - Update from stable upstream including... - Fix metadata file injection with xen - Fix affinity filters when hints is None - Fix marker behavior for flavors - Handle...

Fedora 16 : openstack-nova-2011.3.1-11.fc16 (2012-10418)

Prohibit host file corruption through file injection CVE-2012-3361 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Ubuntu: Security Advisory (USN-1497-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.10 / 12.04 LTS : nova vulnerabilities (USN-1497-1)

Matthias Weckbecker discovered that, when using the OpenStack API to setup libvirt-based hypervisors, an authenticated user could inject files in arbitrary locations on the file system of the host running Nova. A remote attacker could use this to gain root privileges. This issue only affects Ubun...

USN-1497-1: Nova vulnerabilities

Matthias Weckbecker discovered that, when using the OpenStack API to setup libvirt-based hypervisors, an authenticated user could inject files in arbitrary locations on the file system of the host running Nova. A remote attacker could use this to gain root privileges. This issue only affects Ubun...

OpenOffice XML External Entity RDF Document Handling Information Disclosure

The remote host is running a version of OpenOffice.org that has flaws in the way certain XML components are processed for external entities in ODF documents. These flaws can be utilized to access and inject the content of local files into an ODF document without a user's knowledge or permission, ...

raptor library (libreoffice / openoffice) file injection

It's possible to inject file via XML...

Fedora 16 : openstack-nova-2011.3.1-0.4.10818.fc16 (2012-0682)

Update to 2011.3.1 release candidate. See https://launchpad.net/nova/+milestone/2011.3.1 This also includes a minor bug fix for libguestfs file injection This update includes 50 patches from the upstream stable branch and a fix for an issue with attaching volumes. Sync up with Fedora spec, to onl...

CVE-2011-3187

The tos method in actionpack/lib/actiondispatch/middleware/remoteip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into log files or bypass intended address...

CVE-2011-0770

Cross-site scripting XSS vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file...

W78CMS v2. 7. 6 search type injection problems and repair solutions-vulnerability warning-the black bar safety net

Brief description: W78CMS enterprise website management system v2. 7. 6 UTF-8 the presence of search-type injection problems Detailed description: File so. asp 2 2 row % t=request. QueryString"t" key=request. QueryString"key" if t="" then Response. Write"scriptalert'please select to search the...

Rails 3.0.5 Log File Injection Proof Of Concept

Encoding: UTF-8 Log-File-Injection - Ruby on Rails 3.05 possibilities: - possible date back attacks tried with request-log-analyzer: worked but teasercheckwarnings - ip spoofing - binary log-injections - DOS if ip is used with an iptables-ban-script !! works only on intranet apps !! Fix: validate...

DEBIAN-CVE-2009-5053

Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute arbitrary PHP code by injecting this code into a cache file...

Hua-the local portal system(port) 5.0 XDAY-vulnerability warning-the black bar safety net

Look at the background of the login authentication file: File code:admin/index. asp %dbs="../"% !-- include file="../inc/config. asp" - !-- include file="../inc/md5. asp" - % if session"adminid""" and session"adminuser""" Then response. Redirect "main. asp" response. End end if action=request...

CVE-2003-1577

CVE-2003-1577 affects Sun ONE/iPlanet Web Server 4.1–SP12 and 6.0–SP5 when DNS resolution is enabled for client IPs. A crafted DNS response can be combined with an HTTP request to inject arbitrary text into server logs and trigger cross-site scripting (XSS) in the iPlanet Log Analyzer, via an Inv...

Changetrack 4.3-3 Local Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits ========================================================== Changetrack 4.3-3 Local Privilege Escalation Vulnerability ========================================================== TITLE: Changetrack Privilege Escalation Vulnerability SECUNIA...