SimpleBB 4.2 Shell Upload

SimpleBB 4.2 + All ver upload Vulnerability ========================================== Author : indoushka Vondor : http://themeforest.net/item/simple-bulletin-board/58838?ref=themac Dork : SBB V4.2 ========================= 1 register in forum 2 Creat a new topic 3 Attachment a php file to downol...

PT-2015-6840 · Red Hat +1 · Libreport +2

Name of the Vulnerable Software and Affected Versions: libreport versions 2.0.7 through 2.6.3 Description: The issue allows remote attackers to obtain sensitive information via unspecified vectors related to the backtrace, cmdline, environ, open fds, maps, smaps, hostname, remote, ks.cfg, or...

Threat Outbreak Alert RuleID19462: Email Messages Distributing Malicious Software on November 18, 2015

Medium Alert ID: 42154 First Published: 2015 November 18 21:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19462 may contain the following files: Name |...

Directory traversal

Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the attach parameter to WorkOrder.do in the file attachment for a new ticket...

AuraCMS 2.1 - Remote File Attachment / LFI Vulnerabilities

No description provided by source. AuraCMS 2.1 - Remote File Attachment - Local File Inclusion Vendor : http://www.auracms.org/ Download : http://www.auracms.org/dljump.php?id=42 Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net...

WordPress Resume Submissions & Job Postings 2.5.1 - Unrestricted File Upload

No description provided by source. Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.geerservices.com/ Software Link:...

BTD Studio Zom-Mail 1.0.9 - Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/761/info In certain versions of the BTD Zom-Mail server there exists a buffer overflow which may be remotely exploitable by malicious users. The problem in question is in the handling of overly past 256 chars long file...

Qualcomm Eudora 5/6 File Attachment Spoofing Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/5432/info Eudora is reported to be prone to an issue which may allow attackers to spoof the file extension in an attachment. This may aid an attacker in enticing a user of the e-mail client into executing malicious conten...

Ipswitch IMail 6.x File Attachment Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1617/info IPSWITCH ships a product titled IMail, an email server for usage on NT servers serving clients their mail via a web interface. To this end the IMail server provides a web server typically running on port 8383 fo...

Qualcomm Eudora 5.2.1/6.0 File Attachment Spoofing Variant Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7653/info Eudora is reported to be prone to an issue which may allow attackers to spoof the file extension in an attachment. This may aid an attacker in enticing a user of the e-mail client into executing malicious conten...

XSS when attaching a file to an issue

Hi, I found a persistent XSS vulnerability when attaching a file to an issue. The steps to reproduce are the following : - Attach a file to an issue. Its name must contain "alert'XSS'". I used a python script to do that. - Browse to the issue and open the ALL tab under activity. A popup should...

XSS when attaching a file to an issue

Hi, I found a persistent XSS vulnerability when attaching a file to an issue. The steps to reproduce are the following : - Attach a file to an issue. Its name must contain "alert'XSS'". I used a python script to do that. - Browse to the issue and open the ALL tab under activity. A popup should...

XSS when attaching a file to an issue

Hi, I found a persistent XSS vulnerability when attaching a file to an issue. The steps to reproduce are the following : - Attach a file to an issue. Its name must contain "alert'XSS'". I used a python script to do that. - Browse to the issue and open the ALL tab under activity. A popup should...

Threat Outbreak Alert: Fake Payment Invoice Email Messages on November 15, 2013

Medium Alert ID: 31789 First Published: 2013 November 15 21:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an outstanding invoice notification for the recipient. The text in the email message attempts to convince the...

execution of javascript from filename

Steps to replicate: Add an attachment Rename the file to ".txt" Copy its remove link and open the link in a new browser window Result: The JavaScript code is executed, rather than showing the "proceed w/ deletion" screen. Everything works normally if you just click the delete button rather than...

execution of javascript from filename

Steps to replicate: Add an attachment Rename the file to ".txt" Copy its remove link and open the link in a new browser window Result: The JavaScript code is executed, rather than showing the "proceed w/ deletion" screen. Everything works normally if you just click the delete button rather than...

Fedora 19 : ReviewBoard-1.7.11-1.fc19 (2013-11682)

New upstream release 1.7.11 - http://www.reviewboard.org/docs/releasenotes/reviewboa rd/1.7.11/ - Bug Fixes : - Fixed compatibility with Python 2.5 - Fixed the drop-down arrow by Support and the account name on older versions of Internet Explorer - New upstream release 1.7.10 -...

CentOS 6 : evolution (CESA-2013:0516)

Updated evolution packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2011-3201

GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...

Code injection

GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...