3274 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the "Create download task via file upload" feature in Synology Download Station before 3.5-2962 allows remote attackers to inject arbitrary web script or HTML via the name element in the Info dictionary in a torrent file...
LOYTEC Router Information Exposure Vulnerability
OVERVIEW Independent researcher Maxim Rupp has identified a password file vulnerability in LOYTEC’s LIP-3ECTB routers. LOYTEC has produced a firmware update to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The following LOYTEC routers are affected:...
PHP 5.5.9 - 'zend_executor_globals' 'CGIMode FPM WriteProcMemFile' disable_functions Bypass / Load Dynamic Library
?php // EDB Note: Paper https://www.exploit-db.com/docs/english/38104-shoot-zendexecutorglobals-to-bypass-php-disablefunctions.pdf errorreporting0x66778899; settimelimit0x41424344; define'ZENDINIUSER', 10; define'ZENDINIPERDIR', 11; define'ZENDINISYSTEM', 12; / 00df9000-00e16000 rw-p 00000000 00:...
SiteFactory CMS 5.5.9 Path Traversal File Vulnerability
Exploit for php platform in category web applications |||||||||||||| + Title: SiteFactory CMS 5.5.9 Path Traversal File = \ , + Date: 19-8-2015 = | + Autor Guillermo Garcia Marcos = / + Vendor: http://www.mindbite.se/ / \ o\ + Dork : inurl:/sitefactory/assets/ | | \ \ + info: The file parameter i...
Moderate: Red Hat Security Advisory: ppc64-diag security, bug fix and enhancement update
Updated ppc64-diag packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which giv...
CVE-2015-3681
Apple Type Services ATS in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3680, and CVE-2015-3682...
CVE-2015-3681
Apple Type Services ATS in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3680, and CVE-2015-3682...
SOL16875 - file vulnerability CVE-2012-1571
file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference. CVE-2012-1571...
Apple MAC OS X Font File Handling Processing Arbitrary Code Execution Vulnerability (CNVD-2015-04267)
Apple Mac OS X is a commercial operating system. An arbitrary code execution vulnerability exists in Apple Mac OS X's handling of specially crafted font files, which allows an attacker to construct a malicious file that can be parsed by a user to execute arbitrary code...
PT-2015-4916 · Debian +2 · Pycode-Browser
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a predictable temporary file vulnerability. No further details are provided about the nature of the issue, affected devices, or real-world incidents...
RHEL 6 / 7 : ceph-deploy (RHSA-2015:1092)
An updated ceph-deploy package that fixes two security issues is now available for Red Hat Ceph Storage. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...
Arbitrary file deletion
GNU Parallel before 20150422, when using 1 --pipe, 2 --tmux, 3 --cat, 4 --fifo, or 5 --compress, allows local users to write to arbitrary files via a symlink attack on a temporary file...
SUSE-SU-2015:0668-1 Security update for libzip
Libzip was updated to fix one security issue. A zip file with an unusually large number of entries could have caused an integer overflow leading to a write past the heap boundary, crashing the application. CVE-2015-2331 bnc923240...
SerVision HVG Video Gateway Elevation of Privilege Vulnerability
SerVision HVG Video Gateway is an intelligent video gateway product from SerVision Israel. A security vulnerability exists in the time.htm file in SerVision HVG Video Gateway versions prior to 2.2.26a78. This vulnerability can be exploited by a remote attacker to bypass authentication and gain...
APPLE-SA-2015-01-27-2 iOS 8.1.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-01-27-2 iOS 8.1.3 iOS 8.1.3 is now available and addresses the following: AppleFileConduit Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A maliciously crafted afc command may allow acce...
Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2015-472) (POODLE)
Multiple flaws were found in the way the Hotspot component in OpenJDK verified bytecode from the class files, and in the way this component generated code for bytecode. An untrusted Java application or applet could possibly use these flaws to bypass Java sandbox restrictions. CVE-2014-6601 ,...
Multiple cross-site scripting vulnerabilities in X-CART 'xcart/cart.php'
X-CART is PHP shopping cart software. X-CART 'xcart/cart.php' has multiple cross-site scripting vulnerabilities because it fails to adequately clean up user-supplied input. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of an affected user's unawar...
Exponent CMS 'index.php' Cross-Site Scripting Vulnerability
Exponent CMS is open source content management system. A cross-site scripting vulnerability exists in Exponent CMS 'index.php' because it fails to properly filter user-supplied input. An attacker may be able to exploit this vulnerability to execute arbitrary script code in an unsuspecting user's...
Important: java-1.8.0-openjdk
Issue Overview: Multiple flaws were found in the way the Hotspot component in OpenJDK verified bytecode from the class files, and in the way this component generated code for bytecode. An untrusted Java application or applet could possibly use these flaws to bypass Java sandbox restrictions...