Open-Xchange (OX) App Suite SVG File Cross Site Scripting Vulnerability

Open-Xchange OX App Suite is prone to a cross-site scripting XSS vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

Focus SIS staticpath File Inclusion (CVE-2007-4807)

A remote file inclusion vulnerability has been reported in Focus SIS. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected systems...

Apache ActiveMQ 5.x < 5.11.2 Directory Traversal Vulnerability - Active Check

Apache ActiveMQ is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Apache Tomcat Denial Of Service Vulnerability (Jun 2015) - Windows

Apache Tomcat is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat";...

Microsoft .NET Framework Privilege Elevation Vulnerability (3057134)

This host is missing an important security update according to Microsoft Bulletin MS15-048. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Novell ZENworks Configuration Management < 11.3.2 Remote Code Execution (intrusive check)

The version of Novell ZENworks Configuration Management ZCM running on the remote host is affected by a remote code execution vulnerability due to improper sanitization of user-supplied input to the 'uid' POST parameter in the /zenworks/UploadServlet script. An unauthenticated, remote attacker ca...

X_CART Multiple Cross Site Scripting Vulnerabilities

XCART is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:qualiteam:x-cart...

Apache Tomcat JSP Example Web Applications XSS Vulnerability - Active Check

Apache Tomcat is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

Apple Macintosh OS X .DS_Store 信息泄露漏洞

Apple Mac OS X 系统会在文件夹下生成一个.DSStore文件，里面包含了当前目录的目录以及文件夹名称。当开发者上传网站目录时，可能会把此文件上传到网站目录，导致信息泄露、后台暴露等。 !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register from dsstore import DSStore class TestPOCPOCBas...

Scientific Linux Security Update : GNOME Shell on SL7.x x86_64 (20150305)

It was found that the GNOME shell did not disable the Print Screen key when the screen was locked. This could allow an attacker with physical access to a system with a locked screen to crash the screen-locking application by creating a large amount of screenshots. CVE-2014-7300 This update also...

Low: Red Hat Security Advisory: GNOME Shell security, bug fix, and enhancement update

Updated gnome-shell, mutter, clutter, and cogl packages that fix one security issue, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS bas...

HP / Micro Focus SiteScope Detection (HTTP)

HTTP based detection of HP / Micro Focus SiteScope Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Microsoft Office Word Viewer Remote Code Execution Vulnerability (3032328)

This host is missing an important security update according to Microsoft Bulletin MS15-012. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Splunk <= 6.1.1 XSS Vulnerability - Active Check

Splunk is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:splunk:splunk";...

Unauthenticated Reflected XSS vulnarbility in Asus RT-N10 Plus router

Title:- Reflected XSS vulnarbility in Asus RT-N10 Plus router Author: Kaustubh G. Padwad Product: ASUS Router RT-N10 Plus Firmware: 2.1.1.1.70 Severity: HIGH Auth: Not requierd Description: Vulnerable Parameter: flag= Vulnerability Class: Cross Site Scripting...

Cock wire from scratch-micro-shoot APP vulnerability-vulnerability warning-the black bar safety net

Micro-shot, is the mobile Internet the most popular mobile video social APP, has a unique whitening Skin Beauty and other video effects in iPhone and Android Phones the App Store social category and the photography category of the APP list are among the best in Beijing grasshopper online Technolo...

Adobe Flash Player Unspecified Code Execution Vulnerability (Jan 2015) - Linux

Adobe Flash Player is prone to unspecified arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Photocrati Theme 'prod_id' XSS Vulnerability

The WordPress theme Photocrati is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

AdaptCMS 3.0.3 Multiple Persistent XSS Vulnerabilities

Summary AdaptCMS is a Content Management System trying to be both simple and easy to use, as well as very agile and extendable. Not only so we can easily create Plugins or additions, but so other developers can get involved. Using CakePHP we are able to achieve this with a built-in plugin system...

Micro Focus / NetIQ Access Manager Detection (HTTP)

HTTP based detection of Micro Focus / NetIQ Access Manager. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...