CVE-2013-2088

contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename...

CVE-2013-2088

contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename...

PT-2013-3538

Name of the Vulnerable Software and Affected Versions Subversion versions prior to 1.6.23 Description The issue allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename. This is possible due to a flaw in the...

CVE-2013-2088: Improper Input Validation

contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename...

Oracle Linux 5 : vim (ELSA-2008-0580)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0580 advisory. - fixes CVE-2008-3074 tar plugin - fixes CVE-2008-3075 zip plugin - fixes CVE-2008-3076 netrw plugin - fixes CVE-2008-4101 keyword and tag lookup - fix...

[NetworkMiner v1.4.1] Network Forensic Analysis Tool (NFAT)

NetworkMiner is a Network Forensic Analysis Tool NFAT for Windows but also works in Linux / Mac OS X / FreeBSD. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the...

CVE-2012-3872

CVE-2012-3872 affects Open Constructor 3.12.0. The vulnerability is a set of reflected XSS flaws in which user-supplied input can be injected via three parameters: (1) result in data/file/edit.php, (2) q in confirm.php, and (3) keyword in users/users.php. Exploitation would allow remote attackers...

WordPress SEO Plugin 1.3.11 Cross Site Script Vulnerability

WordPress out of the box is already technically quite a good platform for SEO, this was true when I wrote my original WordPress SEO article in 2008 and it's still true today, but that doesn't mean you can't improve it further! This plugin is written from the ground up by WordPress SEO consultant...

anwsion一个类设置缺陷导致安全过滤失效，附带一个利用案例

简要描述： anwsion一个类设置缺陷。哎。。。。 详细说明： 真心蛋疼！！！！！ models/system.php public function analysiskeyword$string $string = strreplacearray "", "!", "@", "", "$", "%", "^", "&", "", ",", ".", "?", ";", ":", "'", '"', "", "", "", "", "！", " ￥", "……", "…", "、", "，", "。", "？", "；", "：", "‘", "“", "”", "’", " 【",...

CVE-2012-6041

Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar F6 is activated, allows remote attackers to execute arbitrary code via a crafted iframe...

CVE-2012-6041: Undefined Security Weakness

Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar F6 is activated, allows remote attackers to execute arbitrary code via a crafted iframe...

PT-2012-6232

Name of the Vulnerable Software and Affected Versions GreenBrowser versions prior to 6.0.1002 Description A double free issue exists when the keyword search bar is activated, allowing remote attackers to execute arbitrary code via a crafted iframe. Recommendations For versions prior to 6.0.1002,...

CVE-2012-4950

Cross-site scripting XSS vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly handled during construction of error messages...

CVE-2012-4950

CVE-2012-4950 is a reflected cross-site scripting vulnerability in the Keyword Search page of the Pattern Insight 2.3 web interface. The issue arises because certain characters in error-message construction are not properly escaped, allowing a remote attacker to inject arbitrary script/HTML via a...

PT-2012-5684

Name of the Vulnerable Software and Affected Versions Pattern Insight version 2.3 Description A cross-site scripting XSS issue exists in the Keyword Search page of the web interface, allowing remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly...

CVE-2012-4950: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly handled during construction of error messages...

Zoner Photo Studio v15 b3 - Buffer Overflow Vulnerabilities

Document Title: =============== Zoner Photo Studio v15 b3 - Buffer Overflow Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=759 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ====================================...

Thomson Wireless VoIP Cable Modem - Authentication Bypass

Exploit Title: Thomson Wireless VoIP Cable Modem Auth Bypass Date: February 22, 2011 Authors: Glafkos Charalambous, George Nicolaou Product: TWG850-4 Wireless VoIP Cable Modem Software Version: ST9A.01.06 Severity: High Other Vulnerabilities: Unauthenticated Backup File Access, Plaintext Protocol...

PHPCMS V9 direct blasting management account password-loophole warning-the black bar safety net

Google keyword inurl:"index. php? m=content+c=rss+catid=1 0" EXP api. php? op=addfavorite&url=xx. oo&title= and select 1 fromselect count,concatselect select select concat0x23,castconcatusername,0x3a,password,0x3a,encrypt as char,0x23 from v9admin LIMIT 0,1 from informationschema. tables limit...

Yahoo! Toolbar (for Chrome, Safari) vulnerable to toolbar alteration

Overview Yahoo! Toolbar for Chrome, Safari contains a vulnerability where the toolbar may be altered. Yahoo! Toolbar for Chrome, Safari contains a vulnerability where the toolbar may be altered when visiting a specially crafted web page. Keita Haga of keitahaga.com reported this vulnerability to...