PT-2015-7926

Name of the Vulnerable Software and Affected Versions isodumper affected versions not specified Description The issue concerns the potential for injecting and executing shell commands through the volume label text in the raw format.py file from isodumper. Recommendations At the moment, there is n...

rtalabel.org XSS vulnerability

Vulnerable URL: http://www.rtalabel.org/index.php Details: Description| Value ---|--- Patched:| Yes, at 28.10.2015 Latest check for patch:| 28.10.2015 20:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 84218 Google Pagerank| 6 VIP website status:| No Check...

Cisco IOS XE Network Address Translation and Multiprotocol Label Switching DoS (CSCut96933)

The remote Cisco IOS XE device is missing vendor-supplied security patches, and is configured for Network Address Translation NAT and/or Multiprotocol Label Switching MPLS. It is, therefore, affected by a flaw in the NAT and MPLS services due to improper processing of IPv4 packets. An...

Threat Outbreak Alert RuleID18390: Email Messages Distributing Malicious Software on October 1, 2015

Medium Alert ID: 41319 First Published: 2015 October 1 15:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18390 may contain the following files: Name |...

Cisco IOS XE Network Address Translation Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in Cisco IOS XE Software when handling IPv4 that requires NAT and MPLS services. A remote attacker could exploit this vulnerability to cause a reload ...

WordPress White-Label Framework 2.0.6 - XSS Vulnerability

安装好whitelable主题之后漏洞文件位置是: /whitelable-framework/inc/snippets/form-sharebymailiframe.php Line 48 50: $recipient = $POST'recipemail'; if stripos$recipient, ',' $recipient = substr$recipient, 0, stripos$recipient, ','; 可以看到这里POST方式接收到的recipemail只是去掉了逗号之后的内容然后就直接存入变量$recipient Line 86: Your Message h...

WordPress Theme White-Label Framework 2.0.6 - Cross-Site Scripting

WordPress Theme White-Label Framework 2.0.6 - Cross-Site Scripting Exploit Title: Wordpress White-Label Framework XSS Google Dork: inurl:/wp-content/themes/whitelabel-framework/inc/form-sharebymailiframe.php Date: 7 September 2015 Exploit Author: Outlasted Software Link: wordpress.com /...

WordPress White Label Framework theme 2.0.6 - XSS

White Label Framework theme is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based...

WordPress Theme White-Label Framework 2.0.6 - Cross-Site Scripting

Exploit Title: Wordpress White-Label Framework XSS Google Dork: inurl:/wp-content/themes/whitelabel-framework/inc/form-sharebymailiframe.php Date: 7 September 2015 Exploit Author: Outlasted Software Link: wordpress.com / http://whitelabelframework.com/ Version: 2.0.6 Greetz to: TeaMp0isoN...

MediaWiki SemanticForms extension cross-site scripting vulnerability (CNVD-2015-05873)

MediaWiki is the United States Wikimedia Wikimedia Foundation and MediaWiki volunteers to develop and maintain a set of free and free Web-based Wiki engine , it can be used to deploy internal knowledge management and content management system . SemanticForms is one of the extensions used to creat...

Cross site scripting

Cross-site scripting XSS vulnerability in the Mass Contact module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer mass contact" permission to inject arbitrary web script or HTML via a category label...

CVE-2015-6807: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Mass Contact module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer mass contact" permission to inject arbitrary web script or HTML via a category label...

PT-2015-7363

Name of the Vulnerable Software and Affected Versions Drupal Mass Contact module versions 6.x-1.x before 6.x-1.6 Drupal Mass Contact module versions 7.x-1.x before 7.x-1.1 Description A cross-site scripting XSS issue exists in the Mass Contact module for Drupal, allowing remote authenticated user...

CVE-2015-6732

Multiple cross-site scripting XSS vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the 1 wpSummary parameter to Special:FormEdit, the 2 "Template label optional" field in a form, or a 3 Field name in a template...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the 1 wpSummary parameter to Special:FormEdit, the 2 "Template label optional" field in a form, or a 3 Field name in a template...

PT-2015-3305 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.3 Description: The issue is related to the skb flow dissect function in net/core/flow dissector.c, which does not properly initialize n proto, ip proto, and thoff. This allows remote attackers to cause a denia...

CVE-2015-6732: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the 1 wpSummary parameter to Special:FormEdit, the 2 "Template label optional" field in a form, or a 3 Field name in a template...

PT-2015-7322

Name of the Vulnerable Software and Affected Versions MediaWiki SemanticForms extension affected versions not specified Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via the...

Cross site scripting

Cross-site scripting XSS vulnerability in the Migrate module 7.x-2.x before 7.x-2.8 for Drupal, when the migrateui submodule is enabled, allows user-assisted remote attackers to inject arbitrary web script or HTML via a destination field label...

CVE-2015-5514: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Migrate module 7.x-2.x before 7.x-2.8 for Drupal, when the migrateui submodule is enabled, allows user-assisted remote attackers to inject arbitrary web script or HTML via a destination field label...