644 matches found
ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution
The "lazyinitialize" function in lib/resolv.rb did not properly process certain filenames. A remote attacker could possibly exploit this flaw to inject and execute arbitrary commands...
CVE-2017-17790
The lazyinitialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernelopen, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different vulnerability than CVE-2017-17405. NOTE: situations with untrusted input ma...
UBUNTU-CVE-2017-17790
The lazyinitialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernelopen, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different vulnerability than CVE-2017-17405. NOTE: situations with untrusted input ma...
SQL Injection Vulnerability in Lazy WorkPass OA Web Intelligent Office System
Lazy work pass OA network intelligent office system is suitable for enterprises and institutions of the general network office software, the system uses B / S operation mode, free version for small and medium-sized enterprises. There is a SQL injection vulnerability in the OA Network Intelligent...
LAZY IPTV - Base64 encoded String, Customized SSL, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application LAZY IPTV published at the 'play' market has multiple vulnerabilities...
OracleVM 3.3 / 3.4 : policycoreutils (OVMSA-2016-0157)
The remote OracleVM system is missing necessary patches to address critical security updates : - Lazy unmount private, shared entryJoe Jinorabug 12560705 - sandbox: create a new session for sandboxed processes Resolves: CVE-2016-7545 - Update translations Resolves: rhbz819794 - Fix sepolgen test...
Automattic: Lazy Load stored XSS
I noticed a problem with the Lazy Load WordPress plugin. It could be exploited by a lower-level user to gain administrator-level access or server compromise. I've discussed this by email with Mohammad Jangda who confirmed the issue. According to my tests, this kind of post content leads to...
Lazy Load <= 0.6 - Cross-Site Scripting (XSS)
The Lazy Load WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress Lazy Load Plugin <= 0.6 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
WordPress Lazy Content Slider plugin CSRF vulnerability
No description provided by source...
WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery (Add Catetory)
WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery Add Catetory Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps...
WordPress Lazy Content Slider 3.4 Cross Site Request Forgery
Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps Tested on: Win Version: 3.4 Date: 2016/07/08 PoC: The vulnerable page is...
WordPress Lazy Content Slider 3.4 Plugin - Cross-Site Request Forgery (Add Catetory)
Exploit for php platform in category web applications Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps Tested on: Win Version: 3.4...
WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery (Add Catetory)
Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps Tested on: Win Version: 3.4 Date: 2016/07/08 PoC: The vulnerable page is...
CVE-2016-1678
objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JavaScript code...
CVE-2016-1678: Improper Restriction of Operations within the Bounds of a Memory Buffer
objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JavaScript code...
WordPress Lazy Load Plugin <= 0.7.5 - Remote File Inclusion
This vulnerability allows any visitor to upload any kind of file in your website. Solution Update the plugin...