Debian: Security Advisory (DSA-2975-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MobileCartly 1.0 - Remote File Upload Vulnerability

No description provided by source. Exploit Title: MobileCartly 1.0 Remote File Upload Vulnerability Google Dork: - Date: 14/08/2012 Exploit Author: ICheerNo0M Vendor Homepage: http://icheernoom.blogspot.com/ Software Link: http://mobilecartly.com/mobilecartly.zip Version: 1.0 Tested on: Ubuntu...

apartment search script (rfu/xss) Multiple Vulnerabilities

No description provided by source. Apartment Search Script Multiple Remote Vuln. Remote File Upload & XSS ---------------------------------------------------------- Discovered By: ZoRLu Date: 02.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI...

CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow

No description provided by source. !/usr/bin/perl Exploit Title: CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow Discovery date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: CyberLink Power2Go 9 Essential 9.0.1002.0...

eYou v4 /grad/admin/admin_logo_upload.php 命令执行漏洞

No description provided by source...

Threat Outbreak Alert: Fake Parking Charge Payment Notice Email Messages on May 15, 2014

Medium Alert ID: 34243 First Published: 2014 May 15 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a parking violation payment notice for the recipient. The text in the email message attempts to convince the...

eYou Email /domain_logo.php 命令执行漏洞

No description provided by source...

CVE-2013-1759

Cross-site scripting XSS vulnerability in the Responsive Logo Slideshow plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the "URL and Image" field...

Cross site scripting

Cross-site scripting XSS vulnerability in the Responsive Logo Slideshow plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the "URL and Image" field...

CVE-2013-1759

Cross-site scripting XSS vulnerability in the Responsive Logo Slideshow plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the "URL and Image" field...

Jobsite logo - Multiple Vulnerabilties

Jobsite Logo suffers from cross site scripting and remote SQL injection vulnerabilities. Jobsite logo - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected , email protected .:. Home :...

Jobsite Logo Cross Site Scripting / SQL Injection

Jobsite logo - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://sourceforge.net/projects/jobfinder/...

Threat Outbreak Alert: Fake Tax Payment Notification Email Messages on October 15, 2013

Medium Alert ID: 31286 First Published: 2013 October 16 14:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax payment receipt for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Product Specification Request Email Messages on October 1, 2013

Medium Alert ID: 31066 First Published: 2013 October 1 13:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product specification for the recipient. The text in the email message attempts to convince the recipient to...

DEBIAN-CVE-2013-4996

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted database name, 2 a crafted user name, 3 a crafted logo URL in the navigation panel, 4 a...

CVE-2013-4996

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted database name, 2 a crafted user name, 3 a crafted logo URL in the navigation panel, 4 a...

CVE-2013-4996

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted database name, 2 a crafted user name, 3 a crafted logo URL in the navigation panel, 4 a...

CVE-2013-4996

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted database name, 2 a crafted user name, 3 a crafted logo URL in the navigation panel, 4 a...

5 XSS vulnerabilities in setup, chart display, process list, and logo link.

PMASA-2013-9 Announcement-ID: PMASA-2013-9 Date: 2013-07-28 Updated: 2013-07-30 Summary 5 XSS vulnerabilities in setup, chart display, process list, and logo link. Description In the setup/index.php, using a crafted hash with a Javascript event, untrusted JS code could be executed. In the Display...

WordPress Responsive Logo Slideshow Cross Site Scripting

Exploit Title : Reflective/Stored XSS in Responsive Logo Slideshow Plugin Cross-Site Scripting Vulnerability Author: Aditya Balapure home: http://adityabalapure.blogspot.in/ Date: 18/02/13 software link: http://wordpress.org/extend/plugins/responsive-logo-slideshow/ CVE Assigned - CVE-2013-1759...