6221 matches found
PYSEC-2015-27
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...
PYSEC-2015-27
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...
CVE-2015-7337
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...
CVE-2015-7337
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...
CVE-2015-7337: Improper Input Validation
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...
PT-2015-7525
Name of the Vulnerable Software and Affected Versions IPython Notebook versions prior to 3.2.2 Jupyter Notebook versions 4.0.x prior to 4.0.5 Description The issue allows remote attackers to execute arbitrary JavaScript code via a crafted file. This is related to MIME types and triggers a redirec...
Kirby CMS <= V2.1.0 文件上传漏洞
1.漏洞分析 漏洞程序下载地址： http://download.getkirby.com/files/kirby-2.1.0.zip panel/app/controllers/api/files.php 220行 php ifstrtolower$file-extension == kirby-option'content.file.extension', 'txt' throw new Exception'Content files cannot be uploaded'; else ifstrtolower$file-extension == 'php' or...
h5ai < 0.25.0 - Unrestricted Arbitrary File Upload
!/usr/bin/env python Exploit Title: h5ai 0.25.0 Unrestricted File Upload Date: 21 September 2015 Exploit Author: rTheory Vendor Homepage: https://larsjung.de/h5ai/ Vulnerable Software Link: https://web.archive.org/web/20140208063613/http://release.larsjung.de/h5ai/h5ai-0.24.0.zip Vulnerable...
Symantec Web Gateway Arbitrary PHP File Upload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is required to exploit this vulnerability, however it can be bypassed via reflected cross-site scripting. The specific flaw exists within the adminmessages.php...
Amazon Linux: Security Advisory (ALAS-2012-62)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 3335-1] request-tracker4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3335-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 13, 2015 https://www.debian.org/security/faq...
Google Chrome 43.0 - Certificate MIME Handling Integer Overflow Exploit
Exploit for multiple platform in category dos / poc ! /usr/bin/python2 import socket import sys import time kHost = '127.0.0.1' kPort = 443 def bindlisten: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.setsockoptsocket.SOLSOCKET, socket.SOREUSEADDR, 1 s.setsockoptsocket.SOLSOCKET,...
Debian DSA-3335-1 : request-tracker4 - security update
It was discovered that Request Tracker, an extensible trouble-ticket tracking system is susceptible to a cross-site scripting attack via the user and group rights management pages CVE-2015-5475 and via the cryptography interface, allowing an attacker with a carefully-crafted key to inject...
[SECURITY] [DSA 3335-1] request-tracker4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3335-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 13, 2015 https://www.debian.org/security/faq -...
Google Chrome 43.0 - Certificate MIME Handling Integer Overflow
Google Chrome 43.0 - Certificate MIME Handling Integer Overflow ! /usr/bin/python2 import socket import sys import time kHost = '127.0.0.1' kPort = 443 def bindlisten: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.setsockoptsocket.SOLSOCKET, socket.SOREUSEADDR, 1 s.setsockoptsocket.SOLSOCKE...
Google Chrome 43.0 - Certificate MIME Handling Integer Overflow
!/usr/bin/python2 import socket import sys import time kHost = '127.0.0.1' kPort = 443 def bindlisten: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.setsockoptsocket.SOLSOCKET, socket.SOREUSEADDR, 1 s.setsockoptsocket.SOLSOCKET, socket.SOREUSEPORT, 1 s.bindkHost, kPort s.listen1 return s de...
Debian Security Advisory DSA 3335-1 (request-tracker4 - security update)
It was discovered that Request Tracker, an extensible trouble-ticket tracking system is susceptible to a cross-site scripting attack via the user and group rights management pages CVE-2015-5475 and via the cryptography interface, allowing an attacker with a carefully-crafted key to inject...
FreeBSD : RT -- two XSS vulnerabilities (83b38a2c-413e-11e5-bfcf-6805ca0b3d42)
Best Practical reports : RT 4.0.0 and above are vulnerable to a cross-site scripting XSS attack via the user and group rights management pages. This vulnerability is assigned CVE-2015-5475. It was discovered and reported by Marcin Kopec at Data Reliance Shared Service Center. RT 4.2.0 and above a...
DSA-3335-1 request-tracker4 - security update
Bulletin has no description...
RT -- two XSS vulnerabilities
Best Practical reports: RT 4.0.0 and above are vulnerable to a cross-site scripting XSS attack via the user and group rights management pages. This vulnerability is assigned CVE-2015-5475. It was discovered and reported by Marcin Kopec at Data Reliance Shared Service Center. RT 4.2.0 and above ar...