Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The numerous vulnerabilities of the rxvt-ml package in the Debian GNU/Linux operating system may be exploited, which could lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...

Vulnerabilities in Samsung SyncThru Web Service

Hello 3APA3A! There are Information Leakage and Insufficient Authorization vulnerabilities in SyncThru Web Service. This is web application for Samsung printers, particularly I found it with Samsung ML-1865W and other printers. Earlier I informed Samsung about it. ------------------------- Affect...

CVE-2014-4846

CVE-2014-4846 refers to a Cross-Site Scripting (XSS) vulnerability in the Meta Slider (ml-slider) WordPress plugin version 2.5. The issue allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php. Concrete details show the affected software componen...

CVE-2014-4846: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...

Samsung ml85p Printer Driver 1.0 Insecure Temporary File Creation Vulnerability (3)

No description provided by source. source: http://www.securityfocus.com/bid/3008/info ml85p is a Linux driver for Samsung ML-85G series printers. It may be bundled with distributions of Ghostscript. ml85p does not check for symbolic links when creating image output files. These files are created ...

Samsung ml85p Printer Driver 1.0 Insecure Temporary File Creation Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/3008/info ml85p is a Linux driver for Samsung ML-85G series printers. It may be bundled with distributions of Ghostscript. ml85p does not check for symbolic links when creating image output files. These files are created ...

WordPress ml-slider 2.5 Cross Site Scripting

Exploit Title : Wordpress ml-slider 2.5 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/ml-slider Software Link : downloads.wordpress.org/plugin/ml-slider.2.5.zip Date : 2014-06-27 Tested on : Windows 7 / Mozilla Firefox Location...

CakePHP 2.3.7 / 2.2.8 Local File Inclusion

CVE Number: N/A not assigned Title: CakePHP AssetDispatcher Local File Inclusion Vulnerability Affected Software: Confirmed on CakePHP v2.3.7, v2.2.8 prior versions may also be affected Credit: Takeshi Terada of Mitsui Bussan Secure Directions, Inc. Issue Status: v2.3.8 & 2.2.9 was released which...

Code injection

Unspecified vulnerability on HP ProLiant DL and ML 100 Series G5, G5p, and G6 servers with ProLiant Onboard Administrator Powered by LO100i formerly Lights Out 100 3.07 and earlier allows remote attackers to cause a denial of service via unknown vectors...

CVE-2009-1426

CVE-2009-1426 affects HP ProLiant DL/ML 100 Series G5, G5p and G6 servers with ProLiant Onboard Administrator Powered by LO100i (Lights Out 100) 3.07 and earlier. The vulnerability allows remote attackers to cause a denial of service via unknown vectors. No root cause, exploit details, or remedia...

CVE-2009-1426: Undefined Security Weakness

Unspecified vulnerability on HP ProLiant DL and ML 100 Series G5, G5p, and G6 servers with ProLiant Onboard Administrator Powered by LO100i formerly Lights Out 100 3.07 and earlier allows remote attackers to cause a denial of service via unknown vectors...

AIX 520010 : U815057

The remote host is missing AIX PTF U815057 which is related to the security of the package bos.rte.libc You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 530006 : U814218

The remote host is missing AIX PTF U814218 which is related to the security of the package bos.altdiskinstall.bootimages You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

iSupport v1.8 Local file include vulnerability

iSupport v1.8 Local file Inclusion Vuln found by JuMp-Er http://www.ahc-security.org Script Name : iSupport version : 1.8 Vendor Site : http://www.idevspot.com/iSupport.php Exploit : http://www.site.com/iSupport/index.php?includefile=local file 3 StRoNiX, mawena, ML, n0th1ng...

AIX 610000 : U813961

The remote host is missing AIX PTF U813961 which is related to the security of the package bos.sysmgt.sysbr You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

win32 download and execute 124 bytes

Exploit for win32 platform in category shellcode ==================================== win32 download and execute 124 bytes ==================================== ; ; relocateable dynamic runtime assembly code example using hash lookup for IE exploits only ; the URLMON.DLL must already be loaded int...

Unfixed XSS vulnerability at ml-st.com

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting ml-st.com, which at the time of submission ranked 129043 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is currently...

security flaw

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the 1 adminpw or 2 info parameters to the ml-name feature...

security flaw

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the 1 adminpw or 2 info parameters to the ml-name feature...

CVE-2002-0855: Undefined Security Weakness

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the 1 adminpw or 2 info parameters to the ml-name feature...