Splunk Enterprise and Splunk Light Web Cross-Site Scripting Vulnerabilities

Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructure. A cross-site scripting vulnerability exists in Splunk Enterprise and Splunk Light in the...

Analysis of the latest firefox 0day attack-vulnerability warning-the black bar safety net

! /Article/UploadPic/2015-8/2015813114114594.jpg The Mozilla Foundation in the 8 May 6, as Firefox released a security update to fix the Firefox embedded PDF reader pdf. js in the cve-2 0 1 5-4 4 9 5 vulnerability. The vulnerability allows an attacker to bypass the same origin policy,in the local...

Shopify - Persistent Embed POST Inject Vulnerability

Document Title: =============== Shopify - Persistent Embed POST Inject Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1556 Video View: https://www.youtube.com/watch?v=5qiJ4UjJtQ Release Date: ============= 2015-08-13 Vulnerability Laboratory ID VL-ID:...

AdHocMate v1.0 iOS - Persistent Mail Encode Vulnerability

Document Title: =============== AdHocMate v1.0 iOS - Persistent Mail Encode Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1559 Release Date: ============= 2015-07-27 Vulnerability Laboratory ID VL-ID: ====================================...

WordPress aeration XSS high-risk vulnerabilities, affect millions of websites-vulnerability warning-the black bar safety net

! WordPress CMS has just released the update--4.2.3 version, to fix a serious, affecting millions of websites security breach. WordPress on thereXSSvulnerability The WordPress team on Tuesday in its blog wrote, Wordpress 4.2.3 version fixes a cross-site scriptXSS vulnerability, has author rights,...

адвокат-в-томске.рф XSS vulnerability

Vulnerable URL:...

Multiple cross-site scripting vulnerabilities in Cisco WebEx Meeting Center (CNVD-2015-04700)

Cisco WebEx Meeting Center is a web-based online meeting product within a suite of WebEx meeting solutions. A cross-site scripting vulnerability in Cisco WebEx Meeting Center allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

Ikiwiki 'openid_identifier' parameter cross-site scripting vulnerability

Ikiwiki is a wiki compiler that supports the conversion of wiki pages into HTML pages for web publishing. Ikiwiki handles a cross-site scripting vulnerability in the 'openididentifier' parameter, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code,...

AudioShare Cross-Site Scripting Vulnerability

AudioShare is an audio file manager. The AudioShare forgot.php script fails to properly handle the 'email' parameter, allowing remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack user sessions whe...

Drupal EntityBulkDelete Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP.EntityBulkDelete is a module for bulk deletion of any type of entity. A cross-site scripting vulnerability exists in the Drupal EntityBulkDelete module, which allows remote attackers to exploit the vulnerability to inject...

Adobe Connect Cross-Site Scripting Vulnerability

Adobe Connect is an enterprise web conferencing solution. A cross-site scripting vulnerability exists in Adobe Connect, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions whe...

Novell ZENworks Mobile Management Cross-Site Scripting Vulnerability

Novell ZENworks Mobile Management is a mobile device management solution. A cross-site scripting vulnerability in the Novell ZENworks Mobile Management login form allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that, when viewed with malicious data,...

Drupal Webform module cross-site scripting vulnerability (CNVD-2015-03860)

Drupal is a free and open source content management system developed in PHP. webform is a market research questionnaire module. The Drupal Webform module handles view-based webform result forms with a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to...

WordPress Backup to Dropbox plugin cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress Backup to Dropbox is a plugin for backing up data to Dropbox. A cross-site scripting vulnerability exists in the WordPress Backup to Dropbox...

Microsoft Exchange Server Input Validation Cross-Site Scripting Vulnerability

Microsoft Exchange Server is an enterprise-class mail service program. An input validation vulnerability exists in Microsoft Exchange Server, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hija...

Drupal Shipwire Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP language.Shipwire is a distribution query module. A cross-site scripting vulnerability exists in the Drupal Shipwire module, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML...

Drupal Web Links Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. web Links is one of the web link modules. A cross-site scripting vulnerability exists in the Drupal Navigate module, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, whi...

Drupal Linear Case Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Linear Case, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

Drupal Crumbs Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Crumbs, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information ...

Palo Alto Networks Pan-OS Management Interface Cross-Site Scripting Vulnerability

PAN-OS is a security-specific operating system designed to control Palo Alto Networks' next-generation firewalls, providing a rich set of firewall, management, and network features. A cross-site scripting vulnerability exists in the Palo Alto Networks Pan-OS WEB management interface, which allows...