4814 matches found
[SECURITY] Fedora 24 Update: git-2.7.4-1.fc24
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...
The vulnerability of the WildFly application server in Java, which allows a hacker to read confidential files
The vulnerability of the WildFly application server in Java relates to the use of an incomplete blacklist. Exploiting this vulnerability allows a malicious actor to read confidential files in the WEB-INF or META-INF directories by using a query containing lowercase characters or “ meaningless”...
WordPress User Meta Manager Plugin Information Disclosure Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An information disclosure vulnerability exists in the WordPress User Meta Manager plugin version 3.4.6, which allows attacker...
[SECURITY] Fedora 24 Update: kernel-4.5.1-300.fc24
The kernel meta package...
[SECURITY] Fedora 22 Update: kernel-4.4.6-201.fc22
The kernel meta package...
WordPress Multiple Meta Box Plugin <= 1.0 - Blind SQL Injection
Because of this vulnerability, the attackers and privileged user accounts can execute own sql commands to compromise the web-server or dbms. Solution Update the plugin...
WP Multiple Meta Box 1.0 - Authenticated Blind SQL Injection
The multi-meta-box WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability. http://www.example.com/wp-admin/admin.php?page=multimetaboxlisting&action=edit&id=1 AND SELECT FROM SELECTSLEEP5Etmx...
WP Multiple Meta Box v1.0 - SQL Injection Vulnerability
Document Title: =============== WP Multiple Meta Box v1.0 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1818 Release Date: ============= 2016-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 18...
Wildfly：WEB-INF和META-INF信息披露
No description provided by source...
[SECURITY] Fedora 24 Update: kernel-4.5.0-302.fc24
The kernel meta package...
Design/Logic Flaw
Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly formerly JBoss Application Server before 10.0.0.Final on Windows allows remote attackers to read the sensitive files in the 1 WEB-INF or 2 META-INF directory via a request that contains a lowercase or b...
Debian Security Advisory DSA 3538-1 (libebml - security update)
Several vulnerabilities were discovered in libebml, a library for manipulating Extensible Binary Meta Language files. CVE-2015-8789 Context-dependent attackers could trigger a use-after-free vulnerability by providing a maliciously crafted EBML document. CVE-2015-8790 Context-dependent attackers...
Snapchat: XSS found on Snapchat website
Hi Snapchat Team, I've found a reflected XSS vulnerability on this page: https://www.snapchat.com/add/snapchat Example: https://www.snapchat.com/add/%22%3E%3Ch1%3EXSS%3C%2Fh1%3E Note: you should visit the page with a mobile user-agent since the server displays different information based on the...
[SECURITY] Fedora 23 Update: kernel-4.4.6-300.fc23
The kernel meta package...
OpenSSH Implementations with X11Forwarding Enabled Should Heed Recent Security Update
Users who choose to enable X11Forwarding in OpenSSH, or those who use software products that re-enable it, should pay close attention to last Wednesday’s OpenSSH security update. The latest version of the open source implementation of the SSH protocol patches a flaw that exposes it to command...
OpenSSH Patches Information Leak Flaw
OpenSSH on Friday last Wednesday dropped a patch for a vulnerability that could expose files to theft and manipulation. The flaw affects all versions of OpenSSH prior to 7.2p2 with X11Forwarding enabled, the OpenSSH project said in its advisory. Unpatched versions of OpenSSH don’t properly saniti...
Vimeo: Private, embeddable videos leaks data through Facebook & Open Graph
Clip meta-data disclosed to thrid-party crawlers...
WordPress Plugin WP Advanced Comment 0.10 - Persistent Cross-Site Scripting
WordPress Plugin WP Advanced Comment 0.10 - Persistent Cross-Site Scripting 1. Introduction Exploit Title: WordPress WP Advanced Comment 0.10 Persistent XSS Date: Mar.09.2016 Exploit Author: Mohammad Khaleghi Contact: https://twitter.com/blackmatrix Vendor: Ravi Shakya Tested On: Apache2.2 / PHP5...