10116 matches found
Android Open Source Platform (AOSP) Browser UXSS
This module exploits a Universal Cross-Site Scripting UXSS vulnerability present in all versions of Android's open source stock browser before 4.4, and Android apps running on 'Android Open Source Platform AOSP Browser UXSS', 'Description' = %q This module exploits a Universal Cross-Site Scriptin...
MGASA-2014-0368 Updated ppp packages fix a security vulnerability
Updated ppp packages fix security vulnerability: A vulnerability in ppp before 2.4.7 may enable an unprivileged attacker to access privileged options CVE-2014-3158...
Updated ppp packages fix a security vulnerability
Updated ppp packages fix security vulnerability: A vulnerability in ppp before 2.4.7 may enable an unprivileged attacker to access privileged options CVE-2014-3158...
Microsoft: Exploiting XSS with clickjacking
Little Insight: Click jacking just hide-the-button-and-follow-the-mouse. also know as UI Redressing its just playing with the UI of the victim application by clicking and mouse event . In this post we'll show UI-Redressing attack and how an attacker may trigger an unexploitable XSS flaw in an...
Tor Browser Hardening Features Under Scrutiny
Tor is a target like never before. The NSA has made no bones about its disdain for the anonymity network, and someone, allegedly researchers from Carnegie Mellon University, were recently on the network trying to de-anonymize users of its hidden services. All of this has prompted the keepers of T...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 disqusreplace, 2 disquspublickey, or 3...
Linux kernel multiple security vulnerabilities
DoS via ptrace syscall, filesystems mount options limitation bypass...
CVE-2014-5089
SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the log parameter...
Sql injection
SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the log parameter...
CVE-2014-5089
Status2k Server Monitoring Software (Status2K) is affected by CVE-2014-5089 due to an SQL injection in admin/options/logs.php where the log parameter can be exploited by remote authenticated administrators to execute arbitrary SQL commands. This is supported by multiple sources (NVD entry CVE-201...
CVE-2014-5089: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the log parameter...
CVE-2014-5090: Improper Control of Generation of Code
admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel...
PT-2014-6273
Name of the Vulnerable Software and Affected Versions Status2k affected versions not specified Description The issue allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel. This is possible due to a la...
PT-2014-6272
Name of the Vulnerable Software and Affected Versions Status2k affected versions not specified Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the admin/options/logs.php file via th...
Twitter 'Weighing Legal Options' On Publishing National Security Requests Data
Twitter officials are pushing the United States government for more freedom to publish specific numbers about national security information requests, and said the company is considering its legal options if the government doesn’t allow more data to be made public. In its latest transparency repor...
BannerMan 0.2.4 - XSS in wp-admin/options-general.php via bannerman_background parameter
The BannerMan WordPress plugin was affected by a XSS in wp-admin/options-general.php via bannermanbackground parameter security vulnerability...
Member Approval 131109 - wp-admin/options-general.php Option Manipulation CSRF
The member-approval WordPress plugin was affected by a wp-admin/options-general.php Option Manipulation CSRF security vulnerability...
Marekkis Watermark 0.9.2 - wp-admin/options-general.php pfad Parameter XSS
The Marekkis Watermark-Plugin WordPress plugin was affected by a wp-admin/options-general.php pfad Parameter XSS security vulnerability...
Backend Localization 1.6.1 - options-general.php kau-boys_backend_localization_language Parameter XSS
The Backend Localization WordPress plugin was affected by an options-general.php kau-boysbackendlocalizationlanguage Parameter XSS security vulnerability...
