1308 matches found
Virtuozzo 6 : libvzctl / parallels-kernel-modules / etc (VZA-2017-005)
According to the versions of the libvzctl / parallels-kernel-modules / etc packages installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - A flaw found in the way prl-vzvncserver parsed terminal escape sequences that could allow a remote attacker...
Virtuozzo 6 : parallels-server-bm-release / vzkernel / etc (VZA-2017-001)
According to the version of the parallels-server-bm-release / vzkernel / etc packages installed, the Virtuozzo installation on the remote host is affected by the following vulnerability : - Fixed handling of stored error in a negatively instantiated user key. Key management subsystems could be...
blog.parallels.com XSS vulnerability
Open Bug Bounty ID: OBB-152016 Description| Value ---|--- Affected Website:| blog.parallels.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2 0 1 6-1 0 1 9: a Magnitude attack tool flash vulnerability-vulnerability warning-the black bar safety net
Last month, Proofpoint has a security researchers found the Magnitude of attack tools there appears to be some new stuff. So in their cooperation we analyzed the sample and found that Magnitude EK added before exist in the Adobe Flash Player Vulnerability, cve-2 0 1 6-1 0 1 9, and then the wild u...
Parallels Access - Exported components, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Parallels Access published at the 'play' market has multiple vulnerabilities...
Parallels Client - Customized SSL, Hardcoded secrets vulnerabilities
HackApp vulnerability scanner discovered that application Parallels Client published at the 'play' market has multiple vulnerabilities...
jobnsk.parallels.com Open Redirect vulnerability
Vulnerable URL: http://jobnsk.parallels.com/ru-all/redirect.php?url=https://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 29.01.2016 Latest check for patch:| 29.01.2016 16:31 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...
Virtual Machine Monitors (VMM) contain a memory deduplication vulnerability
Overview Multiple vendors' implementations of Virtual Machine Monitors VMM are vulnerable to a memory deduplication attack. Description As reported in the "Cross-VM ASL INtrospection CAIN" paper, an attacker with basic user rights within the attacking Virtual Machine VM can leverage memory...
Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities
No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl::2006/Sites...
Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities
Exploit for php platform in category web applications +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : email protected Risk : High Class: Remote Google Dork:...
Multiple Vulnerabilities in Parallels® Plesk Sitebuilder
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl::2006/Sites ext:aspx inurl::2006 inurl:.ashx?media...
Parallels Plesk 11.5.x - URL Protection Filter Bypass
Document Title: =============== Parallels Plesk 11.5.x - URL Protection Filter Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1331 View: https://www.youtube.com/watch?v=mjkWIFNJ2Sw Release Date: ============= 2014-10-13 Vulnerability Laboratory ID VL-ID:...
Parallels Plesk 11.5.x - URL Protection Filter Bypass
Document Title: =============== Parallels Plesk 11.5.x - URL Protection Filter Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1331 View: https://www.youtube.com/watch?v=mjkWIFNJ2Sw Release Date: ============= 2014-10-13 Vulnerability Laboratory ID VL-ID:...
Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl::2006/Sites ext:aspx inurl::2006 inurl:.ashx?media...
Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities
Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dor...
Plesk Sitebuilder XSS / Bypass / Shell Upload / File Download
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl::2006/Sites ext:aspx inurl::2006 inurl:.ashx?media...
Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28593/info Parallels Virtuozzo Containers is prone to a cross-site request-forgery vulnerability. Exploiting the issue will allow a remote attacker to use a victim's currently active session to change the victim's passwor...
Parallels PLESK 9.x - Insecure Permissions
No description provided by source. Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK panel is...
Parallels H-Sphere 3.0/3.1 'login.php' Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/31256/info H-Sphere is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...
Parallels Drag and Drop Hidden Share Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22597/info Parallels is prone to an arbitrary code-execution vulnerability because of a design flaw in the affected application. An attacker can exploit this issue to create files in the host operating system. This could...