Cross site request forgery (csrf)

message/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to bypass a messaging-disabled setting via a web-services request, as demonstrated by a people-search request...

UBUNTU-CVE-2015-0214

message/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to bypass a messaging-disabled setting via a web-services request, as demonstrated by a people-search request...

CVE-2015-1151

Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client...

CVE-2015-1151

Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client...

PT-2015-5133

Name of the Vulnerable Software and Affected Versions Apple OS X Server versions prior to 4.1 Description The issue allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client. Recommendations For Apple OS X Server versions prior to 4.1,...

PT-2015-1606

Name of the Vulnerable Software and Affected Versions Moodle versions 2.5.9 and earlier Moodle versions 2.6.x before 2.6.7 Moodle versions 2.7.x before 2.7.4 Moodle versions 2.8.x before 2.8.2 Description The issue is related to insufficient access control in the message/externallib.php component...

vampir.mobi SQL injection Vulnerability (100k people)

SQL injection on site vampir.mobi with a lot of people about 100k. Usage Info Need sqlmap, registred account This is private exploit. You can buy it at https://0day.today...

Oracle July 2014 Critical Patch Update

Never one to skimp on patches, Oracle is expected to release 113 of them tomorrow as part of its quarterly Critical Patch Update. The company also clarified that Java 7 versions will continue to work on the end-of-life Microsoft Windows XP platform and Oracle security updates for Java on XP...

Craigslist Gold - SQL Injection Vulnerability

No description provided by source. Exploit Title: Craigslist Clone Gold SQL injection Vulnerability Date: 04/05/2013 Author: Fallaga Team: FaLLaGa Tunisian Hackers Script url: http://www.scriptcopy.com/craigslist-clone-script/Craiglist-Gold-4444.html Version: N/A Tested on: Demo CVE : EXPL0!T...

WordPress wp-people Plugin 2.0 'wp-people-popup.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27858/info The WordPress 'wp-people' plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

People-Trak Login SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34491/info People-Trak is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

People Joomla Component 1.0.0 - SQL Injection Vulnerability

No description provided by source. People Joomla Component 1.0.0 SQL Injection Vulnerability Name People Vendor http://www.ptt-solution.com Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2011-01-1...

[oss-security] Re: Bug#751417: linux-image-3.2.0-4-5kc-malta: no SIGKILL after prctl(PR_SET_SECCOMP, 1, ...) on MIPS

On dim., 2014-06-15 at 19:31 +0100, Ben Hutchings wrote: Please can you assign a CVE ID to this bug? Hi Ben, we usually don't assign CVE from our pool for public issues, and I'm especially reluctant here as I don't know if someone else aware of this issue could have assign one. So I'm asking on...

OpenICS ICS Protocol Decoder Builds Data Dictionaries

Industrial control system security has been called archaic, laughable and even non-existent. Most ICS and SCADA systems weren’t built with the Internet in mind, much less security, but yet they are at the forefront of manufacturing, building automation and critical infrastructure operations...

CVE-2014-0450

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect confidentiality via unknown vectors related to People Connection...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect confidentiality via unknown vectors related to People Connection...

CVE-2014-0450

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect confidentiality via unknown vectors related to People Connection...

CVE-2014-0450: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect confidentiality via unknown vectors related to People Connection...

PT-2014-3638

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal versions 11.1.1.7 through 11.1.1.8 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to People Connection. Recommendations For versions 11.1.1.7 and...

WordPress Barclaycart Shell Upload

WordPress Barclaycart Plugins Arbitrary File Upload Author : eX-Sh1Ne Facebook : www.fb.me/ShiNe.gov Google Dork = inurl:"wp-content/plugins/barclaycart" Vuln : wp-content/plugins/barclaycart/uploadify/uploadify.php Exploit : "@$uploadfile", 'folder'='/wp-content/plugins/barclaycart/uploadify/';...