WordPress fGallery Plus Plugin - Reflected Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via fimrss.php album parameter. Solution Update the plugin...

WordPress fGallery Plus Plugin - Reflected Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via fimrss.php album parameter. Solution Update the plugin...

WordPress Embed Plus Plugin <= 5.3 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

ManageEngine Multiple Products Multiple Directory Traversal (CVE-2014-7866)

A directory traversal vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to lack of authentication and insufficient input validation in HTTP requests. A remote unauthenticated attacker can exploit this vulnerability by uploading arbitrary files to...

WordPress WP Photo Album Plus Cross-Site Scripting Vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WP Photo Album Plus is a plugin for managing and displaying photo albums and slideshows. A cross-site scripting...

WordPress WP Photo Album Plus Plugin <= 6.1.2 - Multiple XSS

Because of these vulnerabilities in wppa-ajax-front.php, the attackers can inject arbitrary web script or HTML via the "comemail" or "comname" parameters. Solution Update the plugin...

WordPress 3.5.1 Lightbox Plus RCE

Remote Code Execution in the Wordpress core using maybeunserialize and the simplehtmldomnode class Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gcc-c++-4.1.2 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the accessibility of protected information

Multiple vulnerabilities in the gtk+ package up to version 2.8.6-r1 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to the compromise of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gcc-c++-3.2.3 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gcc-objc++-4.1.2 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

WordPress DesignFolio+ Theme File Upload

Exploit Title: Wordpress Theme DesignFolio+ Arbitrary File Upload Vulnerability Google dork: inurl:wp-content/themes/DesignFolio-Plus Author: CrashBandicot Date: 04.03.2015 OSVDB-ID: 119623 Vendor HomePage: https://github.com/UpThemes/DesignFolio-Plus Software Link:...

Xerces-C++ XML Parsing Remote Denial of Service Vulnerability

Xerces is promoted by the Apache organization of an XML document parsing open source project . A vulnerability in the processing of XML data in internal/XMLReader.cpp in Apache Xerces-C allows remote attackers to conduct denial-of-service attacks...

WordPress DesignFolio Plus Theme <= 1.2 Arbitrary File Upload Vulnerability

The WordPress DesignFolio Plus Theme is prone to an arbitrary file upload vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Multiple Cross-Site Scripting Vulnerabilities in ZOHO ManageEngine ADManager Plus

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

CVE-2015-1026

Multiple cross-site scripting XSS vulnerabilities in ZOHO ManageEngine ADManager Plus before 6.2 Build 6270 allow remote attackers to inject arbitrary web script or HTML via the 1 technicianSearchText parameter to the Help Desk Technician page or 2 rolesSearchText parameter to the Help Desk Roles...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ZOHO ManageEngine ADManager Plus before 6.2 Build 6270 allow remote attackers to inject arbitrary web script or HTML via the 1 technicianSearchText parameter to the Help Desk Technician page or 2 rolesSearchText parameter to the Help Desk Roles...

CVE-2015-1026

Multiple cross-site scripting XSS vulnerabilities in ZOHO ManageEngine ADManager Plus before 6.2 Build 6270 allow remote attackers to inject arbitrary web script or HTML via the 1 technicianSearchText parameter to the Help Desk Technician page or 2 rolesSearchText parameter to the Help Desk Roles...

CVE-2015-1026

CVE-2015-1026 describes reflected XSS in ZOHO ManageEngine ADManager Plus (Admin Console) prior to 6.2 Build 6270. The vulnerabilities affect the Help Desk Technician page (technicianSearchText) and the Help Desk Roles page (rolesSearchText), enabling remote attackers to inject arbitrary HTML/scr...

Manage Engine AD Audit Manager Plus Cross Site Scripting

Title:- Reflected cross-site scriptingXSS Vulnerability in Manage Engine AD Audit Manager Plus Admin PanelBuild 6270 Author: Harish Ramadoss - Help AG Middle East Vendor: ZOHO Corp Product: Manage Engine AD Audit Manager Plus Version: All versions below Build 6270 are mostly affected Tested...