1580 matches found
CVE-2016-10541: Improper Neutralization of Special Elements used in an OS Command
The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape "" and "" operator used for redirection in shell. Applications that depend on shell-quote may also be vulnerable. A malicious user could perform code injection...
CVE-2018-9113
Centers for Disease Control and Prevention MicrobeTRACE 0.1.12 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial '...
Threat Outbreak Alert RuleID32401: Email Messages Distributing Malicious Software on April 5, 2018
Medium Alert ID: 57426 First Published: 2018 April 9 13:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32401 may contain the following files: Name | Siz...
datacentermap.com XSS vulnerability
Open Bug Bounty ID: OBB-598329 Description| Value ---|--- Affected Website:| datacentermap.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Code Execution Vulnerability in Micropoint Antivirus
Micropoint antivirus software is the second generation of antivirus software independently developed by Beijing Oriental Micropoint Information Technology Limited Liability Company with completely independent intellectual property rights. A code execution vulnerability exists in Micropoint...
UBUNTU-CVE-2017-17844
An issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content by sending an encrypted data block that the attacker cannot directly decrypt to a victim, and relying on the victim to automatically decrypt that block and then send it back to the attacker as quoted...
searchenginegenie.com XSS vulnerability
Open Bug Bounty ID: OBB-410830 Description| Value ---|--- Affected Website:| searchenginegenie.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
Cross-site Scripting (XSS)
Overview erubis is an implementation of eRuby and has the following features: Affected versions of the package are vulnerable to Cross-site Scripting XSS. Single quotes were not properly escaped in the helper.rb and helpers/railshelper.rb files. The Erubis Documentation shows missing escaping...
websweeper.com XSS vulnerability
Vulnerable URL: http://www.websweeper.com/liner/tank-liner/quote-attachment.php?shape=1"...
UBUNTU-CVE-2017-8073
WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the ircctcpdccfilenamewithoutquotes function during quote removal, with a buffer overflow...
DEBIAN-CVE-2017-5932
The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " double quote character and a command substitution metacharacter...
CVE-2017-5932
The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " double quote character and a command substitution metacharacter...
GNU / Bash v4.4 autocompletion Code Execution Vulnerability
Exploit for linux platform in category local exploits GNU Bash code execution vulnerability in path completion Jens Heyens, Ben Stock January 2017 1 Introduction GNU Bash from version 4.4 contains two bugs in its path completion feature leading to a code execution vulnerability. An exploit can be...
Cross site scripting
The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted...
CVE-2016-10034: Improper Neutralization of Special Elements used in a Command
The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double...
PT-2016-4561
Name of the Vulnerable Software and Affected Versions zend-mail component versions prior to 2.4.11 zend-mail component versions 2.5.x zend-mail component versions 2.6.x zend-mail component versions 2.7.x prior to 2.7.2 Zend Framework versions prior to 2.4.11 Description The issue allows remote...
CVE-2016-7966: Improper Control of Generation of Code
Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign = or a space into the injected HTML, which greatly reduces the available HTML functionality...
quote-spy.com Open Redirect vulnerability
Vulnerable URL: http://www.quote-spy.com/redirect.ashx?target=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 259092 VIP website status:| No...
