SP Projects & Document Manager <= 2.5.9.5 - Multiple Vulnerabilities

The SP Project & Document Manager WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

WordPress SP Projects And Document Manager 2.5.9.6 XSS / SQL Injection

Exploit Title: Multiple Vulnerabilities in SP Projects & Document Manager Discovery Date: 2016/01/13 Public Disclosure Date: 2016/03/06 Exploit Author: Michael Helwig Contact: https://twitter.com/c0dmtr1x Vendor Homepage: http://smartypantsplugins.com/ Software Link:...

XM Easy Personal FTP Server 5.8.0 - HELP Remote Denial of Service

XM Easy Personal FTP Server 5.8.0 - HELP Remote Denial of Service !/usr/bin/python XM Easy Personal FTP Server 5.8.0 HELP Denial of Service Tested on : Windows XP SP 3 EN Author : Pawan Lal [email protected] Date : 18-02-2016 import socket import sys def Usage: print "Usage:...

XM Easy Personal FTP Server 5.8.0 - 'HELP' Remote Denial of Service

!/usr/bin/python XM Easy Personal FTP Server 5.8.0 HELP Denial of Service Tested on : Windows XP SP 3 EN Author : Pawan Lal [email protected] Date : 18-02-2016 import socket import sys def Usage: print "Usage: ./ftpxmftpdosbackup.py \n" buffer= "A" 4500 def starthostname, username, passwd: sock...

sp-fan.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-124872 Description| Value ---|--- Affected Website:| sp-fan.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

CVE-2015-6132

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library loading, which allows local users to gain privileges via a crafted application, aka...

egov1.santos.sp.gov.br XSS vulnerability

Vulnerable URL: https://egov1.santos.sp.gov.br/cgi-bin/do0104/ksearch.cgi?terms=d=Nome+de+Arquivo=5%22%3E%3Csvg/onload=alert%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:55 GMT Vulnerability type:| XSS Vulnerability...

CVE-2015-5301

providers/saml2/admin.py in the Identity Provider IdP server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider SP...

CVE-2015-5217: Undefined Security Weakness

providers/saml2/admin.py in the Identity Provider IdP server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider SP owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name...

PT-2015-6803

Name of the Vulnerable Software and Affected Versions Ipsilon versions 0.1.0 through 1.0.0 Description The issue is related to the Identity Provider IdP server, where the providers/saml2/admin.py file does not properly check permissions to update the SAML2 Service Provider SP owner. This allows...

PT-2015-7854

Name of the Vulnerable Software and Affected Versions Ipsilon versions 0.1.0 through 1.0.0 Description The issue is related to the providers/saml2/admin.py file in the Identity Provider IdP server, where it does not properly check permissions to update the SAML2 Service Provider SP owner. This...

mariadb: denial of service

CVE-2015-4913 denial of service allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858. - CVE-2015-4870 denial of service allows remote authenticated users to affect availability via unknown vectors related to...

Design/Logic Flaw

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP...

CVE-2015-4836

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP...

CVE-2015-4836

CVE-2015-4836 is an unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allowing remote authenticated users to affect availability via unknown vectors related to Server : SP. Affected products/versions are Oracle MySQL Server 5.5.x (&lt;=5.5.45) and 5.6.x (

UBUNTU-CVE-2015-4836

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP...

CVE-2015-4836

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP...

CVE-2015-4836: Undefined Security Weakness

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP...

PT-2015-6915

Name of the Vulnerable Software and Affected Versions HP 3PAR Service Processor SP versions 4.2.0.GA-29 through 4.3.0.GA-17 HP 3PAR Service Processor SP version 4.3.0-GA-24 Description The issue allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2015-3158

The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a 1 direct request or 2...