NetGain Enterprise Manager File Upload Vulnerability

Netgain Enterprise Manager is a suite of IT asset monitoring and management software from NetGain Systems, Singapore. A remote code execution vulnerability exists in the org.apache.jsp.u.jsp.db.save005fimagejsp servlet in NetGain Enterprise Manager, which originates from a process that fails to...

WoltLab Community Gallery Cross-Site Scripting Vulnerability

WoltLab Community Gallery is a set of community photo gallery applications for sharing images and experiences in the community by WoltLab Germany. A cross-site scripting vulnerability exists in version 2.0 of WoltLab Community Gallery prior to 2014-12-26, which stems from a failure of the...

libvirt: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects

It was discovered that the virDomainSnapshotGetXMLDesc and virDomainSaveImageGetXMLDesc functions did not sufficiently limit the usage of the VIRDOMAINXMLSECURE flag when fine-grained ACLs were enabled. A remote attacker able to establish a connection to libvirtd could use this flaw to obtain...

UBUNTU-CVE-2013-4542

The virtioscsiloadrequest function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds array access...

China Mobile self-service terminal to bypass the sandbox-vulnerability warning-the black bar safety net

Brief description: After login, click a query item, a long press on the image after the pop-up Save Image option. Detailed description: 1, The! 2, The after login select—"bill query"—the"tariff of gold Abacus"—query within the picture by long pressing it will bring up the Save Image options such ...