The vulnerability of the Moodle learning management system allows a hacker to circumvent existing restrictions on access time limits.

The vulnerability of the savesubmission function in the Moodle learning management system’s code mod/assign/externallib.php is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing time-based access restrictions by using the...

Microsoft Word (Windows/OSX) - Crash (PoC)

Source: https://twitter.com/halsten/status/740380171694280704 Win/Mac MSFT Word 0day POC having 3 different forced triggers. Happy exploitation! Let Word recover it, its essential, and then you can trigger the bug afterwards in 3 ways, Save, Close/Save, change format. Proof of Concept:...

CVE-2016-4812

Cross-site scripting XSS vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4812

Cross-site scripting XSS vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4812

The CVE-2016-4812 has concrete details: the WordPress plugin Markdown on Save Improved is affected by a stored XSS vulnerability in versions up to 2.5.1, allowing remote attackers to run arbitrary scripts via unspecified vectors. Exploitation is documented in multiple sources (NVD, JVN, CVE lists...

CVE-2016-4812: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

The vulnerability of the PHP interpreter allows attackers to read arbitrary files or write to them.

The vulnerability of the PHP interpreter lies in the lack of checks for the sequence “%00” in the path name. Exploiting this vulnerability allows an attacker to read arbitrary files or write to them using specially crafted input data for an application that calls the DOMDocument save method or th...

WordPress Markdown on Save Improved Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.Markdown on Save Improved is one of the editor plugin. A cross-site scripting vulnerability exists in WordPress...

JVN#26026353: WordPress plugin "Markdown on Save Improved" vulnerable to cross-site scripting

The WordPress plugin "Markdown on Save Improved" contains a stored cross-site scripting CWE-79 vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the plugin Update the plugin according to the information provided by the developer. While the...

How To: Configure UPM to save password in Internet Explorer

Users are unable to save passwords in Internet Explorer if their profile is managed by UPM...

WordPress Markdown on Save Improved Plugin <= 2.5.0 - XSS

This vulnerability allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Solution Update the plugin...

CVE-2015-4598: Improper Input Validation

PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls 1 a DOMDocument save method or 2 the GD imagepsloadfont function...

Symphony CMS SQL Injection Vulnerability

Symphony is a content management system CMS developed using PHP MySQL. Symphony suffers from a SQL injection vulnerability because the program fails to adequately validate the 'fieldsusername', 'actionsave', and 'fieldsemail' parameters can be exploited to execute arbitrary SQL code in the...

save-a-lot.com XSS vulnerability

Vulnerable URL: http://save-a-lot.com/search/node/%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:04 GMT Vulnerability type:| XSS Vulnerabilit...

CVE-2016-3169

The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the usersave function with an explicit category and loads all roles into the array...

UBUNTU-CVE-2016-3169

The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the usersave function with an explicit category and loads all roles into the array...

DEBIAN-CVE-2015-8604

SQL injection vulnerability in the hostnewgraphs function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via the cgg parameter in a save action...

UBUNTU-CVE-2015-8604

SQL injection vulnerability in the hostnewgraphs function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via the cgg parameter in a save action...

Save the Puppies - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Save the Puppies published at the 'play' market has multiple vulnerabilities...

App2SD &App Manager-Save Space - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application App2SD &App Manager-Save Space published at the 'play' market has multiple vulnerabilities...