UBUNTU-CVE-2018-10535

The ignoresectionsym function in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, does not validate the outputsection pointer in the case of a symtab entry with a "SECTION" type that has a "0" value, which allows remote attackers to cause a denial o...

CVE-2018-10367: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the title or content section...

DEBIAN-CVE-2017-14450

A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...

CVE-2017-14450

A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...

UBUNTU-CVE-2017-14450

A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...

PT-2018-9827

Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a stored Cross Site Scripting vulnerability. It can be triggered via the Admin Site title in the Settings section. Recommendations: For Frog CMS version 0.9.5, update to a newer...

CVE-2017-14450: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...

PT-2018-9774

Name of the Vulnerable Software and Affected Versions: User Profile & Membership plugin versions prior to 2.0.11 Description: An issue exists in the User Profile & Membership plugin for WordPress, where authenticated cross-site scripting is possible. This is due to a vulnerability in the Account...

Linux/x86 TCP Port 1337 Bindshell Shellcode

92 bytes small Linux x86 tcp/1337 bindshell shellcode. / Linux x86 Bind TCP shellcode This shellcode will listen on port 1337 and give you /bin/sh Shellcode Author: Anurag Srivastava Shellcode Length: 92 Student-ID: SLAE-1219 Note...

CVE-2015-9220: Integer Overflow or Wraparound

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 20...

Cross site scripting

Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content section of a new page in the blog catalog...

PT-2018-9703

Name of the Vulnerable Software and Affected Versions: iScripts UberforX version 2.2 Description: The issue concerns a Stored XSS in the manage settings section of the Admin Panel. This occurs via a value field to the "/cms?section=manage settings&action=edit" API endpoint. Recommendations: For...

PT-2018-9704

Name of the Vulnerable Software and Affected Versions: iScripts UberforX version 2.2 Description: The issue concerns a CSRF flaw in the "manage settings" section of the Admin Panel. This can be exploited via the /cms?section=manage settings&action=edit URI. Recommendations: For iScripts UberforX...

PT-2018-9693

Name of the Vulnerable Software and Affected Versions: Monstra CMS version 3.0.4 Description: The issue concerns a stored XSS vulnerability. An attacker with access to the editor role can exploit this by entering a malicious payload in the title section of the "Edit 404 page" action, which is...

CVE-2018-10121: Improper Neutralization of Input During Web Page Generation

plugins/box/pages/pages.admin.php in Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the title section of an admin/index.php?id=pages&action=editpage&name=error404 aka Edit 404 page action...

PT-2018-9685

Name of the Vulnerable Software and Affected Versions: Monstra CMS version 3.0.4 Description: The issue is related to a stored XSS vulnerability. When an attacker has access to the editor role, they can enter a malicious payload in the content section of a new page in the blog catalog...

CVE-2018-9155

Cross-site scripting XSS vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin-Logs section with a logs?logs.type= URI and the Manage-Attributes section via the "Name display"...

CVE-2018-9155

Cross-site scripting XSS vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin-Logs section with a logs?logs.type= URI and the Manage-Attributes section via the "Name display"...

Dell EMC Avamar And Integrated Data Protection Appliance Invalid Access Control

Exploit Title: Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager Missing Access Control Vulnerability DSA-2018-025 Date: 24/11/2017 Exploit Author: SlidingWindow Vendor Homepage: https://store.Dell EMC.com/en-us/AVAMAR-PRODUCTS/Dell-DELL...

KLA11226 OSI vulnerability in Microsoft Developer Tools

An information disclosure vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2018-1037 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Visual-Studio CVE...