Lucene search
+L

1038 matches found

The Hacker News
The Hacker News
added 2015/06/11 2:14 p.m.15 views

I keep 200+ Browser Tabs Open, and My Computer Runs Absolutely Fine. Here’s My Secret.

I don't know about your part, but I make heavy use of tabs. I currently have 200+ tabs open in my Google Chrome Web browser. And sometimes the number is even more. For me it's a daily thing, as I regularly open new tabs because of my habit of reading lots of stuff online, including cyber security...

6.5AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2015/04/14 6:59 p.m.8 views

CVE-2014-8360

Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .. dot dot underscore in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php...

7.5CVSS6AI score0.02825EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2015/04/14 6:59 p.m.30 views

CVE-2014-8360

Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .. dot dot underscore in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php...

7.5CVSS6AI score0.02825EPSS
SaveExploits0References3
OSV
OSV
added 2015/04/14 6:59 p.m.16 views

UBUNTU-CVE-2014-8360

Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .. dot dot underscore in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php...

7.5CVSS6AI score0.02825EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2015/04/10 2:00 p.m.34 views

CVE-2015-1111

Safari in Apple iOS before 8.3 does not delete Recently Closed Tabs data in response to a history-clearing action, which allows attackers to obtain sensitive information by reading a history file...

4.8AI score0.01487EPSS
SaveExploits0References4
CVE
CVE
added 2015/04/10 2:00 p.m.61 views

CVE-2015-1111

CVE-2015-1111 affects Safari on iOS prior to 8.3. The issue: clearing history does not delete data from the Recently Closed Tabs/history file, allowing an attacker to read sensitive information. Root cause: history data not fully purged during history-clearing actions. Impact: potential informati...

5CVSS4.9AI score0.01487EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2015/03/26 12:00 a.m.8 views

Multiple cross-site scripting vulnerabilities in Drupal OG tabs module

Drupal is a developmental CMF Content Management Framework written in the PHP language. Multiple cross-site scripting vulnerabilities exist in the Drupal OG tabs module. Because the application fails to properly filter user-supplied input, an attacker could exploit the vulnerabilities to execute...

3.5CVSS6.9AI score0.00965EPSS
SaveExploits0References1
Drupal
Drupal
added 2015/03/11 12:00 a.m.26 views

SA-CONTRIB-2015-077 - OG tabs - Cross Site Scripting (XSS)

OG Tabs modules provides a secondary menu with links to nodes of the same OG group. The module doesn't sufficiently sanitize user supplied text in some pages, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have permission t...

3.5CVSS6AI score0.00965EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2015/03/02 12:00 a.m.32 views

FreeBSD : mozilla -- multiple vulnerabilities (99029172-8253-407d-9d8b-2cfeab9abf81)

The Mozilla Project reports : MFSA-2015-11 Miscellaneous memory safety hazards rv:36.0 / rv:31.5 MFSA-2015-12 Invoking Mozilla updater will load locally stored DLL files MFSA-2015-13 Appended period to hostnames can bypass HPKP and HSTS protections MFSA-2015-14 Malicious WebGL content crash when...

7.5CVSS7.2AI score0.06029EPSS
SaveExploits0References37
CNVD
CNVD
added 2015/02/28 12:00 a.m.6 views

Zope 'manage_tabs_message' parameter cross-site scripting vulnerability

Zope is an open source web application server. A cross-site scripting vulnerability exists in the Zope 'managetabsmessage' parameter due to the program failing to properly filter user-supplied input. An attacker could exploit this vulnerability to execute arbitrary script code or steal cookie-bas...

6.8AI score
SaveExploits0References1
Mozilla
Mozilla
added 2015/02/24 12:00 a.m.68 views

UI Tour whitelisted sites in background tab can spoof foreground tabs — Mozilla

Mozilla developer Matthew Noorenberghe reported that whitelisted Mozilla domains could make UITour API calls while the UI Tour pages for Firefox are present in background tabs. If one of these Mozilla domains was compromised and open in another tab, an attacker could then use that tab to engage i...

4.3CVSS8.9AI score0.0208EPSS
SaveExploits0References2Affected Software1
Hacker One
Hacker One
added 2014/09/08 7:19 p.m.23 views

Square: Reflected XSS in widget script thru cookie

There is buyerinfo cookie. Let set it to this value: a:9:s:10:"firstname";s:47:""xss...

6.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2014/07/10 12:00 a.m.14 views

WordPress Game-Tabs plugin 'n' Parameter Cross Site Scripting Vulnerability

WordPress Game-Tabs Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.3CVSS5.7AI score0.01629EPSS
SaveExploits1References1
NVD
NVD
added 2014/07/02 6:55 p.m.9 views

CVE-2014-4531

Cross-site scripting XSS vulnerability in mainpage.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter...

4.3CVSS5.8AI score0.01629EPSS
SaveExploits1References1
Prion
Prion
added 2014/07/02 6:55 p.m.18 views

Cross site scripting

Cross-site scripting XSS vulnerability in mainpage.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter...

4.3CVSS6.3AI score0.01629EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2014/07/02 6:00 p.m.44 views

CVE-2014-4531

The CVE-2014-4531 entry describes a Cross-Site Scripting (XSS) vulnerability in WordPress Game-Tabs plugin versions 0.4.0 and earlier, exploitable via the n parameter in main_page.php. According to the provided data, affected software is the WordPress Game-Tabs plugin

4.3CVSS6AI score0.01629EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2014/07/02 6:00 p.m.25 views

CVE-2014-4531

Cross-site scripting XSS vulnerability in mainpage.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter...

5.8AI score0.01629EPSS
SaveExploits1References1
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.61 views

TABS MailCarrier 2.51 - SMTP EHLO Overflow

No description provided by source. $Id: mailcarriersmtpehlo.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

7.1AI score
SaveExploits0
Patchstack
Patchstack
added 2014/06/23 12:00 a.m.16 views

WordPress Game Tabs Plugin <= 0.4.0 - XSS

Because of this vulnerability in mainpage.php, the attackers can inject arbitrary web script or HTML via the "n" parameter. Solution Update the plugin...

4.3CVSS2.8AI score0.01629EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2014/05/19 2:55 p.m.27 views

CVE-2013-4406

The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6 for Drupal does not properly check block permissions, which allows remote attackers to obtain sensitive information by reading a Quick Tab...

5CVSS6.2AI score0.01513EPSS
SaveExploits0References6
Rows per page
Query Builder