8172 matches found
Fedora 20 : ikiwiki-3.20140125-1.fc20 (2014-1747)
Update to the latest stable version. Changes in ikiwiki 3.20140125 : - inline: Allow overriding the title of the feed. Closes: http://bugs.debian.org/735123 Thanks, Christophe Rhodes - osm: Escape name parameter. Closes: http://bugs.debian.org/731797 Changes in ikiwiki 3.20140102 : - aggregate:...
Ember.js XSS Vulnerability With {{link-to}} Helper in Non-block Form
In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, a change made to the implementation of the link-to helper means that any user-supplied data bound to the link-to helper's title attribute will not be escaped...
PT-2014-3361
Name of the Vulnerable Software and Affected Versions Download Manager plugin versions prior to 2.5.9 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the title field. This could potentially lead to unauthorized actions on the affecte...
CVE-2013-7319: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title field...
CVE-2013-1466
Multiple cross-site scripting XSS vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the 1 subject parameter to profiles.php; 2 address1, 3 address2, 4 calendartype, 5 city, 6 state, 7 title, 8 url, or 9 zipcode parameter to...
CVE-2013-0177
Multiple cross-site scripting XSS vulnerabilities in widget/screen/ModelScreenWidget.java in Apache Open For Business Project aka OFBiz 10.04.x before 10.04.05, 11.04.01, and possibly 09.04.x allow remote authenticated users to inject arbitrary web script or HTML via the 1 Screenlet.title or 2...
PCMan FTP Server 2.07 - 'CWD' Remote Buffer Overflow
Exploit Title: PCMAN FTP 2.07 CWD Command Buffer Overflow Date: Jan 25,2014 Exploit Author: Mahmod Mahajna Mahy Version: 2.07 Tested on: Windows 7 sp1 x64 english Email: [email protected] import socket as s from sys import argv iflenargv != 4: print "USAGE: %s host " % argv0 exit1 else: store...
Oracle Outside In MDB - File Parsing Stack Buffer Overflow (PoC)
!/usr/bin/python Exploit Title: Oracle Outside In MDB File Parsing Stack Based Buffer Overflow PoC Date: 16th January 2014 PoC Author: Citadelo Vendor Homepage: http://www.oracle.com Software Link: http://www.oracle.com/us/technologies/embedded/025613.htm Version: = 8.4.1.52 and 8.4.0.108 CVE :...
PT-2014-3274
Name of the Vulnerable Software and Affected Versions Open-Xchange OX AppSuite version 7.4.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule. Recommendations For Open-Xchange OX AppSuite version 7.4.1,...
CVE-2013-7175
Multiple SQL injection vulnerabilities in Avanset Visual CertExam Manager 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 Title, 2 File name, or 3 Candidate Name field...
CVE-2013-7175: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Avanset Visual CertExam Manager 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 Title, 2 File name, or 3 Candidate Name field...
PT-2014-3277
Name of the Vulnerable Software and Affected Versions Avanset Visual CertExam Manager versions 3.3 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands via the Title, File name, or Candidate Name field, potentially leading to unauthorized data acce...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Vessio NetBill 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 file title to accounts/admin/index.php or 3 comment parameter in the support page to accounts/index2.php...
PT-2014-2401
Name of the Vulnerable Software and Affected Versions Vessio NetBill version 1.2 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This is possible via the full name or file title to accounts/admin/index.php, ...
SoapUI 4.6.3 - Remote Code Execution Vulnerability
Exploit for windows platform in category remote exploits Exploit Title: SoapUI Remote Code Execution Date: 25.12.13 Exploit Author: Barak Tawily Vendor Homepage: http://www.soapui.org/ Software Link: http://www.soapui.org/Downloads/download-soapui-pro-trial.html Version: vulnerable before 4.6.4...
CVE-2013-7274
Cross-site scripting XSS vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload...
Cross site scripting
Cross-site scripting XSS vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload...
CVE-2013-7274: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload...
PT-2014-3323
Name of the Vulnerable Software and Affected Versions Wallpaper Script version 3.5.0082 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload. This could potentially lead to unauthorized...
