6754 matches found
CVE-2012-4037
Multiple cross-site scripting XSS vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 created by, or 3 name field in a torrent file...
CVE-2012-4037
Multiple cross-site scripting XSS vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 created by, or 3 name field in a torrent file...
CVE-2012-4037
CVE-2012-4037 affects Transmission’s web client prior to version 2.61, enabling cross-site scripting via fields in a torrent file (comment, created by, name). The vulnerability arises from insufficient escaping of user-supplied strings, allowing remote attackers to inject arbitrary scripts/HTML w...
CVE-2012-4037
Multiple cross-site scripting XSS vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 created by, or 3 name field in a torrent file...
CVE-2012-4037: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 created by, or 3 name field in a torrent file...
PT-2012-5162
Name of the Vulnerable Software and Affected Versions Transmission versions prior to 2.61 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web client. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific fields in ...
PT-2013-29: Information Disclosure in Siemens Simatic WinCC and PCS 7
The specialists of the Positive Research center have detected "Information Disclosure" vulnerability in Siemens Simatic WinCC and PCS 7. By opening a manipulated project file, sensitive data can be transmitted over the network or a DoS condition can be provoked. How to fix Update your software up...
libutp -- remote denial of service or arbitrary code execution
NVD reports: Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...
Transmission BitTorrent Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability Report Author: Justin C. Klein Keane Reported: July 19, 2012 CVE-2012-4037 Description of Vulnerability: - ----------------------------- Transmission http://www.transmissionbt.com is a popular, cross platform, open source BitTorrent...
iphone end Taobao,Netease,youku Application Data transmission vulnerability-vulnerability warning-the black bar safety net
Lethal leaderboards【Iphone 9 1 assistant recommended list within the software disclosure of user information Full street smart machine. Full street public WIFI and the phone side of the application but worrying ! On the figure for the iphone end of the lower test platform The current wireless...
security advisory: AirDroid 1.0.4 beta
Dear Sir or Madam, we'd like to publish the following advisory. Thanks in advance. TC-SA-2012-02: Several weaknesses in implementation of security features in AirDroid 1.0.4 beta Published: 2012/07/12 Advisory-Version: 1.0 Affected products: AirDroid 1.0.4 beta References: TC-SA-2012-02...
LinkedIn Investigating Password Leak That Could Affect 6.5 M
UPDATE Professional social networking site LinkedIn announced early Wednesday morning that it was looking into reports of stolen passwords, according to a post on their Twitter page. The tweet substantiates reports by several news outlets that a hacker was able to download the hashed passwords of...
CVE-2012-2488
Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service packet transmission outage via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593...
PT-2012-4061
Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions prior to 4.2.1 Description The issue allows remote attackers to cause a denial of service, resulting in a packet transmission outage, via a crafted packet. Recommendations For versions prior to 4.2.1, update to version...
Unfamiliar street plaintext submit the registration information of the plaintext transmission-vulnerability warning-the black bar safety net
Unfamiliar Street is Beijing, unfamiliar street Technology Co., Ltd. launched a location-based mobile social products. Its login authentication using a cleartext user ID and password. Detailed description: Unfamiliar Street is Beijing, unfamiliar street Technology Co., Ltd. launched a...
AdiOS Finds iOS Apps Capable of Dumping Users' Contacts
It’s gotten to the point now where it’s almost easier to talk about the mobile apps and services that don’t ship your personal data off to some remote server for purposes unknown rather than discussing the ones that do. The latest discussion of privacy invading apps flowed from the discovery that...
CVE-2011-3022: Cleartext Transmission of Sensitive Information
translate/translatemanager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network...
PT-2013-1429 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.29 Description: A race condition exists in the sctp rcv function, allowing remote attackers to cause a denial of service, resulting in a system hang, via SCTP packets. Recommendations: For versions prior to...
