767 matches found
Wordpress Mailing List Plugin Arbitrary File Download
No description provided by source. Exploit Title: Mailing List plugin for Wordpress Arbitrary file download Version: 1.4.2 Date: 2011-12-19 Author: 6Scan http://6scan.com security team Software Link: http://wordpress.org/extend/plugins/mailz/ Official fix: This advisory is released after the vend...
EFS Easy Address Book Web Server <= 1.2 - Remote File Stream Exploit
No description provided by source. / ========================================================================== 0-day Alternative File Stream Exploit for EFS Easy Address Book Web Server =========================================================================== EFS' Easy Address Book Web Server ...
JIRA sends in-app notifications to Confluence for restricted comments
If you have a primary application link between JIRA in Confluence, users get a notification in their Confluence workbox everytime someone comments in a ticket the user is watching. Users receive the notification with the text of the comment even when the comment is restricted to other groups,...
WordPress themify themes File Upload Vulnerability
all theme suffer of File Upload Vulnerability. all whitout autoritation can upload malicious code to all themify theme Usage Info prof of concept: code not properly sanitized at get function: function themifyupload if!empty$FILES if!isset$POST'target' || $POST'target' == '' $target =...
VulnCheck KEV: CVE-2013-0632
An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access...
Oracle Application Framework Diagnostic Mode Bypass Vulnerability
Exploit for jsp platform in category web applications Oracle Application Framework Diagnostic Mode Bypass Vulnerability Published: 1/15/2013 Version: 1.0 Vendor: Oracle www.oracle.com Product: Oracle Application Framework Version affected: 11.5.10.2, 12.0.6, 12.1.3 Product description: The Oracle...
RHEL 5 / 6 : sudo (RHSA-2012:1081)
An updated sudo package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
AllWebMenus WordPress Menu Plugin Arbitrary file upload
No description provided by source. Exploit Title: AllWebMenus WordPress Menu Plugin Arbitrary file upload Version: 1.1.9 Date: 2012-01-19 Author: 6Scan http://6scan.com security team Software Link: http://wordpress.org/extend/plugins/allwebmenus-wordpress-menu-plugin/ Official fix: This advisory ...
WordPress Plugin AllWebMenus < 1.1.9 Menu Plugin - Arbitrary File Upload
Exploit Title: AllWebMenus WordPress Menu Plugin Arbitrary file upload Version: Compress it with zip to awm.zip Use this form to upload the php file to the server Version 1.1.8 also checks the source referrer, so you have to use scripting language or spoof it in another way to set the HTTPREFERER...
OpenSSH < 3.2.3 YP Netgroups Authentication Bypass
According to its banner, the version of OpenSSH running on the remote host is older than 3.2.3. It therefore may be affected by an authentication bypass issue. On systems using YP with netgroups, sshd authenticates users via ACL by checking for the requested username and password. Under certain...
Crlf injection
Multiple CRLF injection vulnerabilities in 1 chfn and 2 chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field...
KubeBlog XSRF Vulnerabilities
Exploit for php platform in category web applications ============================= KubeBlog XSRF Vulnerabilities ============================= ======================================================================================== | Title : KubeBlog XSRF Vuln. | Author : The.Morpheus | email :...
WordPress 2.9 - Failure to Restrict URL Access
WordPress 2.9 - Failure to Restrict URL Access WordPress = 2.9 Failure to Restrict URL Access http://www.thomasmackenzie.co.uk/ 1. Advisory Information Title: WordPress = 2.9 Failure to Restrict URL Access Date published: 2. Vulnerability Information Class: Failure to Restrict URL Access Remotely...
Goople CMS 1.7 - Arbitrary Code Execution
-============================================- Autore: x0r - Evolution Team Msn: [email protected] Cms: Goople Cms 1.7 Bug: Arbitrary File Creation Download: http://ovh.dl.sourceforge.net/sourceforge/gooplecms/GoopleCMS1.7.rar -============================================- Exploit: Attack One...
Gentoo Security Advisory GLSA 200411-09 (shadow)
The remote host is missing updates announced in advisory GLSA 200411-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200409-35 (Subversion)
The remote host is missing updates announced in advisory GLSA 200409-35. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200605-13 (MySQL)
The remote host is missing updates announced in advisory GLSA 200605-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200605-13 (MySQL)
The remote host is missing updates announced in advisory GLSA 200605-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200409-35 (Subversion)
The remote host is missing updates announced in advisory GLSA 200409-35. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: moinmoin
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...