Western Union CN Bug Bounty #6 - CS XSS Web Vulnerability

Document Title: =============== Western Union CN Bug Bounty 6 - CS XSS Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1657 Release Date: ============= 2015-12-14 Vulnerability Laboratory ID VL-ID: ====================================...

Western Union CN Bug Bounty #6 - CS XSS Web Vulnerability

Document Title: =============== Western Union CN Bug Bounty 6 - CS XSS Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1657 Release Date: ============= 2015-12-14 Vulnerability Laboratory ID VL-ID: ====================================...

Apple OS X union mounts arbitrary code execution vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X suffers from a security vulnerability in the handling of union mounts, which allows an attacker to exploit the vulnerability to execute arbitrary code with system privileges...

CVE-2015-7044

The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges...

CVE-2015-7044

The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges...

CVE-2015-7044

Technical details about CVE-2015-7044 are not publicly available in the provided connected documents. The sources reference the OS X union mounts issue but do not disclose affected versions, exploit specifics, or fixes beyond the basic description. Monitor for updates.

CVE-2015-7044: Undefined Security Weakness

The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges...

french-union.com XSS vulnerability

Vulnerable URL: http://www.french-union.com/Union/menu/auth/popindexvisiteurfrnew.asp?firstname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:44 GMT Vulnerability type:| XSS Vulnerability...

WordPress Polls Widget Plugin 1.0.7 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : wordpress poll widget version 1.0.7 SQL Injection vulnerability Author : WICS Date : 7/12/2015 Software Link : https://wordpress.org/plugins/polls-widget/ Affected Version: 1.0.7 and below Overview: Poll widget is wordpress...

WordPress Plugin Polls Widget 1.0.7 - SQL Injection

Exploit Title : wordpress poll widget version 1.0.7 SQL Injection vulnerability Author : WICS Date : 7/12/2015 Software Link : https://wordpress.org/plugins/polls-widget/ Affected Version: 1.0.7 and below Overview: Poll widget is wordpress plugin which provide fancy user Polling layout to website...

members.unioncountycoc.com Open Redirect vulnerability

Vulnerable URL: http://members.unioncountycoc.com/directory/OpenMemPage.jsp?memid=357=https://www.xssposed.org/=391 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:33 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

directory.unionsnsw.org.au XSS vulnerability

Vulnerable URL: http://directory.unionsnsw.org.au/search/?psearchad=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3Ead.x=0ad.y=0 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:43 GMT Vulnerability type:| XSS Vulnerability status:|...

CVE-2015-7312

Multiple race conditions in the Advanced Union Filesystem aufs aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service use-after-free and BUG or possibly gain privileges via a 1 madvise or 2 msync system call, related to...

Race condition

Multiple race conditions in the Advanced Union Filesystem aufs aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service use-after-free and BUG or possibly gain privileges via a 1 madvise or 2 msync system call, related to...

CVE-2015-7312

CVE-2015-7312 affects the Linux kernel 3.x/4.x via race conditions in the aufs aufs3-mmap.patch and aufs4-mmap.patch patches. The vulnerability allows local users to cause denial of service (use-after-free/BUG) or potentially gain privileges through madvise or msync calls, related to mm/madvise.c...

CVE-2015-7312

Multiple race conditions in the Advanced Union Filesystem aufs aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service use-after-free and BUG or possibly gain privileges via a 1 madvise or 2 msync system call, related to...

CVE-2015-7312

Multiple race conditions in the Advanced Union Filesystem aufs aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service use-after-free and BUG or possibly gain privileges via a 1 madvise or 2 msync system call, related to...

CVE-2015-7312: Concurrent Execution using Shared Resource with Improper Synchronization

Multiple race conditions in the Advanced Union Filesystem aufs aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service use-after-free and BUG or possibly gain privileges via a 1 madvise or 2 msync system call, related to...

Threat Outbreak Alert RuleID19353: Email Messages Distributing Malicious Software on November 12, 2015

Medium Alert ID: 42063 First Published: 2015 November 13 15:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19353 may contain the following files: Name |...

通达OA Office Anywhere 2015版网络智能办公系统一处盲注漏洞/demo测试（需登录）

简要描述： 最新版，绕过过滤，直接注 详细说明： 厂商：通达信科 测试demo地址：.../ 从官网（http://.../）直接点击集团版在线试用 进去以后，注入出在：listreport.php文件中 注入地址：.../general/datacenter/modeldesign/design/report/listreport.php?repid=1&openmode=design&menuid=1 参数repid可注入 直接在repid参数后加入一个a，直接把SQL爆出来了 错误，请联系管理员 SQL语句: select from crsreport where id in 1a...