74 matches found
PT-2021-12654 · Freebsd +1 · Freebsd +2
Name of the Vulnerable Software and Affected Versions: FreeBSD versions 11.3-RELEASE through 11.3-RELEASE before p13 FreeBSD versions 11.4-RELEASE through 11.4-RELEASE before p3 FreeBSD versions 12.1-RELEASE through 12.1-RELEASE before p9 FreeBSD versions 11.4-STABLE through 11.4-STABLE before...
Fedora 31 : webkit2gtk3 (2020-f25793aac4)
Update to WebKitGTK 2.28.0. - Add API to enable Process Swap on Cross-site Navigation. - Add user messages API for the communication with the web extension. - Add support for same-site cookies. - Service workers are enabled by default. - Add support for Pointer Lock API. - Add flatpak sandbox...
Fedora 30 : webkit2gtk3 (2020-f3fa778924)
Update to WebKitGTK 2.28.0. - Add API to enable Process Swap on Cross-site Navigation. - Add user messages API for the communication with the web extension. - Add support for same-site cookies. - Service workers are enabled by default. - Add support for Pointer Lock API. - Add flatpak sandbox...
Mail.ru: api.icq.com / возможность отредактировать текст любого пользователя или группы переслав его.
Нашёл лютую дырку дело в том что при пересылке сообщения пользователя группы текст стоит в параметре конечно же я пробовал его отредактировать и послать пакет но никак не выходило и тут я использовал один старый метод, обычно же идёт GET запрос его мы и меняем, но после идёт POST запрос который...
EasyTalk以系统身份向用户发XSS
简要描述： EasyTalk以系统身份向用户发XSS 详细说明： 出现问题的代码文件路径 : easytalk/Home/Lib/Action/ImAction.class.php 代码加载时 public function initialize parent::init; 没要求登录 而EasyTalk存储型XSS和以系统身份向任意用户发私信的漏洞在这代码 //发表聊天 public function sendmsg $ret=D'Messages'-sendmsgdaddslashes$POST'content' ,daddslashes$POST'nickname',$this-m...
EasyTalk越权查看任意用户的消息
简要描述： EasyTalk越权查看任意用户的消息 详细说明： 出现问题的代码文件路径 : easytalk/Home/Lib/Action/ImAction.class.php 代码加载时，没要求登录 public function initialize parent::init; 出现问题的代码在这里 //获得历史聊天记录 public function getDayRecord $uid=intval$POST'userid'; $user=M'Users'-where"userid='$uid'"-find; if $user...
74CMS Sql 注入漏洞一枚1
简要描述： 过滤不严。 详细说明： 在user/userpms.php中 elseif$act=="addsave" $setsqlarr'msgtype'=2; $setsqlarr'msgfrom'=trim$SESSION'username'; $setsqlarr'msgfromuid'=intval$SESSION'uid'; $toname=trim$GET'toname'; $setsqlarr'message'=trim$GET'msg'; if strcasecmpQISHIDBCHARSET,"utf8"!=0...
CVE-2011-2774
The "Reply to message" feature in Mahara 1.3.x and 1.4.x before 1.4.1 allows remote authenticated users to read the messages of a different user via a modified replyto parameter...
GuestbookXL 1.3
GuestbookXL 1.3 Homepage: http://phpscripts.byethost12.com/guestbook.php Description: This simple guestbook makes it possible to store messages from users. It stores the name, Email address when given as a mailto link and the message itself. It has 30 smileys at this moment, but other smileys are...
Baby FTP Server file enumeration information leak
Different messages for existing and non-existing user outside FTP home directory...
WorldMail IMAP Server Directory Traversal Arbitrary Spool Access
Binary data 3299.prm...
Discuz! 2.03.0 - Cross-Site Scripting
Discuz! 2.03.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/9584/info It has been reported that Discuz! is prone to an Cross Site Scripting vulnerability. This issue is caused by the application failing to properly sanitize links embedded within user messages. Upon successful...
Множество уязвимостей в Ultimate PHP Board (UPB) Version 1.5
Множество уязвимостей в Ultimate PHP Board UPB Version 1.5 Script: Ultimate PHP Board UPB Version 1.5 Author: PHP Outburst http://www.myupb.com/ Exploit: yes В скриптах: adminmembers.php adminban.php adminbannedaddresses.php adminbanuser.php admincat.php adminconfig.php adminconfigdo.php...