Cisco FireSIGHT Management Center Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco FireSIGHT Management Center MC could allow an authenticated, remote attacker to execute a stored cross-site scripting XSS attack against the user of the web interface. The vulnerability is due to improper sanitization of parameter values. An attacker...

PT-2015-2599

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal version 8.5.0 before CF08 Description The issue is related to insufficient access control in the user interface of the IBM WebSphere Portal server application, allowing remote attackers to bypass intended access restrictio...

LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability

Document Title: =============== LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1585 Release Date: ============= 2015-08-26 Vulnerability Laboratory ID VL-ID: ==================================== 15...

xpshop网店系统sql注入(官网demo演示)

简要描述： 详细说明： 漏洞位置：xpshop.webui.MyRefund protected void PageLoadobject sender, EventArgs e if base.CurrentUser == null string str = "Login.aspx?ReturnUrl=/" + WebUIBase.ShopFolder + "MyRefund.aspx"; base.Response.Redirect"/" + WebUIBase.ShopFolder + str; else if base.CurrentUser.Name == "anonymous"...

KLA10675 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper memory...

APPLE-SA-2015-09-30-2 Safari 9

APPLE-SA-2015-09-30-2 Safari 9 Safari 9 is now available and addresses the following: Safari Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5 and OS X El Capitan v10.11 Impact: Visiting a malicious website may lead to user interface spoofing Description: Multiple user interface...

NeoKylin: China's Linux OS that Seriously Looks Like Windows XP

Do You Know: China has planned to eliminate all foreign Technologies and Services by 2020, just like Google and Facebook. And it seems China in some years would be an entirely independent IT economy; building homegrown Mobile and computer devices, Operating Systems, Applications, Browsers and...

Apple iOS Safari User Interface Forgery Vulnerability (CNVD-2015-06199)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS Safari, which allows attackers to exploit a vulnerability to build malicious web pages that can be tricked into parsing, which can spoof the user interface...

Apple iOS Safari User Interface Forgery Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS Safari, which allows attackers to exploit a vulnerability to build a malicious web page that can be tricked into parsing and can spoof the user interface...

PT-2015-7164

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control Server ACS Solution Engine version 5.70.15 Description The issue allows remote authenticated users to cause a denial of service, resulting in an SSH screen process crash. This can be achieved via crafted commands,...

Apple iOS Safari Arbitrary URL Display Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS Safari that allows remote attackers to construct a malicious web page and trick users into parsing it, which can spoof the user interface...

Thomson CableHome Gateway (DWG849) Cable Modem Gateway - Information Exposure Vulnerability

Exploit for hardware platform in category remote exploits Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage:...

CVE-2015-5767

The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5765...

Design/Logic Flaw

The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5765...

Design/Logic Flaw

The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5767...

Design/Logic Flaw

The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5765 and CVE-2015-5767...

CVE-2015-5767

The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5765...

CVE-2015-5764

The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5765 and CVE-2015-5767...

CVE-2015-5765

The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5767...

Citrix NetScaler ADC/NetScaler Gateway Elevation of Privilege Vulnerability

Citrix NetScaler ADCs are application delivery controllers that optimize enterprise service delivery.Citrix Access Gateway is a general purpose SSL VPN appliance. Multiple vulnerabilities exist in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions prior to 10.1...