DEBIAN-CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

UBUNTU-CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

CloudBees Jenkins VncRecorder Plugin Cross-Site Scripting Vulnerability (CNVD-2020-50510)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . VncRecorder Plugin is used in one of the scre...

Cobham Satcom Sailor 250 and 500 Cross-Site Scripting Vulnerabilities

The Cobham Satcom Sailor 250 and Cobham Satcom Sailor 500 are both shipboard maritime satellite broadband terminals from Cobham UK. A cross-site scripting vulnerability exists in the Cobham Satcom Sailor 250 and 500 using firmware versions prior to 1.25. A remote attacker can exploit this...

CloudBees Jenkins JUnit Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the U.S. CloudBees set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . JUnit Plugin is used in one of the Java...

Code injection

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build...

WordPress Easy2Map Plugin 1.24 - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: SQL Injection in easy2map wordpress plugin v1.24 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-08 Download Site: https://wordpress.org/plugins/easy2map Vendor: Steven Ellis Vendor Notified: 2015-06-08, fixed in v1.25 Vendor Contact...

Deepin TFTP Server Directory Traversal Vulnerability

Software : Deepin TFTP Server Directory Traversal Vulnerability Software Version : v1.25 Vendor: Deepin.org Vulnerability Published : 2010-08-14 Vulnerability Update Time : Status : Impact : Medium Bug Description : Deepin TFTP Server does not properly sanitise filenames containing directory...

Linksys WVC54GC NetCamPlayerWeb11gv2 ActiveX control stack buffer overflow

Overview The Linksys WVC54GC NetCamPlayerWeb11gv2 ActiveX control contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Linksys WVC54GC wireless video camera provides an ActiveX control called...

Battle Blog <= 1.25 (comment.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Battle Blog Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 +...

Linux 2.4.24 with vserver 1.24 exploit

Hi securityfocus, a small exploit from me which brakes out of a vserver, also if secured with "chmod 000 /vservers". It is a modification of the known "chroot-again" exploit. It belongs to chroots but also to the vserver project. Tested with linux 2.4.24 and vserver 1.24. The bug was posted to th...