857 matches found
PT-2014-7377
Name of the Vulnerable Software and Affected Versions The Weather Channel aka com.weather.Weather application version 5.2.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify...
Thousands of High-Risk Vulnerabilities Found in NOAA Satellite System
The informational systems that the National Oceanic and Atmospheric Administration NOAA run are loaded with several critical vulnerabilities that could leave it vulnerable to cyber attacks. According to the findings of an audit recently conducted by the Department of Commerce’s Office of the...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the WP GuestMap plugin 1.8 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 zl, 2 mt, or 3 dc parameter to guest-locator.php; the 4 zl, 5 mt, 6 activate, or 7 dc parameter to online-tracker.php;...
CVE-2014-4587: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the WP GuestMap plugin 1.8 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 zl, 2 mt, or 3 dc parameter to guest-locator.php; the 4 zl, 5 mt, 6 activate, or 7 dc parameter to online-tracker.php;...
PT-2014-6001
Name of the Vulnerable Software and Affected Versions WP GuestMap plugin version 1.8 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters in several PHP files. Specifically, the parameters zl, mt, and dc in "guest-locator.php",...
php weather 2.2.2 (lfi/xss) Multiple Vulnerabilities
No description provided by source. Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . /output/pwtext$language.php; xpl:...
InstaGuide Weather Script (index.php) 1.0 - Local File Inclusion Vulnerability
No description provided by source. Weather for PHP = PageName Local File Include Vulnerability Script : Weather for PHP Version : 1.0 Download : http://www.instaguide.com/download/weatherfree.zip AUTHOR : BorN To K!LL Vuln Code : $PageName = $GET'PageName'; //// this is one ... :...
Ultimate Weather Plugin <= 1.0 - Unauthenticated Reflected XSS
The last time it was checked the plugin was still affected and had been closed. PoC http://www.example.com/wp-content/plugins/ultimate–weather–plugin/magpierss/scripts/magpiedebug.php?url=%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E...
Joomla Zap Weather FPD & Zap Calendar跨站脚本漏洞
No description provided by source. Title - Joomla Zap Weather FPD & Zap Calendar XSS Date: 01.21.2014 Vendor: zcontent.net extensions.joomla.org/extensions/owner/cogliano Versions - Z Weather v9 & Zap Calendar v4.0 Latests ATM Contant: smashatdevilteam.pl Zap Weather PoC -...
Joomla Zap Weather FPD & Zap Calendar XSS Vulnerability
Latests zcontent plugins suffers on cross site scripting and full path disclosure vulnerabilities because of poor variables filtration. Title - Joomla Zap Weather FPD & Zap Calendar XSS Date: 01.21.2014 Vendor: zcontent.net extensions.joomla.org/extensions/owner/cogliano Versions - Z Weather v9 &...
Solar Magnetic Storm Impact on Control Systems
Overview The sun generates solar flare and coronal mass ejection CME events in an approximate 11-year cycle. The plasma clouds generated from these events have the potential to cause geomagnetic storms that can interfere with terrestrial communications and other electronic systems, posing a risk ...
National Weather Service Cross Site Scripting
Exploit Title: National Weather Service Internet Weather Source alert"XSS" +---------------------------------------------------+ Greetz to : ./CyberSEC...
Sensitive server info leaked from weather.gov Vulnerability
Kosova Hacker's Security group today release very sensitive server info of "The National Weather Service", which was gathered due to a "Local file inclusion" Vulnerability in weather.gov . By definition, Local File Inclusion also known as LFI is the process of including files on a server through...
Hackers deface Philippines Department of Environment website
Hackers incensed by the Philippines' controversial cybercrime law have attacked government sites that deliver emergency information during natural disasters. The website of the Department of Environment and Natural Resources DENR was hacked on Saturday, despite calls from Malacañang for a...
Electromagnetic Pulse Attacks : Are we prepared ?
An electromagnetic pulse EMP attack is a threat few Americans are familiar with, yet one which could easily destroy their lives. What would you do if your electricity suddenly went out and didn't come back on for months or even years? How long would you last with the food in your pantry, the...
Jaws 0.8.14 - Multiple Remote File Inclusions
Jaws 0.8.14 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/50022/info Jaws is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtai...
[SECURITY] Fedora 11 Update: kdetoys-4.4.3-1.fc11.1
kdetoys includes: amor: Amusing Misuse Of Resources put's comic figures above your windows kteatime: makes sure your tea does not get too strong ktux: Tux-in-a-Spaceship screen saver kweather: display the current weather outside...
[SECURITY] Fedora 13 Update: kdetoys-4.4.3-1.fc13.1
kdetoys includes: amor: Amusing Misuse Of Resources put's comic figures above your windows kteatime: makes sure your tea does not get too strong ktux: Tux-in-a-Spaceship screen saver kweather: display the current weather outside...
[SECURITY] Fedora 12 Update: kdetoys-4.4.3-1.fc12.1
kdetoys includes: amor: Amusing Misuse Of Resources put's comic figures above your windows kteatime: makes sure your tea does not get too strong ktux: Tux-in-a-Spaceship screen saver kweather: display the current weather outside...
SA-CONTRIB-2010-052 - Multiple vulnerabilities in multiple contributed modules
Versions affected and proposed solutions Private Message versions for the 5.x versions of Drupal The Privatemsg also known as Private Message module enables messages to be sent internally on a site. The module is vulnerable to cross-site request forgeries CSRF via it's message delete form. This...