6264 matches found
CVE-2015-3292
The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2015-3292: Undefined Security Weakness
The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...
Multi Purpose Fuzzer: zzuf
Multi Purpose Fuzzer zzuf is a transparent application input fuzzer. Its purpose is to find bugs in applications by corrupting their user-contributed data which more than often comes from untrusted sources on the Internet. It works by intercepting file and network operations and changing random...
IBM Workflow for Bluemix Information Disclosure Vulnerability
IBM Bluemix is a suite of cloud platforms for building, running and managing applications and services. An information disclosure vulnerability exists in IBM Workflow for Bluemix, which allows attackers to exploit the vulnerability to obtain sensitive information...
HP Capture and Route Software Remote Information Disclosure Vulnerability
HP Capture and Route Software is one of the HP JetAdvantage Workflow Solution to effectively manage, update, and store information. A remote information disclosure vulnerability exists in HP Capture and Route Software. This vulnerability could be exploited by an authenticated, remote attacker to...
Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.actio has multiple cross-site scripting vulnerabilities
Comala Workflows is a WEB-based application. The Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action script handles a cross-site scripting vulnerability in workflowMarkup that can be exploited by a remote attacker to construct a malicious URI, which induces the user to parse it,...
Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action has multiple reflected cross-site scripting vulnerabilities
Comala Workflows is a WEB-based application. Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action script processing attachment-macro has a cross-site scripting vulnerability that can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing it...
WordPress Work The Flow 2.5.2 Shell Upload
Exploit Title : Wordpress Work the flow file upload 2.5.2 Shell Upload Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/work-the-flow-file-upload.2.5.2.zip Date : 2015-03-14 Tested on : Linux BackBox 4.0 / curl 7.35.0 Description: Work the Flow...
通达OA2013集团版SQL注入+root
简要描述： dd 详细说明： http://www.tongda2000.com/oa/group/ 试用登录 http://www.day900.com/ 注入点：...
724CMS 5.01 / 4.59 / 4.01 / 3.01 SQL Injection
724CMS 5.01 Multiple SQL Injection Security Vulnerabilities Exploit Title: 724CMS Multiple SQL Injection Security Vulnerabilities Vendor: 724CMS Product: 724CMS Vulnerable Versions: 3.01 4.01 4.59 5.01 Tested Version: 5.01 Advisory Publication: March 14, 2015 Latest Update: March 14, 2015...
hanweb /xxgk/workflow/objectbox/selectx_search.jsp SQL注入漏洞
No description provided by source...
Oracle GENERATESCHEMA Buffer Overflow Exploit
This Exploit a buffer overflow in Oracle10g. When sending a specially formatted query to the GENERATESCHEMA function in the XDB.DBMSXMLSCHEMA package, an attacker may be able to execute arbitrary code. NOTE: For targets running DEP, you will need to choose target 0 then rexploit with target 1. Th...
PHP file include vulnerability analysis-vulnerability warning-the black bar safety net
One, What is”remote file inclusion vulnerability”for? The answer is: the server through the php properties of a function to contain any files, since you want to include this file source filter is not strict, so can go to that contains a malicious file and we can construct the malicious file to...
SA-CONTRIB-2014-021 - Maestro - Cross Site Scripting (XSS)
The Maestro module enables you to create complex workflows, automating business processes. The module doesn't sufficiently filter Role or Organic Group names when displaying them in the workflow details. This vulnerability is mitigated by the fact that an attacker must have a role with the...
PT-2014-3366 · Vtiger · Vtiger Crm
Name of the Vulnerable Software and Affected Versions: vTiger CRM version 5.4.0 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the return url parameter to the "modulescom vtiger workflowsavetemplate.php"...
Design/Logic Flaw
Eval injection vulnerability in frontview/lib/nphandler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow."...
Vtiger 5.4.0 Cross Site Scripting Vulnerability
Vtiger version 5.4.0 suffers from multiple reflective cross site scripting vulnerabilities. Vtiger 5.4.0 Reflected Cross Site Scripting I. Information ================== Name : Vtiger 5.4.0 Reflected Cross Site Scripting Software : Vtiger 5.4.0 and possibly below. Vendor Homepage :...
CVE-2013-2751: Improper Control of Generation of Code
Eval injection vulnerability in frontview/lib/nphandler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow."...
JIRA Workflow Step Property jira.permission.browse allows you to view issues in issue navigator
panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/JRACLOUD-35917. panel h3. Summary The JIRA Workflow Step Property jira.permission.browse does not prevent you to view issues in issue navigator. h3...