236 matches found
CVE-2023-47177
CVE-2023-47177 is a stored XSS vulnerability in the WordPress Linker plugin, affecting versions
CVE-2023-47177 WordPress Linker Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Yakir Sitbon, Ariel Klikstein Linker plugin = 1.2.1 versions...
CVE-2023-21406 Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication
Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP...
ariel-cyber.co.il XSS vulnerability
Open Bug Bounty ID: OBB-713534 Description| Value ---|--- Affected Website:| ariel-cyber.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...
ariel-books.com XSS vulnerability
Open Bug Bounty ID: OBB-649482 Description| Value ---|--- Affected Website:| ariel-books.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Zend-Framework - Full Info Disclosure
No description provided by source. Exploit Title : Zend-Framework Full Info Disclosure Google Dork : inurl:/application/configs/application.ini Date : 26/11/2013 Exploit Author : Ariel Orellana Vendor Homepage : http://framework.zend.com/ Category : Web applications Tested on : GNU/Linux...
Zend-Framework - Full Info Disclosure Vulnerability
Exploit for php platform in category web applications Exploit Title : Zend-Framework Full Info Disclosure Google Dork : inurl:/application/configs/application.ini Date : 26/11/2013 Exploit Author : Ariel Orellana Vendor Homepage : http://framework.zend.com/ Category : Web applications Tested on :...
Ariel AirOne series cross-site scripting vulnerability
Overview The Ariel AirOne series, from Ariel Networks, contain a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution None...
Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Multiple DoS in JAR files manipulation procedures April 17th 2008 Risk Level: High Affected versions: All versions of IBM DB2 Database Server on Windows platform. Remote exploitable: Yes Authentication to Database Server...
JVN#84746611 Ariel AirOne series cross-site scripting vulnerability
Impact An arbitrary script may be executed on the user's web browser. Solution Products Affected Ariel AirOne ProjectA v4.6.1 Ariel MultiScheduler v4.6.3 For more information, refer to the vendor's website...
Ariel FTP Server Default 'document' Account
The remote host is an Ariel FTP server. Ariel is a document transmission system mostly used in the academic world. Nessus was able to log into the remote FTP server by connecting as the user 'document' or 'ariel4' and with a hex-encoded password based on the IP address of the host the user is...
FreeBSD : xloadimage -- buffer overflows in NIFF image title handling (2f0cb4bb-416d-11da-99fe-000854d03344)
Ariel Berkman reports : Unlike most of the supported image formats in xloadimage, the NIFF image format can store a title name of arbitrary length as part of the image file. When xloadimage is processing a loaded image, it is creating a new Image object and then writing the processed image to it...
OraGENERATESCHEMAExploits.txt
/ Argeniss - Information Security http://www.argeniss.com infoatdotatdotc:\Unbreakable.txt' FROM DUAL; / Argeniss - Information Security http://www.argeniss.com infoatdotatdotcom Oracle version: 10g Release 1 Platform: Linux Shellcode opens a shell on port 4444 from www.metasploit.com. / DECLARE ...
Oracle Database Server 9i/10g - 'XML' Local Buffer Overflow
/ Argeniss - Information Security http://www.argeniss.com infoatdotatdotc:\Unbreakable.txt' FROM DUAL; / Argeniss - Information Security http://www.argeniss.com infoatdotatdotcom Oracle version: 10g Release 1 Platform: Linux Shellcode opens a shell on port 4444 from www.metasploit.com. / DECLARE ...
Oracle Database Server 9i10g - XML Local Buffer Overflow
Oracle Database Server 9i10g - XML Local Buffer Overflow / Argeniss - Information Security http://www.argeniss.com infoatdotatdotc:\Unbreakable.txt' FROM DUAL; / Argeniss - Information Security http://www.argeniss.com infoatdotatdotcom Oracle version: 10g Release 1 Platform: Linux Shellcode opens...
cups-base -- HPGL buffer overflow vulnerability
Ariel Berkman has discovered a buffer overflow vulnerability in CUPS's HPGL input driver. This vulnerability could be exploited to execute arbitrary code with the permission of the CUPS server by printing a specially crated HPGL file...