172 matches found
CVE-2020-15890
LuaJit through 2.1.0-beta3 has an out-of-bounds read because gc handler frame traversal is mishandled...
VulnCheck KEV: CVE-2018-1000136
Electron version 1.7 up to 1.7.12; 1.8 up to 1.8.3 and 2.0.0 up to 2.0.0-beta.3 contains an improper handling of values vulnerability in Webviews that can result in remote code execution. This attack appear to be exploitable via an app which allows execution of 3rd party code AND disallows node...
CVE-2019-5420
A remote code execution vulnerability in development mode Rails 5.2.2.1, 6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit...
Discourse < 2.2.0.beta3 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; if...
WordCamp Talks <= 1.0.0-beta2 - Formula injection via CSV exports
Fixed in version 1.0.0-beta3...
PT-2020-15714 · Luajit +2 · Luajit +2
Name of the Vulnerable Software and Affected Versions: LuaJIT versions prior to 2.1.0-beta3 Description: The issue is related to an out-of-bounds read in the lj err run function located in lj err.c. Recommendations: For LuaJIT versions prior to 2.1.0-beta3, at the moment, there is no information...
Aireplay-ng 1.2 beta3 - "tcp_test" Length Parameter Stack Overflow
No description provided by source. / Exploit Title: Aireplay "tcptest" Length Parameter Inconsistency Date: 10/3/2014 Exploit Author: Nick Sampanis Vendor Homepage: http://www.aircrack-ng.org/ Version: Aireplay-ng 1.2 beta3 Tested on: Kali Linux 1.0.9 x64 CVE : CVE-2014-8322 Description: Affected...
p.mapper 3.2 beta3 plugins/export/mc_table.php _SESSION[PM_INCPHP] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/26614/info p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and th...
ownrs blog beta3 (sql/xss) Multiple Vulnerabilities
No description provided by source. ============================================================== OwnRS Blog beta3 SQL/XSS Multiple Remote Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...
p.mapper 3.2 beta3 incphp/globals.php _SESSION[PM_INCPHP] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/26614/info p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and th...
Cross site scripting
DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed library, which allows remote attackers to bypass the protection mechanism for CVE-2010-4355 and conduct cross-site scripting XSS attacks via the 1 html content and 2 richeditor fields. NOTE: some of the...
CVE-2010-4364
DaDaBIK 4.3 beta3 is affected when run in a case-sensitive environment where the htmLawed library is not included. This root cause (missing htmLawed) enables cross-site scripting (XSS) by manipulating (1) HTML content and (2) rich_editor fields, and it can bypass the protection mechanism tied to ...
CVE-2010-4364
DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed library, which allows remote attackers to bypass the protection mechanism for CVE-2010-4355 and conduct cross-site scripting XSS attacks via the 1 html content and 2 richeditor fields. NOTE: some of the...
DEBIAN-CVE-2010-1647
Cross-site scripting XSS vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets CSS strings that are processed as script by Internet Explorer...
ttplayer <= 5.6 Beta3 Dos POC
Exploit for unknown platform in category dos / poc ===================== ttplayer = 5.6 Beta3 ===================== Exploit Title: ttplayer = 5.6 Beta3 Dos POC Author: t-bag Software Link: http://ttplayer.qianqian.com Version: 5.6Beta3 Tested on: win7 and win2003 Code : !/usr/bin/python f t-bag...
S-CMS 2.0 Beta3 SQL Injection
----------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --S-CMS ----------------------------------------------------------------- CMS INFORMATION: --WEB: http://www.matteoiammarrone.com/public/s-cms/ --DOWNLOAD:...
S-CMS <= 2.0b3 Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ===================================================== S-CMS WEB: http://www.matteoiammarrone.com/public/s-cms/ | |--DOWNLOAD: http://www.matteoiammarrone.com/public/s-cms/ | |--DEMO: N/A | |--CATEGORY: CMS / Portal | |--DESCRIPTION: Cms...
Directory traversal
Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to index.php...
phpOCS <= 0.1-beta3 (index.php act) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================================== phpOCS = 0.1-beta3 index.php act Local File Inclusion Vulnerability ====================================================================== :::::::-. ... ::::::. :::. ;;...
OwnRS Blog beta3 (SQL/XSS) Multiple Remote Vulnerabilities
No description provided by source. ============================================================== OwnRS Blog beta3 SQL/XSS Multiple Remote Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...