939 matches found
CVE-2012-4273
CVE-2012-4273 maps to a Cross-Site Scripting vulnerability in the WordPress plugin “2 Click Social Media Buttons” (libs/xing.php) affecting versions before 0.34. The underlying issue is improper handling of the xing-url parameter, enabling remote attackers to inject arbitrary script/HTML as part ...
WordPress 2Click Social Media Buttons Plugin 'xing-url' Parameter XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...
SA-CONTRIB-2012-045 - AddToAny - Cross Site Scripting
CVE: CVE-2012-2072 This module enables you to add Lockerz/AddToAny's universal sharing buttons to your site. Previously, the module did not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fac...
eWebeditoR3. 8 for php arbitrary file upload EXP-vulnerability warning-the black bar safety net
! titleeWebeditoR3. 8 for php any file on the EXP/title form action="" method=post enctype="multipart/form-data" INPUT TYPE="hidden" name="MAXFILESIZE" value="5 1 2 0 0 0" A href="http://hi.baidu.com/fc/editor/input"URL:input type=text name=url value="" size=1 0 0br INPUT TYPE="hidden"...
CVE-2010-1392
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to HTML buttons and the first-letter C...
CVE-2010-1392
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to HTML buttons and the first-letter C...
Apple Plugs 48 Security Holes in Safari Browser
Apple has shipped new versions of its Safari browser with patches for at least 48 security vulnerabilities. The Safari 4.1 and 5.0 updates, considered “highly critical,” is available for both Windows and Mac OS X. Exploitation of some of these vulnerabilities could lead to drive-by download remot...
B-Hind CMS Remote File Upload
Title: B-Hind CMS tinymce Remote File Upload Vendor: http://www.b-hind.eu/ AUTHOR: h00die DESCRIPTION by vendor: B-interference Lite is a simple CMS for small websites. Ideal for local merchants or organizations. The content of page can be adjusted bya simple double click on the text or title in...
Blender 2.49b - .blend Remote Command Execution
Blender 2.49b - .blend Remote Command Execution An attacker can exploit this issue by enticing an unsuspecting victim to open a specially crafted '.blend' file. The following proof of concept demonstrates this issue: . Open the "Text Editor" Panel. . Right click on the canvas and select "New"...
Blender 2.34 2.35a 2.4 2.49b .blend File Command Injection
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Blender .blend Project Arbitrary Command Execution 1. Advisory Information Title: Blender .blend Project Arbitrary Command Executio...
HP notebooks remote code execution vulnerability (multiple series)
Advisory: ///////// Multiple Hewlett-Packard notebook series are prone to a remote code execution attack. The manufacturer's preinstalled software contains a critical flaw within the software built to support one-touch button quick feature access. Overview: ///////// Software called "HP Info...
hpcompaq-exec.txt
!- Advisory: Multiple Hewlett-Packard notebook series are prone to a remote code execution attack. The manufacturer's preinstalled software contains a critical flaw within the software built to support one-touch button quick feature access. Overview: ///////// Software called "HP Info Center" is...
HP Compaq Notebooks - ActiveX Remote Code Execution
HP Compaq Notebooks - ActiveX Remote Code Execution !- Advisory: Multiple Hewlett-Packard notebook series are prone to a remote code execution attack. The manufacturer's preinstalled software contains a critical flaw within the software built to support one-touch button quick feature access...
HP Compaq Notebooks ActiveX Remote Code Execution Exploit
Exploit for unknown platform in category remote exploits ========================================================= HP Compaq Notebooks ActiveX Remote Code Execution Exploit ========================================================= !- Advisory: Multiple Hewlett-Packard notebook series are prone to...
CVE-2005-0129
The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected...
CVE-2005-0129
CVE-2005-0129 affects Konversation 0.15. The Quick Buttons feature allows remote attackers to cause execution of certain IRC commands via a channel name containing "%" variables, which are recursively expanded by Server::parseWildcards when the Part Button is selected. Root cause: improper handli...
CVE-2005-0129
The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected...
Windows Live Toolbar
Contains the installation files for Windows Live Toolbar, an Internet Explorer extension that provides search, anti-virus protection, customizable buttons, and quick access to maps and other information...
