DEBIAN-CVE-2015-8834

Cross-site scripting XSS vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an...

PivotX cross-site scripting vulnerability (CNVD-2016-03594)

Pivotx is an open source blog content management system Blog CMS. The system supports built-in comment review, spam protection and template replacement. A reflective cross-site scripting vulnerability exists in PivotX 2.3.11. An attacker can inject JavaScript code or bypass CSRF protection...

appleple a-blog cms unauthorized operation vulnerability

appleple a-blog cms is a content management system CMS from appleple Japan. A security vulnerability exists in the session management of the comment feature in appleple a-blog cms 2.6.0.1 and earlier versions. A remote attacker can exploit this vulnerability to delete arbitrary comments or obtain...

a-blog cms vulnerable to session management

Overview a-blog cms provided by appleple Inc. is a content management system CMS. a-blog cms contains a vulnerability in session management of the comment functionality. Yuya Yoshida of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

Pornhub: [IDOR] Deleting other users comment

Hello, Normally you cannot delete comments if you post on someones stream and i have found a way to delete others comment. PoC: https://youtu.be/mxEE9vcxKA Let me know if you cannot reproduce it ! Thanks! Mikko...

Adobe Acrobat Pro DC Share For Comments Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the "Share...

Shopify: View all deleted comments and rating of any app .

Hi , Deleted comments and rating of any app can be viewed by following url - https://apps.shopify.com//reviews//edit for example review with review id 47935 is deleted but still can be view by following link - https://apps.shopify.com/swell/reviews/47935/edit As review id is incremental id so all...

Search API - Moderately Critical - Multiple Vulnerabilities - SA-CONTRIB-2016-022

This module enables you to build searches using a wide range of features, data sources and backends. Search index not updated by node access changes The module doesn't sufficiently re-index nodes when using the "Node access" or "Access check" data alterations and non-standard ways of changing nod...

Magento RSS Feed Information Disclosure Vulnerability

Magento Web E-Commerce Platform is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft's Artificial Intelligence Tay Became a 'Racist Nazi' in less than 24 Hours

Tay, Microsoft’s new Artificial Intelligence AI chatbot on Twitter had to be pulled down a day after it launched, following incredibly racist comments and tweets praising Hitler and bashing feminists. Microsoft had launched the Millennial-inspired artificial intelligence chatbot on Wednesday,...

HackerOne: User with Read-Only permissions can edit the Internal comment Activities on Bug Reports After Revoke the team access permissions

Poc : 1.Login into Programtestbug as Alice account 2.Create a new group with "Read-only" Permission . Add a Bob to that group 3.Bob report a bug to Programtestbug After Post "Some Internal comments" 4.Now Alice Revoke the Bob team access permissions so Bob is no longer part of the team 5.Bob...

This world really have a free steal traffic method?- Vulnerability warning-the black bar safety net

Yesterday, the white hat hacker“little very white guest”of heavy holes in the black bar safety net vulnerability on the platform is published. A hacker can through a simple method, unlimited use of the operator's traffic, the more frenzied is, whether it is mobile, Unicom or Telecom, the methods...

WordPress插件Subscribe to Comments本地文件包含漏洞

No description provided by source...

WordPress Plugin Subscribe to Comments Local File Inclusion Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Subscribe To Comments Reloaded is one of the comment subscription plugin. A local file inclusion vulnerability...

HackerOne: Team Member(s) associated with a Group have Read-only permission (Post internal comments) can post comment to all the participants

Hello Hackerone, I find bug with it team Members associated with a Group have only permission Post internal comments can post comment to all the participants Bypass it just with Add comma ',' isinternal=,...

Zendesk: Stored XSS in comments

Hello, Here are the steps to reproduce: 1 Go to any help articles or some place where you can comment 2 Type in the comment as: click this link 3 Now click on the text click this link on your comments and XSS is executed ! This is quite similar to 82725 but with a slight different payload...

redaxscript 2.5.0 - Multiple Vulnerabilities

Exploit for php platform in category web applications redaxscript 2.5.0 - Multiple Vulnerabilities Description The module filemanager allows for file uploads, and uses exifimagetype to check the validity of the file. By setting the first bytes of the uploaded file to that of a valid image type, a...

libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

It was discovered that libxml2 could access out-of-bounds memory when parsing unclosed HTML comments. A remote attacker could provide a specially crafted XML file that, when processed by an application linked against libxml2, could cause the application to disclose heap memory contents...

libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

It was discovered that libxml2 could access out-of-bounds memory when parsing unclosed HTML comments. A remote attacker could provide a specially crafted XML file that, when processed by an application linked against libxml2, could cause the application to disclose heap memory contents...

CVE-2015-6784

The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web MOTW comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring...