Mozilla Firefox ESR Multiple Vulnerabilities (mfsa2015-94) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Design/Logic Flaw

The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early poin...

CVE-2015-4498

CVE-2015-4498 affects Mozilla Firefox and Firefox ESR. The vulnerability arises in the add-on installation flow: an attacker can bypass the user-confirmation prompt by crafting a data: URL and navigating to an arbitrary http: or https: URL early in the installation process, enabling installation ...

CVE-2015-4498

The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early poin...

CVE-2015-3758

CVE-2015-3758 affects UIKit WebView in iOS prior to 8.4.1. The vulnerability lets an attacker bypass the user-confirmation requirement and initiate a FaceTime call via an app supplying a crafted URL, due to parsing/validation issues in WebView URL handling. Impact: potential unauthorized FaceTime...

Threat Outbreak Alert RuleID17159: Email Messages Distributing Malicious Software on February 22, 2016

Medium Alert ID: 40352 First Published: 2015 August 10 14:24 GMT Last Updated: 2016 February 22 20:36 GMT Version: 8 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17159...

Google Analytics By Yoast Premium 5.4.4 Cross Site Scripting

Details ================ Software: Google Analytics by Yoast Premium Version: 5.4.4 Homepage: https://yoast.com/wordpress/plugins/google-analytics/ Advisory report: https://security.dxw.com/advisories/xss-in-google-analytics-by-yoast-premium-by-privileged-users/ CVE: Awaiting assignment CVSS: 5.5...

запчасти-к-иномаркам.рф XSS vulnerability

Vulnerable URL:...

Sticky Keys Persistence Module

This module makes it possible to apply the 'sticky keys' hack to a session with appropriate rights. The hack provides a means to get a SYSTEM shell using UI-level interaction at an RDP login screen or via a UAC confirmation dialog. The module modifies the Debug registry setting for certain...

motosfera.ru XSS vulnerability

Vulnerable URL:...

dearputin.com XSS vulnerability

Vulnerable URL: http://dearputin.com/prettyPhoto/0,%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1824326 Google Pagerank| 0 VIP...

ads.su XSS vulnerability

Vulnerable URL:...

Threat Outbreak Alert RuleID15980: Email Messages Distributing Malicious Software on October 7, 2015

Medium Alert ID: 39551 First Published: 2015 June 30 13:19 GMT Last Updated: 2015 October 7 19:54 GMT Version: 14 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15980 and...

PivotX 2.3.10 Session Fixation / XSS / Code Execution

Vulnerability: Session Fixation, Reflected XSS, Code Execution Affected Software: PivotX http://pivotx.net/ Affected Version: 2.3.10 probably also prior versions Patched Version: 2.3.11 Risk: Medium-High Session Fixation ================ Risk ---- Medium; If victim clicks link and logs in, then a...

Open redirect

Open redirect vulnerability in the Chaos tool suite ctools module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors involving processing confirmation delete pages...

CVE-2015-4039 - WordPress WP Membership plugin [Stored XSS]

Exploit Title: CVE-2015-4039 - WordPress WP Membership plugin Stored XSS Contact: https://twitter.com/panVagenas Vendor Homepage: http://wpmembership.e-plugins.com/ Software Link: http://codecanyon.net/item/wp-membership/10066554 Version: 1.2.3 Tested on: WordPress 4.2.2 CVE: CVE-2015-4039...

CVE-2015-3176

The account-confirmation feature in login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote attackers to obtain sensitive full-name information by attempting to self-register...

CVE-2015-3176

The account-confirmation feature in login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote attackers to obtain sensitive full-name information by attempting to self-register...

UBUNTU-CVE-2015-3176

The account-confirmation feature in login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote attackers to obtain sensitive full-name information by attempting to self-register...

CVE-2015-3176

The account-confirmation feature in login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote attackers to obtain sensitive full-name information by attempting to self-register...