purlsoho.com XSS vulnerability

Vulnerable URL: http://www.purlsoho.com/create/?s="'--; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 51879 Google Pagerank| 4 VIP website status:| No Check purlsoho.com SSL...

Cisco Secure Access Control Server Security Restriction Bypass Vulnerability (CNVD-2015-07358)

Cisco Secure Access Control Server that is ACS, is the United States Cisco Cisco a security access control server. A security restriction bypass vulnerability exists in Cisco Secure Access Control Server 5.7. It allows an authenticated remote user to bypass expected RBAC restrictions and create...

PT-2015-2589

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control Server ACS version 5.70.15 Description The issue concerns a component of the Cisco Secure Access Control System, specifically the Solution Engine, which has inadequate access restrictions to certain functions. This...

Adobe Acrobat Document Cloud PDF Memory Access

The vulnerability of the createSquareMesh function in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control mechanisms. Exploiting this vulnerability...

foxterrier.se XSS vulnerability

Vulnerable URL: http://www.foxterrier.se/member/create.account.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website status:| N...

Multiple FireEye Product 'extract_ar.py' Directory Traversal Vulnerabilities

FireEye is a well-known American cybersecurity company. A directory traversal vulnerability exists in the implementation of multiple FireEye products. A remote attacker could exploit this vulnerability to create or overwrite arbitrary files in the user's context...

PT-2015-2230

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48M Description The issue is related to an integer overflow in the native handle create function, which can be exploited by attackers to obtain different application's privileges or cause a denial of service,...

PT-2015-6768

Name of the Vulnerable Software and Affected Versions X2Engine X2CRM versions prior to 5.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that create an administrative account via a crafted request to...

CVE-2015-5075: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the authentication of administrators for requests that create an administrative account via a crafted request to index.php/users/create...

Google Android libcutils 'native_handle_ create()' function integer overflow vulnerability

Android is an operating system based on the Linux open kernel and is a mobile operating system announced on November 5, 2007 by Google Inc. Google Android suffers from an integer overflow vulnerability in the implementation of the libcutils 'nativehandle create' function, which can be exploited b...

Best Practices for Upgrading a Hypervisor Tools Version in a Citrix Provisioning Environment

This article describes the steps for upgrading a hypervisor tools version in a Citrix Provisioning environment. Use the following procedure to upgrade a Hypervisor: 1. Reverse image the vdisk. 2. Boot from the local HDD on the VM that has been reverse imaged to. 3. Uninstall the PVS target...

CVE-2015-4307

The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111...

PT-2015-7430

Name of the Vulnerable Software and Affected Versions Openfire version 3.10.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including the groupchatName parameter, urlName parameter, hostname parameter, or the search parameter in vario...

Synology Download Station Cross-Site Scripting Vulnerability (CNVD-2015-06011)

Synology Download Station is a set of web-based download applications from Synology. A cross-site scripting vulnerability exists in the 'Create download task via URL' feature in Synology Download Station prior to version 3.5-2967, which can be exploited by remote attackers to inject arbitrary web...

PT-2015-7413

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.2.3 Description The issue allows local users to cause a denial of service, potentially leading to a system crash, by utilizing a socket that was not properly bound. This is due to a problem in the rds conn crea...

PT-2015-2023

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to insufficient input validation in the Windows operating system, allowing a local attacker to potentially elevate their privileges using a specially crafted application...

Linux/x86 - Create file with permission 7775 and exit Shell Generator

Linux/x86 - Create file with permission 7775 and exit Shell Generator. Shellcode exploit for linx86 platform !/bin/python from sys import argv """ Shellcode Generator... Create file with permission 7775 --------------------------------------------------------------------------------- Disassembly ...

CVE-2015-5623: Improper Access Control

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

OracleVM 3.3 : net-snmp (OVMSA-2015-0099)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 - Quicker loading of IP-MIB::ipAddrTable 1191393 - Quicker loading of IP-MIB::ipAddressTable 1191393 - Fixed snmptrapd crash when '-OQ' paramete...

PT-2015-6990

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.2.3 Description The issue allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role. This can be achieved by sending a post-quickdraft-save action...