Microsoft Windows Graphics Memory Corruption Vulnerability (CNVD-2015-08116)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory corruption vulnerability exists in the Windows font library of Microsoft Windows. The vulnerability exists because the program does not properly handle specially designed embedded fonts. A remo...

User Picker Custom field HTML tags showing when creating new issues

h3. Summary Customer reported that when creating custom field User Picker and added html tags in description field, text link shows correctly in Custom Field screen under Administration Setting. However when creating new issues, the create issue form for User Picker field shows the HTML code not...

User Picker Custom field HTML tags showing when creating new issues

h3. Summary Customer reported that when creating custom field User Picker and added html tags in description field, text link shows correctly in Custom Field screen under Administration Setting. However when creating new issues, the create issue form for User Picker field shows the HTML code not...

UltraIso v 9.6.5 - Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl Title : UltraIso v 9.6.5 - Buffer Overflow Vulnerability Author : ZwX Date : 24/10/2015 Vendor : https://www.ezbsystems.com/ Download : http://www.ezbsystems.com/ultraiso/download.htm Tested Os : Windows 7 steps to reproduce the...

CloudBees Jenkins Information Disclosure Vulnerability (CNVD-2015-07826)

CloudBees Jenkins is the open source continuous integration server. CloudBees Jenkins 1.638, LTS 1.625.2 or earlier, an XML external entity vulnerability exists in the create-job CLI command, which can be used by a remote attacker to read arbitrary files through the constructed job configuration,...

CVE-2015-5319

XML external entity XXE vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to read arbitrary files via a crafted job configuration that is then used in an "XML-aware tool," as demonstrated by get-job and update-job...

CVE-2015-5319

XML external entity XXE vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to read arbitrary files via a crafted job configuration that is then used in an "XML-aware tool," as demonstrated by get-job and update-job...

PT-2015-6852

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.638 Jenkins LTS versions prior to 1.625.2 Description A vulnerability exists in the create-job CLI command, allowing remote attackers to read arbitrary files via a crafted job configuration. This can be exploited wh...

CVE-2015-5319: Undefined Security Weakness

XML external entity XXE vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to read arbitrary files via a crafted job configuration that is then used in an "XML-aware tool," as demonstrated by get-job and update-job...

PT-2015-2746

Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x through 4.6.x Description The issue is related to the hypercall create continuation function in arch/arm/domain.c, which allows local guest users to cause a denial of service host crash via a preemptible hypercall to the...

createhistory.create.net XSS vulnerability

Vulnerable URL: http://createhistory.create.net/shop/search.php?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 16.11.2015 Latest check for patch:| 16.11.2015 16:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

purlsoho.com XSS vulnerability

Vulnerable URL: http://www.purlsoho.com/create/?s="'--; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 51879 Google Pagerank| 4 VIP website status:| No Check purlsoho.com SSL...

Cisco Secure Access Control Server Security Restriction Bypass Vulnerability (CNVD-2015-07358)

Cisco Secure Access Control Server that is ACS, is the United States Cisco Cisco a security access control server. A security restriction bypass vulnerability exists in Cisco Secure Access Control Server 5.7. It allows an authenticated remote user to bypass expected RBAC restrictions and create...

PT-2015-2589

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control Server ACS version 5.70.15 Description The issue concerns a component of the Cisco Secure Access Control System, specifically the Solution Engine, which has inadequate access restrictions to certain functions. This...

Adobe Acrobat Document Cloud PDF Memory Access

The vulnerability of the createSquareMesh function in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control mechanisms. Exploiting this vulnerability...

foxterrier.se XSS vulnerability

Vulnerable URL: http://www.foxterrier.se/member/create.account.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website status:| N...

Multiple FireEye Product 'extract_ar.py' Directory Traversal Vulnerabilities

FireEye is a well-known American cybersecurity company. A directory traversal vulnerability exists in the implementation of multiple FireEye products. A remote attacker could exploit this vulnerability to create or overwrite arbitrary files in the user's context...

PT-2015-2230

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48M Description The issue is related to an integer overflow in the native handle create function, which can be exploited by attackers to obtain different application's privileges or cause a denial of service,...

PT-2015-6768

Name of the Vulnerable Software and Affected Versions X2Engine X2CRM versions prior to 5.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that create an administrative account via a crafted request to...

CVE-2015-5075: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the authentication of administrators for requests that create an administrative account via a crafted request to index.php/users/create...