PT-2014-1871 · Red Hat · Yum +1

Name of the Vulnerable Software and Affected Versions: yum versions 3.4.3 and earlier Description: The issue allows remote attackers to bypass the RMP package signing restriction, potentially leading to a violation of protected information integrity. This can be exploited remotely. The...

[SECURITY] Fedora 20 Update: puppet-3.4.2-1.fc20

Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...

CVE-2010-5292

Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...

Design/Logic Flaw

Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...

CVE-2010-5292

Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...

CVE-2010-5292

Amberdms Billing System (ABS) prior to version 1.4.1, in multi-instance setups, allows local users to read cached data during the cron-triggered services_usage.php run, exposing sensitive information. Affected component is the cache between cron executions; root cause described as reading cache b...

Cross-Site Scripting (XSS) in WP-Cron Dashboard Wordpress plugin

Advisory ID: HTB23189 Product: WP-Cron Dashboard Wordpress plugin Vendor: OKAMOTO Wataru Vulnerable Versions: 1.1.5 and probably prior Tested Version: 1.1.5 Advisory Publication: December 5, 2013 without technical details Vendor Notification: December 5, 2013 Public Disclosure: December 26, 2013...

CVE-2013-6991

Cross-site scripting XSS vulnerability in the WP-Cron Dashboard plugin 1.1.5 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the procname parameter to wp-admin/tools.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the WP-Cron Dashboard plugin 1.1.5 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the procname parameter to wp-admin/tools.php...

CVE-2013-6991

Cross-site scripting XSS vulnerability in the WP-Cron Dashboard plugin 1.1.5 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the procname parameter to wp-admin/tools.php...

CVE-2013-6991

The CVE covers WP-Cron Dashboard WordPress plugin vulnerability (versions ≤ 1.1.5) where the procname parameter submitted to /wp-admin/tools.php is not properly sanitized, allowing reflected XSS in the administrator’s browser. Impact is arbitrary HTML/JavaScript execution within the affected site...

WordPress WP-Cron 1.1.5 Cross Site Scripting Vulnerability

WordPress WP-Cron Dashboard plugin version 1.1.5 suffers from a cross site scripting vulnerability. Product: WP-Cron Dashboard Wordpress plugin Vendor: OKAMOTO Wataru Vulnerable Versions: 1.1.5 and probably prior Tested Version: 1.1.5 Advisory Publication: December 5, 2013 without technical detai...

Wordpress WP-Cron Dashboard插件跨站脚本漏洞

CVE ID:CVE-2013-6991 WordPress是一款内容管理系统。 由于"procname" HTTP POST参数传递到"/wp-admin/tools.php"脚本的参数未能充分过滤用户提供的数据， 远程攻击者可以欺骗登录的管理员访问恶意链接，在受影响网站的浏览器上下文中执行任意HTML和脚本代码。 0 Wordpress WP-Cron Dashboard=1.1.5 厂商未提供官方的更新补丁，用户可使用非官方补丁： https://www.htbridge.com/advisory/HTB23189-patch.zip The exploitation exampl...

WordPress WP-Cron 1.1.5 Cross Site Scripting

Advisory ID: HTB23189 Product: WP-Cron Dashboard Wordpress plugin Vendor: OKAMOTO Wataru Vulnerable Versions: 1.1.5 and probably prior Tested Version: 1.1.5 Advisory Publication: December 5, 2013 without technical details Vendor Notification: December 5, 2013 Public Disclosure: December 26, 2013...

WordPress WP Cron Dashboard Plugin <= 1.1.5 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "procname" parameter to wp-admin/tools.php. Solution Update the plugin...

Cross-Site Scripting (XSS) in WP-Cron Dashboard Wordpress plugin

High-Tech Bridge Security Research Lab discovered vulnerability in WP-Cron Dashboard Wordpress plugin, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Cross-Site Scripting XSS in WP-Cron Dashboard Wordpress plugin: CVE-2013-6991 The vulnerability exists due to insufficient...

Vixie cron: Denial of service

Background Paul Vixie’s cron daemon, a fully featured crond implementation. Description Vixie cron contains a race condition relating to atime and mtime values of temporary files. Impact A local attacker could change the modification time of files, possibly resulting in a Denial of Service...

GLSA-201311-04 : Vixie cron: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201311-04 Vixie cron: Denial of Service Vixie cron contains a race condition relating to atime and mtime values of temporary files. Impact : A local attacker could change the modification time of files, possibly resulting in a...

OpenMediaVault Cron Remote Command Execution Vulnerability

OpenMediaVault allows an authenticated user to create cron jobs as arbitrary users on the system. An attacker can abuse this to run arbitrary commands as any user available on the system including root. This module requires Metasploit: http//metasploit.com/download Current source:...

OpenMediaVault Cron - Remote Command Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'OpenMediaVault Cron Remote Command Execution', 'Description' = %q OpenMediaVault allows an authenticated user to create cron jobs as...