WordPress Users to CSV Plugin <= 1.4.5 - Cross Site Request Forgery (CSRF)

Because of this vulnerabiliy, user information can be exported via a GET request to users.php. Solution Disable the plugin...

WordPress Users To CSV 1.4.5 Cross Site Request Forgery

Title: Cross-Site Request Forgery Vulnerability in Users to CSV Wordpress Plugin v1.4.5 Submitter: Nitin Venkatesh Product: Users to CSV Wordpress Plugin Product URL: https://wordpress.org/plugins/users-to-csv/ disabled Plugin SVN URL: https://plugins.svn.wordpress.org/users-to-csv/ active...

Chrome Autofill Viewer - Tool to View or Delete Autocomplete data from Google Chrome browser

Chrome Autofill Viewer is the free tool to easily see and delete all your autocomplete data from Google Chrome browser. Chrome stores Autofill entries typically form fields such as login name, pin, passwords, email, address, phone, credit/debit card number, search history etc in an internal...

[SECURITY] Fedora 20 Update: phpMyAdmin-4.4.6.1-1.fc20

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

Stack overflow

Stack-based buffer overflow in OPCTest.exe in Rockwell Automation RSLinx Classic before 3.73.00 allows remote attackers to execute arbitrary code via a crafted CSV file...

CVE-2014-9204

Stack-based buffer overflow in OPCTest.exe in Rockwell Automation RSLinx Classic before 3.73.00 allows remote attackers to execute arbitrary code via a crafted CSV file...

CVE-2014-9204

CVE-2014-9204 affects Rockwell Automation RSLinx Classic OPCTest.exe prior to version 3.73.00. The flaw is a stack-based buffer overflow triggered by loading a crafted CSV file, which could crash the application or allow code execution when a user opens the file. Affected product is RSLinx Classi...

CVE-2014-9204

Stack-based buffer overflow in OPCTest.exe in Rockwell Automation RSLinx Classic before 3.73.00 allows remote attackers to execute arbitrary code via a crafted CSV file...

CVE-2014-9204: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OPCTest.exe in Rockwell Automation RSLinx Classic before 3.73.00 allows remote attackers to execute arbitrary code via a crafted CSV file...

WP Ultimate CSV Importer < 3.7.1 - Directory Traversal

The Import and Export WordPress Data as CSV or XML WordPress plugin was affected by a Directory Traversal security vulnerability...

WordPress Ultimate CSV Importer Plugin <= 3.7.0 - Directory Traversal

Because of this vulnerability, the attackers can read files on the filesystem without authorization. Solution Update the plugin...

PT-2015-3376

Name of the Vulnerable Software and Affected Versions RSLinx Classic versions prior to 3.73.00 Description The issue is caused by a stack-based buffer overflow in the RSLinx Classic communication server's dynamic linking library. Exploitation of this issue may allow an attacker to impact the...

Moodle 2.0.x < 2.0.3 Multiple Vulnerabilities

Binary data 8710.prm...

CVE-2014-2027

eGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection attacks, delete arbitrary files, and possibly execute arbitrary code via the 1 addrfields or 2 trans parameter to addressbook/csvimport.php, 3 calfields or 4 trans parameter to calendar/csvimport.php, 5...

CVE-2014-2027

eGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection attacks, delete arbitrary files, and possibly execute arbitrary code via the 1 addrfields or 2 trans parameter to addressbook/csvimport.php, 3 calfields or 4 trans parameter to calendar/csvimport.php, 5...

WordPress InBoundio Marketing Plugin 1.0 /admin/partials/csv_uploader.php 文件上传漏洞

/admin/partials/csvuploader.php?php $ds = DIRECTORYSEPARATOR; //1 $storeFolder = 'uploadedcsv'; //2 if !empty$FILES $FILES'file''name' = pregreplace'/^A-Za-z0-9 .-/', '', $FILES'file''name'; $FILES'file''name' = pregreplace'/\s+/', '', $FILES'file''name'; $tempFile = $FILES'file''tmpname'; //3...

Import any XML or CSV File to WordPress <= 3.2.4 - Multiple Vulnerabilities

Multiple issues were fixed, such as Authenticated SQL Injection, Authenticated Reflected XSS and Unauthorised access to some methods...

RAWR - Rapid Assessment of Web Resources

Features A customizable CSV containing ordered information gathered for each host, with a field for making notes/etc. An elegant, searchable, JQuery-driven HTML report that shows screenshots, diagrams, and other information. A report on relevent security headers, courtesy of SmeegeSec. a CSV Thre...

Windows 2012/2012R2 leaks memory when a hardware snapshot is created multiple times on a CSV

Challenge Windows 2012 / 2012 R2 Hyper-V hosts leak memory when a hardware snapshot is created/removed multiple times on a CSV with a hardware provider. Cause Windows 2012 / 2012 R2 Hyper-V hosts leak memory when a snapshot is created on a CSV using hardware provider. Due to the fact that only a...

Import any XML or CSV File to WordPress <= 3.2.3 - RCE

WP All Import does not properly verify that a user has permission to execute functions. Coupled with an interesting method that allows arbitrary functions in specific objects to be called allows this to be leveraged in many ways...