CVE-2014-1964: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Integration Repository in the SAP Exchange Infrastructure BC-XI component in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to the ESR application and a DIR error...

PT-2014-4387

Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability in the Integration Repository of the SAP Exchange Infrastructure BC-XI component. This vulnerability allows remote...

D-link router CSRF exploit detailed explanation-vulnerability warning-the black bar safety net

A, introduction The purpose of this article is to demonstrate a CSRF vulnerability in D-link DIR-6 0 0 router-hardware version: BX firmware version: 2.16-CSRF vulnerability, for example. D-link CSRF vulnerability is already disclosed herein will be described in detail at the entire D-link CSRF...

ODude Dir - DT

ODude DIR - DT-777 developer statement ODude Dir 1.1 updated with fixed securities issues. http://www.odude.com/main/dir/dir-log.html...

[SECURITY] Fedora 19 Update: mediawiki-1.21.5-1.fc19

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances...

D-Link DIR-100 CSRF / XSS / Disclosure / Authentication

D-Link DIR-100 routers suffer from multiple authentication, credential management, cross site request forgery, cross site scripting, and information disclosure vulnerabilities. Title: Router D-Link DIR-100 Multiple Vulnerabilities Date: 2013-12-18 Author: Felix Richter Contact: email protected...

D-Link DIR-100 - Multiple Vulnerabilities

Title: Router D-Link DIR-100 Multiple Vulnerabilities Date: 2013-09-19 Author: Felix Richter Contact: [email protected] Vulnerable Software: ftp://ftp.dlink.de/dir/dir-100/driversoftware/DIR-100fwrevd403b07ALLde20120410.zip Patched Software:...

D-Link DIR-100 - Multiple Vulnerabilities

D-Link DIR-100 - Multiple Vulnerabilities Title: Router D-Link DIR-100 Multiple Vulnerabilities Date: 2013-09-19 Author: Felix Richter Contact: [email protected] Vulnerable Software: ftp://ftp.dlink.de/dir/dir-100/driversoftware/DIR-100fwrevd403b07ALLde20120410.zip Patched Software:...

D-Link DIR-100 CSRF / XSS / Disclosure / Authentication

Title: Router D-Link DIR-100 Multiple Vulnerabilities Date: 2013-12-18 Author: Felix Richter Contact: [email protected] Vulnerable Software: ftp://ftp.dlink.de/dir/dir-100/driversoftware/DIR-100fwrevd403b07ALLde20120410.zip Patched Software:...

PYSEC-2014-95

Race condition in the xdg.BaseDirectory.getruntimedir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once th...

UBUNTU-CVE-2014-1624

Race condition in the xdg.BaseDirectory.getruntimedir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once th...

CVE-2014-1624

Race condition in the xdg.BaseDirectory.getruntimedir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once th...

PT-2014-4263

Name of the Vulnerable Software and Affected Versions python-xdg version 0.25 Description A race condition exists in the xdg.BaseDirectory.get runtime dir function, allowing local users to overwrite arbitrary files. This is achieved by pre-creating a file to point to a victim-owned location, then...

Maian Uploader v4.0 <= (SQLi/Disclosure/XSS) Vulnerabilities

Maian Uploader v4.0 is suffer from multiple vulnerabilities remote attacker can exploit some bugs like SQL Injection , XSS and disclosure the target full path. ----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz -----------------------------------------...

Song Exporter 2.1.1 RS Local File Inclusion

Document Title: =============== Song Exporter v2.1.1 RS iOS - File Include Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1172 Release Date: ============= 2013-12-19 Vulnerability Laboratory ID VL-ID: ====================================...

Song Exporter v2.1.1 RS iOS - File Include Vulnerabilities

Document Title: =============== Song Exporter v2.1.1 RS iOS - File Include Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1172 Release Date: ============= 2013-12-18 Vulnerability Laboratory ID VL-ID: ====================================...

FileMaster SY-IT 3.1 iOS - Multiple Web Vulnerabilities

FileMaster SY-IT 3.1 iOS - Multiple Web Vulnerabilities Document Title: =============== FileMaster SY-IT v3.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1170 Release Date: ============= 2013-12-16 Vulnerability...

D-Link DIR-Series Routers - '/model/__show_info.php' Local File Disclosure

source: https://www.securityfocus.com/bid/64043/info Multiple D-Link DIR series routers are prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information...

PT-2013-5724

Name of the Vulnerable Software and Affected Versions AjaXplorer versions 5.0.2 and earlier Description The issue allows remote authenticated users to read arbitrary files or upload files to arbitrary locations via directory traversal vulnerabilities in the index.php file. This can be achieved by...

D-Link DIR-605L Captcha Handling Buffer Overflow Vulnerability

This Metasploit module exploits an anonymous remote code execution on D-Link DIR-605L routers. The vulnerability exists while handling user supplied captcha information, and is due to the insecure usage of sprintf on the getAuthCode function. This Metasploit module has been tested successfully on...