Security update for xen (important)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2019:1226-1 Rating: important References: 1026236 1027519 1069468 1105528 1114988 1115040 1115045 1115047 1116380 1117756 1119161 1123157 1126140 1126141 1126192 1126195 1126196 1126197 1126198 1126201 1126325 1127400...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2019:0891-1)

This update for xen fixes the following issues : Security issues fixed : Fixed an issue which could allow malicious PV guests may cause a host crash or gain access to data pertaining to other guests.Additionally, vulnerable configurations are likely to be unstable even in the absence of an attack...

domus-nekretnine.hr XSS vulnerability

Open Bug Bounty ID: OBB-649896 Description| Value ---|--- Affected Website:| domus-nekretnine.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

domus-boavista-habinedita-5587.empreendimentos.com.pt XSS vulnerability

Open Bug Bounty ID: OBB-629053 Description| Value ---|--- Affected Website:| domus-boavista-habinedita-5587.empreendimentos.com.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting /...

domus-materiaux.fr XSS vulnerability

Open Bug Bounty ID: OBB-448843 Description| Value ---|--- Affected Website:| domus-materiaux.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

Security update for xen (important)

This update for xen fixes several issues. These security issues were fixed: - CVE-2017-14316: Missing bound check in function allocheappages for an internal array allowed attackers using crafted hypercalls to execute arbitrary code within Xen XSA-231, bsc1056278 - CVE-2017-14318: The function...

Foro Domus 2.10 Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16154/info Foro Domus is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...

Foro Domus escribir.php email Parameter Cross-Site Scripting - Ver2 (CVE-2006-0110)

A cross-site scripting vulnerability has been reported in Foro Domus. Successful exploitation of this vulnerability would allow a remote attacker to inject arbitrary script into the affected system...

Debian DSA-2501-1 : xen - several vulnerabilities

Several vulnerabilities were discovered in Xen, a hypervisor. - CVE-2012-0217 Xen does not properly handle uncanonical return addresses on Intel amd64 CPUs, allowing amd64 PV guests to elevate to hypervisor privileges. AMD processors, HVM and i386 guests are not affected. - CVE-2012-0218 Xen does...

Foro Domus Menu.PHP远程文件包含漏洞

Foro Domus是一款基于PHP的WEB应用程序。 Foro Domus不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Menu.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Domus 2.10 目前没有解决方案提供,请关注以下链接： http://sourceforge.net/projects/domus/ C xoron Name: Foro Domus v2.10 Remote File Include Exploit Author: xoron Exploit code...

Remote file inclusion

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesionidioma parameter...

CVE-2007-0580

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesionidioma parameter...

CVE-2007-0580

CVE-2007-0580 affects Foro Domus 2.10: PHP remote file inclusion in menu.php via the sesion_idioma parameter allows remote code execution. Root cause is including remote PHP files through a crafted URL. Public references indicate exploits exist (e.g., Exploit-DB), but remediation details are not ...

CVE-2007-0580: Undefined Security Weakness

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesionidioma parameter...

Foro Domus 2.10 (phpbb_root_path) Remote File Include Exploit

No description provided by source. C xoron Name: Foro Domus v2.10 phpbbrootpath Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=8920 xoron.biz Thanx: str0ke, kacper, k1tk4t, SHiKA, can bjorn Tesekkurler: chaos, pang0...

Foro Domus 2.10 - 'phpbb_root_path' Remote File Inclusion

C xoron Name: Foro Domus v2.10 phpbbrootpath Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=8920 xoron.biz Thanx: str0ke, kacper, k1tk4t, SHiKA, can bjorn Tesekkurler: chaos, pang0 $rfi = "menu.php?sesionidioma=";...

Foro Domus 2.10 (phpbb_root_path) Remote File Include Exploit

Exploit for unknown platform in category web applications ============================================================= Foro Domus 2.10 phpbbrootpath Remote File Include Exploit ============================================================= C xoron Name: Foro Domus v2.10 phpbbrootpath Remote File...

Sql injection

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained...

CVE-2006-0159

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained...

CVE-2006-0159

CVE-2006-0159 is a SQL injection vulnerability in Foro Domus 2.10, specifically in escribir.php via the email parameter. According to the connected NVD entry, remote attackers can execute arbitrary SQL commands (AV:N/AC:L/Au:N/C:P/I:P/A:P). The affected component is Foro Domus 2.10, escribi r.php...