1657 matches found
Shopify - Persistent Embed POST Inject Vulnerability
Document Title: =============== Shopify - Persistent Embed POST Inject Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1556 Video View: https://www.youtube.com/watch?v=5qiJ4UjJtQ Release Date: ============= 2015-08-13 Vulnerability Laboratory ID VL-ID:...
WordPress XVE Various Embed Plugin <= 1.0.3 - Cross Site Scripting
This plugin is prone to JW player multiple cross site scripting vulnerabilities. Solution Update the plugin...
WordPress XVE Various Embed Plugin <= 1.0.3 - Cross Site Scripting
This plugin is prone to JW player multiple cross site scripting vulnerabilities. Solution Update the plugin...
WordPress Embed Plus Plugin <= 5.3 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
WordPress plugin Embed-Articles/wp-admin/admin.php cross-site request forgery vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin Embed-Articles/wp-admin/admin.php, which allows a...
WordPress Embed Articles Plugin <= 7.0.3 - Multiple Vulnerabilities
This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Attackers can insert arbitrary script into admin page, hijack admin's cookies etc. Solution This plugin is closed...
WordPress Embed Articles Plugin <= 7.0.3 - Multiple Vulnerabilities
This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Attackers can insert arbitrary script into admin page, hijack admin's cookies etc. Solution This plugin is closed...
WordPress Advanced Video Embed File Disclosure
File disclosure vulnerability in WordPress Advanced Video Embed plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
phpok 最新版储存型xss。
简要描述： rt 详细说明： 看到出了论坛这个新功能 xss过滤还是不够哦。 两处问题。 发布帖子处， 1 正则貌似有问题。 换行就绕过了对 onxxx的检测。 2 测试代码 漏洞证明：...
NASA Orion - Bypass, Persistent Issue & Embed Code Exec
Document Title: =============== NASA Orion - Bypass, Persistent Issue & Embed Code Exec References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1339 VU666988 US CERT Vulnerability Magazine:...
NASA Orion (Mars) Filter Bypass / Persistent Cross Site Scripting
Document Title: =============== NASA Orion - Bypass, Persistent Issue & Embed Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1339 VU666988 US CERT Vulnerability Magazine:...
Artiss Code Embed 2.0.1 - wp-admin/admin.php suffix Parameter XSS
The Code Embed WordPress plugin was affected by a wp-admin/admin.php suffix Parameter XSS security vulnerability...
XVE Various Embed - JW Player Multiple Cross-Site Scripting Vulnerabilities
The XVE Various Embed WordPress plugin was affected by a JW Player Multiple Cross-Site Scripting Vulnerabilities security vulnerability...
WordPress Artiss Code Embed Plugin <= 2.0.1 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in wp-admin/admin.php suffix parameter. Solution Update the plugin...
destoon存储型xss指哪打哪
简要描述： rt 20140722 详细说明： 会员发送信件处，上传附件允许 上传swf格式文件， 同时 未对标签做过滤。 我们构造一个恶意的swf。例如这样 上传附件 f12 查看代码 得到swf路径后。抓包提交 查看短信时 触发 因为 同域，那么这个swf就可以做很多啦，盗取cookie 之类的。 漏洞证明：...
recorder.aacsb.edu XSS vulnerability
Open Bug Bounty ID: OBB-46255 Description| Value ---|--- Affected Website:| recorder.aacsb.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
Ximian Evolution 1.x - MIME image/* Content-Type Data Inclusion Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7119/info Ximian Evolution does not properly validate MIME image/ Content-Type fields. If an email message contains an image/ Content-Type, any type of data can be embedded where the image information is expected. This ca...
Apple Quicktime < 7.2 - SMIL Remote Integer Overflow PoC
No description provided by source. ---------------------------------------------------------------------- ATTACK VECTORS ---------------------------------------------------------------------- This vulnerability can be triggered by luring a target user into running a malicious SMIL file locally or...
Yamaha MidiPlug 1.1 b-j MidiPlug Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/760/info There is a buffer overflow in the MidiPlug that may allow arbitrary code to be executed on the local host. This overflow occurs if a long Text variable is specified within an EMBED tag in a web page. Instructions...
PHPX 3.x admin/images.php CSRF Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly validate access to administrative command...