finecms front Desk members arbitrary file upload vulnerability #2

No description provided by source...

finecms front Desk members arbitrary file upload vulnerability #1

No description provided by source...

finecms front Desk arbitrary file upload vulnerability #3

No description provided by source...

finecms the front Desk of any user login

No description provided by source...

finecms front Desk SQL injection

No description provided by source...

finecms front Desk arbitrary file upload vulnerability #1

No description provided by source...

Session Key Disclosure

Moodle is vulnerable to session key disclosure.If anonymous front-page forum is enabled, remote attackers can obtain session keys for their own sessions by visiting the front page...

GE Multilin SR Relay Unauthorized Access Vulnerability

The 750 Feeder/760 Feeder/469 Motor/489 Generator/745 Transformer/369 Motor are all a GE relay. An unauthorized access vulnerability exists in the GE Multilin SR relays, which could allow an attacker to gain unauthorized access to the GE MultilinSR series of relay products by brute-force cracking...

DedeCMS stored xss vulnerability

Vulnerability description: Dedecms is an open source PHP open source website management system. Dedecms member function shopsdelivery. in php des parameters there is stored XSS vulnerability, the attacker may exploit the vulnerability to obtain the users cookie. Test environment: DedeCMS-V5...

Citrix Store Front 3.0 Unable to save favourites in Store Front

Unable to save favourites in Store Front...

Personalized User Focused Security: Stethoscope

Stethoscope is a web application that collects information from existing device data sources e.g., JAMF or LANDESK on a given user’s devices and gives them clear and specific recommendations for securing their systems. Stethoscope consists of two primary pieces: a Python-based back-end and a...

[SECURITY] Fedora 24 Update: drupal7-views-3.15-1.fc24

You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...

[SECURITY] Fedora 25 Update: cxf-3.1.6-5.fc25

Apache CXF is an open-source services framework that aids in the development of services using front-end programming APIs, like JAX-WS and JAX-RS...

Citrix Store Front MMC console crashes with RSA Authentication Agent 1.0 installed.

Even after uninstalling the RSA Authentication Agent 1.0 we get following error in event viewer logs: Error while creating the Citrix StoreFront Snap-in. Microsoft.Practices.Unity.ResolutionFailedException: Resolution of the dependency failed, type =...

GNU Chess Buffer Overflow Vulnerability

GNU Chess aka gnuchess is a chess program. A stack buffer overflow vulnerability exists in the ValidateMove function in the frontend/move.cc file in GNU Chess 6.2.3 and earlier. An attacker can exploit this vulnerability to execute arbitrary code with large input values...

Google Chrome < 56.0.2924.76 Multiple Vulnerabilities

Binary data 9935.pasl...

wordpress plugin front-end-post-edit cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the wordpress plugin front-end-post-edit, which allows an attacker to frame...

Arbitrary Command Execution Vulnerability in Knight CMS

Knight CMS Talent System is a professional talent system based on PHP+MYSQL. Knight CMS version 4.1.0 suffers from an arbitrary command execution vulnerability. Due to the Knight CMS V4.1.0 using the tp framework there is a template engine remote code execution vulnerability. Attackers can exploi...

Piwigo 'search_rules.php' Cross-Site Scripting Vulnerability

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time, and more. A cross-site scripting vulnerability exists in the 'search results front end' feature in Piwigo version 2.8.3. A remote...

Stored Cross-Site Scripting Vulnerability in yiqicms

Yiqicms is a marketing enterprise website system based on SEO-friendly development, using PHP+Mysql open source building system. Yiqicms front-end stored cross-site scripting vulnerabilities. As the foreground to receive msgtitle msgname failed to filter the output code , only msgcotent parameter...