1197 matches found
RedHat Update for qemu-kvm RHSA-2014:0704-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-4588
Cross-site scripting XSS vulnerability in tpls/editmedia.php in the Hot Files: File Sharing and Download Manager wphotfiles plugin 1.0.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the mediaid parameter...
CVE-2014-4588
Cross-site scripting XSS vulnerability in tpls/editmedia.php in the Hot Files: File Sharing and Download Manager wphotfiles plugin 1.0.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the mediaid parameter...
CVE-2014-4588
The CVE-2014-4588 entry concerns the WordPress plugin Hot Files: File Sharing and Download Manager (wphotfiles)
Simple Text-File Login script 1.0.6 - (DD/RFI) Multiple Vulnerabilities
No description provided by source. START 0x01 Informations: Script : Simple Text-File Login script 1.0.6 Download : http://www.hotscripts.com/jump.php?listingid=36777&jumptype=1 Vulnerability : Remote File Inclusion / Sensitive Data Disclosure Author : Osirys Contact : osirysatlivedotit Notes :...
Scripts Genie Hot Scripts Clone (showcategory.php, cid param) - SQL Injection Vulnerability
No description provided by source. -+=--+=--+=--+=--+=--+=--+=--+=--+=--+=- + Security Flaw + -+=--+=--+=--+=--+=--+=--+=--+=--+=--+=- + + + /\ \ | | + +/ |/ / | | | |/ / / \ | + +\ \ / | || / /\ / / | + +|/||,\ / || + -+=--+=--+=--+=--+=--+=--+=--+=--+=--+-+ +Scripts Genie Hot Scripts...
Hot Project 7.0 - (Auth Bypass) SQL Injection Vulnerability
No description provided by source. -------------------------AllaH AkbaR------------------------------- Hot Project - Version 7 Auth Bypass Remote Sql Injecion --------------------------------------------------------------------------- Discovered By: HCOCAMAN ALGERIAN HaCkEr Mail: [email protected]...
I-net Multi User Email Script SQLi Vulnerability
No description provided by source. Name : I-net Multi User Email Script SQLi Vulnerability Date : june, 27 2010 Critical Level : HIGH Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r...
Hot Open Tickets <= 11012004 (CLASS_PATH) Remote Include Vuln
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM HOT Hot Open Tickets hot11012004ver2f - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site scripts...
WinSyslog Interactive Syslog Server 4.21/ long Message Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8821/info WinSyslog is prone to a remotely exploitable denial of service vulnerability. The issue exists in the Interactive Syslog Server specifically. This occurs when the program receives multiple excessive syslog...
Hot Links SQL-PHP 'news.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31118/info Hot Links SQL-PHP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Hot Links SQL-PHP - Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29632/info Hot Links SQL-PHP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code i...
Hot Links Perl PHP Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21112/info Hot Links is prone to an information-disclosure vulnerability because it fails to authenticate the user during specific download requests. An attacker can exploit this issue to retrieve administrative backup...
aspWebLinks 2.0 - Remote SQL Injection / Admin Pass Change Exploit
No description provided by source. !-- Title : aspWebLinks 2.0 Remote Admin Pass Change Exploit and links.asp SQL Injection Author : ajann Dork : aspWebLinks 2.0 SQL INJECTION:...
openSUSE Security Update : postgresql91 (openSUSE-SU-2013:0318-1)
PostgreSQL was updated to version 9.1.8 bnc802679 : - Prevent execution of enumrecv from SQL CVE-2013-0255. - Fix multiple problems in detection of when a consistent database state has been reached during WAL replay - Update minimum recovery point when truncating a relation file - Fix recycling o...
openSUSE Security Update : postgresql (openSUSE-SU-2012:1299-1)
This version upgrade of PostgreSQL fixes following issues : - Bugfix release 9.0.10 : - Fix planner's assignment of executor parameters, and fix executor's rescan logic for CTE plan nodes. - Improve page-splitting decisions in GiST indexes. - Fix cascading privilege revoke to stop if privileges a...
Moderate: Red Hat Security Advisory: qemu-kvm security and bug fix update
Updated qemu-kvm packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Scientific Linux Security Update : libvirt on SL6.x i386/x86_64 (20140527)
It was found that libvirt passes the XMLPARSENOENT flag when parsing XML documents using the libxml2 library, in which case all XML entities in the parsed documents are expanded. A user able to force libvirtd to parse an XML document with an entity pointing to a special file that blocks on read...
ESA-2014-028: EMC Cloud Tiering Appliance XML External Entity (XXE) and Information Disclosure Vulnerabilities
ESA-2014-028.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-028: EMC Cloud Tiering Appliance XML External Entity XXE and Information Disclosure Vulnerabilities EMC Identifier: ESA-2014-028 CVE Identifier: CVE-2014-0644, CVE-2014-0645 Severity Rating: CVSS v2 Base Score: See below for...
ESA-2014-029: RSA® Access Manager Sensitive Information Disclosure Vulnerability
ESA-2014-029.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-029: RSA® Access Manager Sensitive Information Disclosure Vulnerability EMC Identifier: ESA-2014-029 CVE Identifier: CVE-2014-0646 Severity Rating: 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C Affected Products: · RSA Access Manager Server...