Cpanel PHP - Restriction Bypass Vulnerability (0day)

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 1 0day | | | | || / \ || | | | || ||// \/|/ ''' abysssec Inc Public Advisory 1 Advisory information Title : Cpanel PHP Restriction Bypass Vulnerability Version : = 11.25...

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

Mailspect Control Panel version 4.0.5 suffers from remote code execution, arbitrary file read, and cross site scripting vulnerabilities. Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service...

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service Introduction: ======================== Mailspect is the email security and archiving brand of RAE Internet Inc., Tarrytown, New York. The Mailspect...

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities. Webapps exploit for cgi platform Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service Introduction: ======================== Mailspect is the...

苹果CMS绕过检测SQL注入，第四发（绕过360防护）

简要描述： 原来我之前说的那些都成废话了，厂商没有看懂，囧～，看回复把过错归结于360safe3.php，不再发了，总结下原因。 详细说明： index.php: $m = be'get','m'; ifstrpos$m,'.' $m = substr$m,0,strpos$m,'.'; $par = explode'-',$m; $parlen = count$par; $ac = $par0; ifempty$ac $ac='vod'; $method='index'; $colnum = array"id","pg","yaer","typeid","classid";...

ansible -- remote code execution vulnerability

Ansible, Inc. reports: Incomplete Fix Remote Code Execution Vulnerability - Fixed in Ansible 1.6.4...

JVN#80006084: Web Kyukincho vulnerable to cross-site scripting

Web Kyukincho provided by Intercom, Inc. is a software that digitizes and distributes a pay statement and others. Web Kyukincho contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed in the user's web browser. Solution Update the Software Update to the latest...

Paypal Bug Bounty #36 - SecurityKey Card Vulnerability

Document Title: =============== Paypal Bug Bounty 36 - SecurityKey Card Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=834 Release Date: ============= 2014-06-17 Vulnerability Laboratory ID VL-ID: ==================================== 834...

CVE-2014-4035

Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

Threat Outbreak Alert RuleID10222: Email Messages Distributing Malicious Software on June 4, 2014

Medium Alert ID: 34541 First Published: 2014 June 4 19:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10222 may contain the following files: Name | Size...

PayPal Inc BB #74 - Persistent Core Backend Vulnerability

Document Title: =============== PayPal Inc BB 74 - Persistent Core Backend Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1278 PayPal Inc Security UID: cDc49dT Vulnerability Magazine Article:...

PayPal Inc BB #74 - Persistent Core Backend Vulnerability

Document Title: =============== PayPal Inc BB 74 - Persistent Core Backend Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1278 PayPal Inc Security UID: cDc49dT Vulnerability Magazine Article:...

iScan Online Mobile 2.0.1 Command Injection

Document Title: =============== iScan Online Mobile 2.0.1 iOS - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1271 Release Date: ============= 2014-06-02 Vulnerability Laboratory ID VL-ID: ==================================...

Adobe ColdFusion HTTP Response Splitting (APSB12-15) (credentialed check)

The version of Adobe ColdFusion running on the remote host is affected by an HTTP response splitting vulnerability. The coldfusion.filter.ComponentFilter class does not properly sanitize input used in the Location header of an HTTP response. A remote attacker could exploit this by tricking a user...

CVE-2014-1613

Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized object in the dcpasswd cookie to a password-protected page, which is not properly handled by 1 inc/public/lib.urlhandlers.php or 2 plugins/pages/public.php...

Default credentials

Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized object in the dcpasswd cookie to a password-protected page, which is not properly handled by 1 inc/public/lib.urlhandlers.php or 2 plugins/pages/public.php...

[CVE-2014-0072] Apache Cordova File-Transfer insecure defaults

CVE-2014-0072: Apache Cordova File-Transfer insecure defaults Severity: Important Vendor: The Apache Software Foundation Versions Affected: Cordova File-Transfer iOS plugin from Cordova versions 2.4.0 to 2.9.0 Cordova File-Transfer iOS standalone plugin org.apache.cordova.file-transfer versions...

[CVE-2014-0072] Apache Cordova File-Transfer insecure defaults

CVE-2014-0073: Apache Cordova In-App-Browser privilege escalation Severity: Important Vendor: The Apache Software Foundation Versions Affected: Cordova In-App-Browser iOS plugin from Cordova versions 2.6.0 to 2.9.0 Cordova In-App-Browser iOS standalone plugin org.apache.cordova.inappbrowser...

JVN#10319260: Cybozu Remote Service Manager vulnerable to denial-of-service (DoS)

Remote Service Manager provided by Cybozu,Inc. is a software to access on-premise systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager contains a denial-of-service DoS vulnerability. Impact An attacker may cause a denial-of-service on a server that is installed Remo...

JVN#00058727: Cybozu Remote Service Manager vulnerable to session fixation

Remote Service Manager provided by Cybozu,Inc. is a software to access on-premise systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager contains a session fixation vulnerability. Impact A remote, unauthenticated attacker may impersonate a registered user. As a result...