Oracle Java SE 7 < Update 77 Multiple Vulnerabilities

Binary data 8749.prm...

Oracle Java SE 8 < Update 41 Multiple Vulnerabilities

Binary data 8748.prm...

Oracle Java SE 5 < Update 82 Multiple Vulnerabilities

Binary data 8751.prm...

CVE-2014-8752

Multiple cross-site scripting XSS vulnerabilities in view.php in JCE-Tech PHP Video Script aka Video Niche Script 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 video or 2 title parameter...

CVE-2014-8752

CVE-2014-8752 affects JCE-Tech “Video Niche Script” v4.0. The vulnerable component is view.php, with XSS via the (1) video or (2) title parameter, allowing remote attackers to inject arbitrary script/HTML. Root cause is cross-site scripting in the web application. Documented impact is general inp...

CVE-2014-8752

Multiple cross-site scripting XSS vulnerabilities in view.php in JCE-Tech PHP Video Script aka Video Niche Script 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 video or 2 title parameter...

CVE-2014-8752: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in view.php in JCE-Tech PHP Video Script aka Video Niche Script 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 video or 2 title parameter...

JCE-Tech 4.0 Cross Site Scripting

CVE-2014-8752 JCE-Tech "Video Niche Script" XSS Cross-Site Scripting Security Vulnerability Exploit Title: JCE-Tech "Video Niche Script" /view.php Multiple Parameters XSS Product: "Video Niche Script" Vendor: JCE-Tech Vulnerable Versions: 4.0 Tested Version: 4.0 Advisory Publication: Nov 18, 2014...

Joomla JCE Component (com_jce) Blind SQL Injection Vulnerability

No description provided by source...

JCE Joomla Extension <= 2.0.10 - Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: JCE Joomla Extension =2.0.10 Multiple Vulnerabilities Vendor: www.joomlacontenteditor.net Exploit: Available Vulnerable Version: 2.0.10 Image Manager 1.5.7.13, Media Manager 1.5.6.3, Template Manager 1.5.5...

JDK: Vulnerability in the IBMSecureRandom implementation of the IBMJCE and IBMSecureRandom cryptographic providers

The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier f...

Joomla Content Editor Plugin JCE Shell Upload Vulnerability

The vulnerability that allows the invasion of the site is in imgManager, a module extension JCE, which is The latest versions of JCE http://www.joomlacontenteditor.net are available on site, and the problem has been fixed since version 3.1a text editor made ​​for Joomla. This is private exploit...

OWASP ESAPI Security Advisory: MAC Bypass in ESAPI Symmetric Encryption

OWASP ESAPI for Java Security Advisory 1 The OWASP Foundation MAC Bypass in ESAPI Symmetric Encryption Summary ======= Category: Symmetric cryptography Module: ESAPI Encryptor interface Announced: 2013-08-23 via ESAPI-Dev mailing list...

Joomla JCE 2.0.10 Shell Upload Exploit

After release of vendor supplied patch for JCE's vulnerabilities, AmnPardaz is going to submit related POC for this issue in Perl and PHP after one month for educational purposes. After release of vendor supplied patch for JCE's vulnerabilities, AmnPardaz is going to submit related POC for this...

Joomla Component com_jce remote Code Injecion / Execution Exploit (perl)

JCE component for Joomla! could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions by the file.php script. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious PHP...

CVE-2011-5134

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: so...

Unrestricted file upload

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: so...

CVE-2011-5134

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: so...

CVE-2011-5134

CVE-2011-5134 describes an unrestricted file upload vulnerability in the Joomla! JCE editor component (editor/extensions/browser/file.php) prior to version 2.0.18. The issue allows remote authenticated users with author privileges to upload a file with a double extension (e.g., .php.gif) and ther...

CVE-2011-5134: Undefined Security Weakness

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: so...