PT-2016-4025

Name of the Vulnerable Software and Affected Versions Apache Solr versions prior to 5.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Admin UI. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via crafted fields that are...

CVE-2015-8795: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled during the rendering of the 1 Analysis page, related to webapp/web/js/scripts/analysis.js or 2...

PT-2016-4026

Name of the Vulnerable Software and Affected Versions Apache Solr versions prior to 5.3 Description A cross-site scripting XSS issue exists in the Admin UI, specifically in the webapp/web/js/scripts/schema-browser.js file, allowing remote attackers to inject arbitrary web script or HTML via a...

Zomato: Persistent input validation mail encoding vulnerability in the "just followed you" email notification.

This vulnerability allows an attacker to add custom html/js code to emails that are then sent to other users of zomato.com. This vulnerability can be reproduced by any normal user ie. unprivileged accounts by editing their profile's "your full name" field with malicious code. This is not possible...

Sola Support Ticket <= 3.12 - XSS & Configuration Change

Any logged in user with any role and access to wp-admin in any way can update plugin settings including allowing HTML to be parsed. One can also change any notification messages to include JS which then can be used to obtain information by forgery. PoC Make POST request to /wp-admin with paramete...

TrendMicro node.js http server arbitrary command execution vulnerability

Trend Micro is a global leader in network security software and services, leading the trend from desktop antivirus to network server and gateway antivirus with excellent foresight and technological innovation capabilities, and proving Trend Micro's foresight and leadership to the industry with it...

WordPress JS External Link Info <= 1.21 - Open Redirect vulnerability

WordPress JS External Link Info is vulnerable to open redirect vulnerability. Solution This plugin is cloded, you should find an alternative...

Google Chrome V8 Denial of Service Vulnerability (CNVD-2015-08180)

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. A security vulnerability exists in the 'BasicJsonStringifier::: SerializeJSArray' function in the json-stringifier.h file in the JSON stringifier of Google V8...

CVE-2015-6771

js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via crafted JavaScript code...

CVE-2015-6771: Improper Restriction of Operations within the Bounds of a Memory Buffer

js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via crafted JavaScript code...

Wordpress Js Support Ticket File Upload Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress "Js Support Ticket" File Upload Bypass Extensions Google Dork: inurl:/js-support-ticket-controlpanel/ Date: 3-12-2015 Exploit Author: Mgm-Eg Vendor Homepage: http://joomsky.com/products/js-supprot-ticket-wp.html Versio...

v8: unspecified out-of-bounds access vulnerability

The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have...

WordPress Websimon Tables Plugin <= 1.3.4 - Reflected Cross Site Scripting

Because of this vulnerability, authenticated administrators can inject HTML or JS code. Solution Update the plugin...

WordPress Social Share Button Plugin <= 2.1 - Stored Cross Site Scripting (XSS)

Because of this vulnerability, authenticated administrators can store HTML or JS code. Solution Update the plugin...

WordPress SEO Rank Reporter Plugin <= 2.2.2 - Cross Site Scripting (XSS)

Because of this vulnerability, authenticated administrators can inject html or JS code. Vulnerable parameters are "keyworditem" and "entryurl". Solution Update the plugin...

WordPress GoCodes Plugin <= 1.3.5 - Multiple Vulnerabilities

This plugin is prone to cross site scripting vulnerability, that allows authenticated users to inject HTML and JS code. And also there is an SQL injection vulnerability, that allows authenticated users execute arbitrary SQL commands. Solution Update the plugin...

WordPress My Link Order Plugin <= 4.3 - Cross Site Scripting (XSS)

Because of this XSS vulnerability, authenticated users can inject HTML or JS code. Vulnerable parameters are "cats" and "hdnCatID". Solution Update the plugin...

WordPress My Link Order Plugin <= 4.3 - Cross Site Scripting (XSS)

Because of this XSS vulnerability, authenticated users can inject HTML or JS code. Vulnerable parameters are "cats" and "hdnCatID". Solution Update the plugin...

Updated uglify-js packages fix security vulnerability

The UglifyJS node module has a problem where the combination of De Morgan's Law and non-boolean values can lead to a case where code is incorrectly minified, which can lead to possibly malicious minified JS code...

CVE-2015-8105

Cross-site scripting XSS vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload...