PT-2014-8467

Name of the Vulnerable Software and Affected Versions Drupal Webform module versions 6.x-3.x through 6.x-3.19 Drupal Webform module versions 7.x-3.x through 7.x-3.19 Drupal Webform module versions 7.x-4.x through 7.x-4.0-beta1 Description A cross-site scripting XSS issue allows remote authenticat...

PT-2014-8469

Name of the Vulnerable Software and Affected Versions Drupal Custom Search module versions 6.x-1.x before 6.x-1.12 Drupal Custom Search module versions 7.x-1.x before 7.x-1.14 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with specific permissions to...

CVE-2014-8318: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Webform module 6.x-3.x before 6.x-3.20, 7.x-3.x before 7.x-3.20, and 7.x-4.x before 7.x-4.0-beta2 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a field label title, when two fields hav...

Cross site scripting

Cross-site scripting XSS vulnerability in the Custom Search module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.15 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a taxonomy vocabulary label...

CVE-2014-8745: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Custom Search module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.15 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a taxonomy vocabulary label...

PT-2014-8704

Name of the Vulnerable Software and Affected Versions Drupal Custom Search module versions 6.x-1.x before 6.x-1.13 Drupal Custom Search module versions 7.x-1.x before 7.x-1.15 Description A cross-site scripting XSS issue exists in the Custom Search module for Drupal, allowing remote authenticated...

CVE-2014-7870

Cross-site scripting XSS vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and 7.x-1.x before 7.x-1.14 for Drupal allows remote authenticated users with the "administer custom search" permission to inject arbitrary web script or HTML via the "Label text" field to...

PT-2014-8322

Name of the Vulnerable Software and Affected Versions Drupal Custom Search module versions 6.x-1.x before 6.x-1.12 Drupal Custom Search module versions 7.x-1.x before 7.x-1.14 Description A cross-site scripting XSS issue exists in the Custom Search module for Drupal, allowing remote authenticated...

CVE-2014-7870: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and 7.x-1.x before 7.x-1.14 for Drupal allows remote authenticated users with the "administer custom search" permission to inject arbitrary web script or HTML via the "Label text" field to...

Cisco IOS XR Software Malformed MPLS Packet Denial of Service Vulnerability

A vulnerability in parsing of malformed Multiprotocol Label Switching MPLS packets in Cisco IOS XR Software for Cisco Network Convergence System 6000 Series Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a network processor unit NPU and a line...

Cisco IOS XR MPLS and Network Processor (NP) Chip DoS (Typhoon-based Line Cards)

The remote Cisco device is running a version Cisco IOS XR software that is potentially affected by a denial of service vulnerability related the handling of maliciously crafted MPLS Multiprotocol Label Switching packets routed by a bridge-group virtual interface. Note that this issue only affects...

逐浪cms多处绕过验证导致的安全问题。

简要描述： RT 详细说明： 哎，通过DEMO的测试站点来枚举一下吧 http://demo.zoomla.cn/Admin/I/Shop/Orderlistinfo.aspx?id=9 http://demo.zoomla.cn/Admin/I/Content/ShowContent.aspx?GID=43&modeid=19 http://demo.zoomla.cn/Admin/Template/LabelManage.aspx http://demo.zoomla.cn/Admin/Content/NodeManage.aspx...

CVE-2014-5021

Cross-site scripting XSS vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via an option group label...

UBUNTU-CVE-2014-5021

Cross-site scripting XSS vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via an option group label...

CVE-2014-5021

Cross-site scripting XSS vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via an option group label...

CVE-2014-5021

Cross-site scripting XSS vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via an option group label...

CVE-2014-5021

Removed by vendor...

CVE-2014-5021: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via an option group label...

PT-2014-6253

Name of the Vulnerable Software and Affected Versions Drupal versions 6.x before 6.32 Drupal versions 7.x before 7.29 Description A cross-site scripting XSS issue exists in the Form API, allowing remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script o...

Acoustica 3.32 CD/DVD Label Maker - .m3u PoC

No description provided by source. Exploit Title: Acoustica cd/dvd label maker .m3u PoC Date: April 27,2010 Software Link: http://www.acoustica.com/cd-label-maker/ Version: 3.32 Tested on: Windows XP Sp3/Windows 7 Author: chap0 Email: chap0x90 at gmail dot com Contacted Vendor Apr 19, 2010 Auto...