CVE-2014-1907

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to 1 read arbitrary files via a .. dot dot in the s parameter to ls/rtmplogin.php or 2 delete arbitrary files via a .. dot dot in the s parameter t...

CVE-2014-1906

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 m parameter to lbstatus.php; 2 msg parameter to vcchatlog.php; n parameter to 3 channel.php, ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 m parameter to lbstatus.php; 2 msg parameter to vcchatlog.php; n parameter to 3 channel.php, ...

CVE-2014-1906

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 m parameter to lbstatus.php; 2 msg parameter to vcchatlog.php; n parameter to 3 channel.php, ...

CVE-2014-1907

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to 1 read arbitrary files via a .. dot dot in the s parameter to ls/rtmplogin.php or 2 delete arbitrary files via a .. dot dot in the s parameter t...

CVE-2014-1907

VideoWhisper Live Streaming Integration plugin for WordPress (v4.x prior to 4.29.5) contains directory traversal vulnerabilities (CVE-2014-1907) that allow remote attackers to read arbitrary files via a .. in the s parameter to ls/rtmp_login.php and to delete arbitrary files via a .. in the s par...

CVE-2014-1906

CVE-2014-1906 concerns the VideoWhisper Live Streaming Integration plugin for WordPress. The vulnerability involves multiple cross-site scripting (XSS) flaws in the plugin prior to version 4.29.5, allowing remote attackers to inject arbitrary script or HTML through various parameters (lb_status.p...

PT-2014-4356 · Videowhisper · Videowhisper Live Streaming Integration

Name of the Vulnerable Software and Affected Versions: VideoWhisper Live Streaming Integration plugin versions prior to 4.29.5 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via...

WordPress VideoWhisper Live Streaming Integration任意文件上传漏洞

Bugtraq ID:65866 CVE ID:CVE-2014-1905 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress VideoWhisper Live Streaming Integration所包含的"/wp-content/plugins/videowhisper-live-streaming-integration/ls/vwsnaps hots.php"在上传文件到服务器时没有正确校验恶意文件扩展，可导致远程攻击者上传和执行任意PHP文件。 0 WordPress...

WordPress VideoWhisper Live Streaming Integration多个信息泄漏漏洞

Bugtraq ID:65880 CVE ID:CVE-2014-1908 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress VideoWhisper Live Streaming Integration多个脚本不正确实现错误处理机制，允许远程攻击者利用漏洞提交特制的HTTP GET请求，获取敏感应用信息。 0 WordPress VideoWhisper Live Streaming Integration 4.27.3 厂商补丁： WordPress ----- WordPress...

WordPress VideoWhisper Live Streaming Integration多个跨站脚本漏洞

Bugtraq ID:65876 CVE ID:CVE-2014-1906 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress VideoWhisper Live Streaming Integration存在多个跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 WordPress VideoWhisper Live Streaming Integration 4.27.3 厂商补丁： WordPress ----- WordPre...

nova: Live migration can leak root disk into ephemeral storage

The icreateimagesandbacking aka createimagesandbacking method in libvirt driver in OpenStack Compute Nova Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users vi...

No title provided

OpenStack Compute Nova Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots...

[Microsoft Network Monitor 3.4] Tool to allow capturing and protocol analysis of network traffic

Microsoft's Network Monitor is a tools that allow capturing and protocol analysis of network traffic. Network Monitor 3 is a protocol analyzer. It enables you to capture, to view, and to analyze network data. You can use it to help troubleshoot problems with applications on the network. This...

程式舞曲储存型又一xss（2）附后台getshell

简要描述： 好吧 亲爱的广商我又来了。。发现这个广商态度还是很不错的 ，这样才能让自己的产品更加完善。 详细说明： 一： xss 添加 文章处 直接提交 xss代码 会被过滤。用 火狐live http replay post提交 好吧。。后台审核文章，编辑，看下源码 插进去鸟 二 ：getshell 收到 cookie后 修改基本信息 可以看到 phpinfo执行了 https://images.seebug.org/upload/201403/032006511cd14c570f32f55700c5aea2f2cc...

Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4

Document Title: =============== Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1220 View: http://www.youtube.com/watch?v=QnfWpuVk-jo Release Date: ============= 2014-03-04 Vulnerability Laboratory ID VL-ID:...

ClickDesk 4.3 Cross Site Scripting

ClickDesk Multiple Persistent XSS Details ======================================================================================== Product: ClickDesk a cross platform live chat and support plugin Security-Risk: High Remote-Exploit: yes Vendor-URL: https://www.clickdesk.com/ Advisory-Status:...

Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4

Document Title: =============== Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1220 View: http://www.youtube.com/watch?v=QnfWpuVk-jo Release Date: ============= 2014-03-04 Vulnerability Laboratory ID VL-ID:...

WordPress VideoWhisper Live Streaming Integration多个目录遍历漏洞

BUGTRAQ ID: 65877 CVECAN ID: CVE-2014-1907 WordPress VideoWhisper Live Streaming Integration软件可以将视频广播功能添加到WordPress站点，也可将实时视频流添加到博客页。 VideoWhisper Live Streaming Integration 4.27.3及其他版本没有有效过滤脚本"/wp-content/plugins/videowhisper-live-streaming-integration/ls/rtmplog in.php"内的"s" HTTP...

MSN Messenger UIAutomation ActiveX Control Information Disclosure (MS08-050) - Ver2 (CVE-2008-0082)

Windows Messenger, MSN Messenger, and Windows Live Messenger are popular instant messaging clients for Microsoft Windows. An information disclosure vulnerability exists in Windows Messenger, MSN Messenger, and Windows Live Messenger. The vulnerability is caused by an ActiveX control that is marke...