CVE-2014-8793

Cross-site scripting XSS vulnerability in lib/max/Admin/UI/Field/PublisherIdField.php in Revive Adserver before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via the refreshpage parameter to www/admin/report-generate.php...

OracleVM 3.0 : xen (OVMSA-2012-0020)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86-64: detect processors subject to AMD erratum 121 and refuse to bootCVE-2006-0744 - guest denial of service on syscall/sysenter exception generation CVE-2012-0217 - Remove unnecessary balloon retri...

IL and CSRF vulnerabilities in D-Link DAP-1360

Hello 3APA3A! There are Information Leakage and Cross-Site Request Forgery vulnerabilities in D-Link DAP-1360 Wi-Fi Access Point and Router. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DAP-1360, Firmware 1.0.0. This model with other...

PT-2014-8484

Name of the Vulnerable Software and Affected Versions CookieViz affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote web servers to inject arbitrary web script or HTML via the max date parameter in the json.php file. Recommendations As a temporary...

wireshark security update

1.0.15-7.0.1.el5 - Added oracle-ocfs2-network.patch - increase max packet size to 65536 Herbert van den Bergh orabug 13542633 1.0.15-7 - security patches - Resolves: CVE-2014-6421 CVE-2014-6423 CVE-2014-6425 CVE-2014-6428 CVE-2014-6429...

UBUNTU-CVE-2014-7960

OpenStack Object Storage Swift before 2.2.0 allows remote authenticated users to bypass the maxmetacount and other metadata constraints via multiple crafted requests which exceed the limit when combined...

Cross site scripting

Cross-site scripting XSS vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter in a button action on the maxbuttons-controller page to wp-admin/admin.php, related to the button creation pa...

CVE-2014-7181

Cross-site scripting XSS vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter in a button action on the maxbuttons-controller page to wp-admin/admin.php, related to the button creation pa...

CVE-2014-7181

CVE-2014-7181 concerns the WordPress plugin MaxButtons (MaxButtons WordPress plugin,

CVE-2014-7181

Cross-site scripting XSS vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter in a button action on the maxbuttons-controller page to wp-admin/admin.php, related to the button creation pa...

Reflected Cross-Site Scripting (XSS) in MaxButtons WordPress Plugin

Advisory ID: HTB23237 Product: MaxButtons WordPress plugin Vendor: Max Foundry Vulnerable Versions: 1.26.0 and probably prior Tested Version: 1.26.0 Advisory Publication: September 24, 2014 without technical details Vendor Notification: September 24, 2014 Vendor Patch: October 2, 2014 Public...

CVE-2014-6826

The CVE-2014-6826 entry affects the Android app Tic-Tac To The MAX FREE (package com.tothemax) version 1.2, which does not verify X.509 certificates from SSL servers. Root cause: improper TLS certificate validation, enabling a man-in-the-middle to spoof servers and access sensitive information vi...

PT-2014-7503

Name of the Vulnerable Software and Affected Versions Tic-Tac To The MAX FREE aka com.tothemax version 1.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates fr...

CVE-2014-6826: Undefined Security Weakness

The Tic-Tac To The MAX FREE aka com.tothemax application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

qemu: virtio-net: out-of-bounds buffer write on invalid state load

The virtionetload function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors in which the value of currqueues is greater than maxqueues, which triggers an out-of-bounds write...

WordPress Plugin Max Banner Ads XSS Vulnerablity

Exploit for php platform in category web applications Exploit Title : WordPress Plugin Max Banner Ads XSS Vulnerablity Exploit Author : NULLPointer Date : 18/09/2014 Vendor Homepage : http://www.maxblogpress.com/plugins/mba/ Version: 1.9 Google Dork : inurl:/wp-content/plugins/max-banner-ads/...

Uploader & Downloader 3.0 (id_user) Remote SQL Injection Vulnerability

No description provided by source. uploader&downloader v3 Remote SQL Injection Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1892uploader-30.zip Found By: the master exploit:...

Vz (Adp) Forum 2.0.3 - Remote Password Disclosure Vulnerablity

No description provided by source. SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC:...

J-OWAMP Web Interface <= 2.1b (link) Remote File Include Exploit

No description provided by source. !/usr/bin/perl Jowamp WebInterface v 2.1 Remote File Inclusion Vulnerablity Vulnerability found & Exploit coded By Dr Max Virus Download:http://www.av.it.pt/jowamp/indexfiles/JOWAMPWebInterfaceversion21.zip User Must Be Logged In! In a web browser open the page...

Left 4 Dead Stats 1.1 - SQL Injection Vulnerability

---------------------------------- Left 4 Dead Stats SQL Injection Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Google Dork: In your dreams, script kiddies. VULNERABILITY DESCRIPTION: Left 4 Dead Stats suffers from a remote SQL...