125 matches found
The vulnerability of the Hex package manager, related to insufficient validation of input data, allows for the execution of arbitrary code.
The vulnerability of the package manager Hex is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading packages from a malicious mirror site...
CVE-2009-0938
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service exit node crash via "malformed input."...
CVE-2009-0937
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors...
CVE-2018-0501
The mirror:// method implementation in Advanced Package Tool APT 1.6.x before 1.6.4 and 1.7.x before 1.7.0alpha3 mishandles gpg signature verification for the InRelease file of a fallback mirror, aka mirrorfail...
mirrors-crossing.gamerch.com XSS vulnerability
Open Bug Bounty ID: OBB-650852 Description| Value ---|--- Affected Website:| mirrors-crossing.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
UBUNTU-CVE-2017-9269
In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories with potential malicious content...
DragonByte Technologies vBDownloads for vBulletin Cross-Site Scripting Vulnerability
DragonByte Technologies vBDownloads for vBulletin is a download module for vBulletin open source commercial web forum program from DragonByte Technologies, Scotland. A cross-site scripting vulnerability exists in the downloads/actions/editdownload.php file in DragonByte Technologies vBDownloads f...
Cross site scripting
Cross-site scripting XSS vulnerability in downloads/actions/editdownload.php in the DragonByte Technologies vBDownloads module 1.3.2 and earlier for vBulletin allows remote attackers to inject arbitrary web script or HTML via the mirrors parameter...
UBUNTU-CVE-2017-7480
rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution...
simplyamishindy.com XSS vulnerability
Vulnerable URL: http://www.simplyamishindy.com/furniture/bedroom/mirrors/index.cfm?pageview=18=1...
MediaCoder 0.8.48.5888 - Local Buffer Overflow (SEH)
MediaCoder 0.8.48.5888 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title : MediaCoder 0.8.48.5888 Local Buffer Overflow SEH CVE : CVE-2017-8869 Exploit Author : Muhann4d @0xSecured Vendor Homepage : http://www.mediacoderhq.com Vulnerable Software:...
Kali Linux 2016.2 - The Best Penetration Testing Distribution
This release brings a whole bunch of interesting news and updates into the world of Kali. New KDE, MATE, LXDE, e17, and Xfce Builds Although users are able to build and customize their Kali Linux ISOs however they wish, we often hear people comment about how they would love to see Kali with...
[SECURITY] Fedora 23 Update: mirrormanager-1.4.4-5.fc23
MirrorManager tracks all the content provided on a master mirror server, and that of all public and private mirrors of that content. This package contains the application server, database schema and hosted tools...
Netwin SurgeFTP 23d6 Cross Site Scripting
Exploit Netwin SurgeFTP Sever Stored Cross Site Scripting Vulnerabilities Date: 11/18/2015 Exploit Author: UnN0n Vendor: NetWin Software Link: http://netwinsite.com/cgi-bin/keycgi.exe?cmd=download&product=surgeftp Version: 23d6 Tested on: Windows 7 x6464bit Info Surgeftp web-interface suffers wit...
Netwin SurgeFTP Sever 23d6 - Persistent Cross-Site Scripting
Netwin SurgeFTP Sever 23d6 - Persistent Cross-Site Scripting Exploit Netwin SurgeFTP Sever Stored Cross Site Scripting Vulnerabilities Date: 11/18/2015 Exploit Author: UnN0n Vendor: NetWin Software Link: http://netwinsite.com/cgi-bin/keycgi.exe?cmd=download&product=surgeftp Version: 23d6 Tested o...
Netwin SurgeFTP Sever 23d6 - Persistent Cross-Site Scripting
Exploit Netwin SurgeFTP Sever Stored Cross Site Scripting Vulnerabilities Date: 11/18/2015 Exploit Author: UnN0n Vendor: NetWin Software Link: http://netwinsite.com/cgi-bin/keycgi.exe?cmd=download&product=surgeftp Version: 23d6 Tested on: Windows 7 x6464bit Info Surgeftp web-interface suffers wit...
UBUNTU-CVE-2015-1337
Simple Streams simplestreams does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 aka Forbidden response...
Phabricator: Phabricator Diffusion application allows unauthorized users to delete mirrors
I have succesfully reproduced this issue following these steps: - Creating a repository with an administrator user - Checking that my "guest" user hasn't access to the newly created repository: http://phabricator/diffusion/TEST/edit/ - However, the guest user does have access to delete the mirror...
NASA website Hacked; Protest by Hackers against US action on Syria and Brazil Spying
Earlier reports based on Snowden's documents revealed the existence of the NSA's PRISM program, and indicate that the National Security Agency spied on Brazilians. On other End, President Obama said that the Syrian government used chemical weapons on its citizens and The United States may have to...
