My Page Order <= 4.3 - Authenticated Cross-Site Scripting (XSS)

The my-page-order WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

My Category Order <= 4.3 - Authenticated Cross-Site Scripting (XSS)

The my-category-order WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

WordPress My Page Order Plugin <= 4.3 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameters are "pages" and "hdnParentID". Solution Upgrade this plugin...

WordPress My Page Order Plugin <= 4.3 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameters are "pages" and "hdnParentID". Solution Upgrade this plugin...

Threat Outbreak Alert RuleID17180: Email Messages Distributing Malicious Software on August 10, 2015

Medium Alert ID: 40382 First Published: 2015 August 10 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17180 may contain the following files: Name |...

Threat Outbreak Alert RuleID16981: Email Messages Distributing Malicious Software on August 05, 2015

Medium Alert ID: 40319 First Published: 2015 August 5 20:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16981 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID16955: Email Messages Distributing Malicious Software on October 12, 2015

Medium Alert ID: 40155 First Published: 2015 July 27 22:33 GMT Last Updated: 2015 October 12 18:14 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16955 and...

金蝶shop商城后台弱口令泄露大量商家/会员信息/订单/网站信息

简要描述： 之前报的洞走了大厂商竟然就给了1rank，桑心啊，深夜挖洞挺不容易的，求给良心rank。。。 详细说明： 直接上图证明吧，出现问题的域名。 http://k3shop.k3cloud.kingdee.com/ 大致的扫了下网站目录，找到后台可直接登录admin用户！ 泄露的网站信息 http://k3shop.k3cloud.kingdee.com/sitemap.xml 漏洞证明： 订单信息 商家信息 会员信息...

WordPress Floating Social Bar Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. A cross-site scripting vulnerability exists in the 'saveorder' function in the class-floating-social-bar.php script in versions of the...

Threat Outbreak Alert RuleID16670: Email Messages Distributing Malicious Software on July 15, 2015

Medium Alert ID: 39961 First Published: 2015 July 16 13:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16670 may contain the following files: Name | Siz...

ZenPhoto 1.4.8 - Multiple Vulnerabilities

ZenPhoto version 1.4.8 suffers from cross site scripting, remote SQL injection, and path traversal vulnerabilities. Vulnerability: SQL Injection, Reflected XSS, Path Traversal Affected Software: ZenPhoto http://www.zenphoto.org/ Affected Version: 1.4.8 probably also prior versions Patched Version...

Threat Outbreak Alert RuleID16511: Email Messages Distributing Malicious Software on July 7, 2015

Medium Alert ID: 39799 First Published: 2015 July 8 17:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16511 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID16483: Email Messages Distributing Malicious Software on September 30, 2015

Medium Alert ID: 39791 First Published: 2015 July 8 17:42 GMT Last Updated: 2015 October 1 15:17 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16483 and...

Threat Outbreak Alert RuleID15980: Email Messages Distributing Malicious Software on October 7, 2015

Medium Alert ID: 39551 First Published: 2015 June 30 13:19 GMT Last Updated: 2015 October 7 19:54 GMT Version: 14 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15980 and...

OracleVM 3.3 : nss (OVMSA-2015-0073)

The remote OracleVM system is missing necessary patches to address critical security updates : nss - Added nss-vendor.patch to change vendor - Additional NULL initialization. - Updated the patch to keep old cipher suite order - Resolves: Bug 1224449 - Rebase to nss-3.19.1 - Resolves: Bug 1224449 ...

Threat Outbreak Alert RuleID15850: Email Messages Distributing Malicious Software on June 10, 2015

Medium Alert ID: 39287 First Published: 2015 June 10 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15850 may contain the following files: Name | Siz...

CVE-2015-4024

Algorithmic complexity vulnerability in the multipartbufferheaders function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service CPU consumption via crafted form data that triggers an improper order-of-growth...

SQL injection vulnerability in the id parameter in Ticketmaster ERP web-based ticketing system/Sales/meb_his.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

Cross site scripting

Cross-site scripting XSS vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Sterling Field Sales SFS 9.0 before HF7 in IBM Sterling Selling and Fulfillment Suite allows remote attackers to inject arbitrary web script or...

CVE-2015-1911

CVE-2015-1911 is an XSS vulnerability in IBM Sterling Selling and Fulfillment Suite components: Sterling Order Management 8.5 (before HF113), Sterling Selling and Fulfillment Foundation 9.0.0 (before FP92), and Sterling Field Sales 9.0 (before HF7). The IBM bulletin (IBM Security Bulletin) attrib...