WordPress Contact Form plugin <= 2.7.5 - SQL Injection

No description provided by source. Exploit Title: WordPress Contact Form plugin = 2.7.5 SQL Injection Vulnerability Date: 2011-10-13 Author: Skraps jackie.craig.sparksatlive.com jackie.craig.sparksatgmail.com @skrapsfoo Software Link: http://downloads.wordpress.org/plugin/contact-form-wordpress.z...

LHA 1.x Multiple extract_one Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/10354/info LHA has been reported prone to multiple vulnerabilities that may allow a malicious archive to execute arbitrary code or corrupt arbitrary files when the archive is operated on. These issues are triggered in the...

ECSHOP the presence of a persistent XSS risk-vulnerability warning-the black bar safety net

ECSHOP some places thereXSSthe risk,can get admin cookies. ECSHOP filter do well,but the hundred Secret one sparse..... First,feel free to purchase merchandise, the purchase information,the recipient address or the recipient address is writtenXSScode,orders submitted after the background check...

openSUSE Security Update : lighttpd (openSUSE-SU-2012:0240-1)

This update of lighttpd fixes an out-of-bounds read due to a signedness error which could cause a Denial of Service CVE-2011-4362. Additionally an option was added to honor the server cipher order resolves lighttpd2364. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : xen (openSUSE-SU-2013:1876-1)

Xen was updated to 4.3.1 and also to fix various security issues and bugs : - bnc851749 - Xen service file does not call xend properly xend.service - Add missing requires to pciutils package for xend-tools - bnc851386 - xen: XSA-78: Insufficient TLB flushing in VT-d iommu code - Make -devel packa...

Potential SQL injection in the ORDER implementation of Zend_Db_Select

More info at https://framework.zend.com/security/advisory/ZF2014-04...

Threat Outbreak Alert RuleID10295: Email Messages Distributing Malicious Software on June 11, 2014

Medium Alert ID: 34588 First Published: 2014 June 11 13:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10295 may contain the following files: Name | Siz...

CVE-2014-3956

The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program...

Threat Outbreak Alert RuleID10170: Email Messages Distributing Malicious Software on June 1, 2014

Medium Alert ID: 34499 First Published: 2014 June 2 18:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10170 may contain the following files: Name | Size...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 28, 2014

Medium Alert ID: 34390 First Published: 2014 May 28 16:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment relating to a purchase order payment for the recipient. The email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Purchase Order Confirmation Email Messages on May 27, 2014

Medium Alert ID: 34354 First Published: 2014 May 27 21:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order confirmation notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake New Purchase Order Confirmation Email Messages on May 27, 2014

Medium Alert ID: 34366 First Published: 2014 May 27 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a new purchase order for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Order Invoice Shipping Information Email Messages on May 27, 2014

Medium Alert ID: 34351 First Published: 2014 May 27 13:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipping information invoice for the recipient. The email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Product Order Email Messages on May 15, 2014

Medium Alert ID: 34251 First Published: 2014 May 16 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product list for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on May 15, 2014

Medium Alert ID: 34240 First Published: 2014 May 15 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order request for the recipient. The text in the email message attempts to convince the recipie...

SA-CONTRIB-2014-050 - Commerce Postfinance ePayment - Access Bypass

The Commerce Postfinance ePayment module provides commerce payment methods for the Postfinance e-Payment service provider. The module doesn't sufficiently validate incoming payment notification IPN messages. Sending a specifically crafted IPN message to an affected site allows an attacker to crea...

PHPSHE多处SQL注入漏洞

简要描述： 详细说明： 很早之前就发现了，到现在还没修 PHPSHE商城系统，在用户提交订单时，收获信息多处存在SQL注入，有回显，可直接获取管理员账户信息。 module/index/order.php文件： //@ 订单增加 @// case 'add': $cartinfo = cartinfounserialize$ccartlist; $infolist = $cartinfo'list'; $money = $cartinfo'money'; if isset$ppesubmit //!count$infolist && peerror'购物车商品为空'; $order =...

Threat Outbreak Alert: Fake Order Delivery Report Notification Email Messages on May 6, 2014

Medium Alert ID: 34118 First Published: 2014 May 6 16:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a proof of delivery report notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Online Order Confirmation Email Messages on May 2, 2014

Medium Alert ID: 34043 First Published: 2014 May 3 02:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to notify the recipient of a completed order request. The text in the message instructs the recipient to view the attached fil...

Google Chrome 34.0.1847.131 DLL Hijacking

google chrom latest Version 34.0.1847.131 m 32-bit DLL Order Hijacking Exploit Title: google chrom Version 34.0.1847.131 m 32-bit DLL Order Hijacking Date: 2014/04/25 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage:...