Mozilla Firefox AudioParamTimeline::AudioNodeInputValue function information disclosure vulnerability

Mozilla Firefox is a web browser/email client released by Mozilla. An information disclosure vulnerability exists in the Mozilla Firefox AudioParamTimeline::AudioNodeInputValue function due to a failure of the AudioParamTimeline::AudioNodeInputValue function to properly compute the ellipse...

PT-2015-5685

Name of the Vulnerable Software and Affected Versions Webshop hun version 1.062S Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters in index.php, specifically the param, center, lap, termid, or nyelv id parameters. Recommendations For...

Webshop Hun 1.062S Cross Site Scripting

Webshop hun v1.062S XSS Cross-site Scripting Security Vulnerabilities Exploit Title: Webshop hun v1.062S /index.php Multiple Parameters XSS Security Vulnerabilities Product: Webshop hun Vendor: Webshop hun Vulnerable Versions: v1.062S Tested Version: v1.062S Advisory Publication: Mar 04, 2015...

XSS vulnerability in login redirect param

Security advisory: XSS vulnerability in login redirect param ScnSocialAuth version 1.15.2 has been released and includes a security for this vulnerability. Fix has been applied in 4a00966 Affected versions All versions below 1.15.2 are affected. dev-master is fixed starting from 4a00966 Exploits...

XSS vulnerability in login redirect param

Security advisory: XSS vulnerability in login redirect param ScnSocialAuth version 1.15.2 has been released and includes a security for this vulnerability. Fix has been applied in https://github.com/SocalNick/ScnSocialAuth/commit/4a00966c41bc37251586d007564c5c891eba3700 Affected versions All...

XSS vulnerability in login redirect param

Security advisory: XSS vulnerability in login redirect param ZfcUser version 1.2.2 has been released and includes a security for this vulnerability. Fix has been applied in @baf0e460 Affected versions All versions below 1.2.2 are affected. dev-master is fixed starting from @2cc167a Exploits Becau...

ASUS-RT-AC66U-acsd-Param

TitleASUS RT-AC66U Remote Root Shell Exploit - acsd param command Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy and Jacob Thompson Security Analsyts @ Independent Security Evaluators Software Vendorhttp://asus.com Exploit/Advisoryhttp://securityevaluators.com,...

PT-2014-8710

Name of the Vulnerable Software and Affected Versions goYWP WebPress version 13.00.06 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected parameters include search param...

get3.adobe.com Cross Site Scripting

Exploit Title: Adobe.com Flashplayer sub-domain Reflected XSS RXSS Date: 08/12/2014 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.adobe.com Version: / Category: Reflected Cross Site Scripting Google dork: Tested on: Adobe.com Flashplayer sub-domain Adobe description :...

HackerOne: Content Spoofing via reports

The reportid param simply returns whatever entered , instead of showing report id's only. This can result in content injection in the reports field. For example check this one : http://goo.gl/py2V8j...

DEBIAN-CVE-2014-3657

The virDomainListPopulate function in conf/domainconf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service deadlock via a NULL value in the second parameter in the virConnectListAllDomains API command...

WordPress Acento Theme (view-pdf.php, file param) - Arbitrary File Download

No description provided by source...

Mulitple WordPress Themes (admin-ajax.php, img param) - Arbitrary File Download

No description provided by source. WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage: http://themeforest.net/item/cuckootap-one-page-parallax-wp-theme-plus-eshop/3512405...

CVE-2014-4516

Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...

Scripts Genie Domain Trader (catalog.php, id param) - SQL Injection Vulnerability

No description provided by source. / / / \ / / / / / / / / / / / // / / / / / / // / // / / / / | // / / / / / // / / / // / /,// /////,// ///// , / // Domain Trader Script, MySQL Injection Vulnerabilities Software Page:...

ASUS RT-AC66U acsd Param - Remote Root Shell Exploit

No description provided by source...

Collabtive 1.0 (manageuser.php, task param) - SQL Injection Vulnerability

No description provided by source. Exploit Title: Collabtive 1.0 SQLi Date: 06/17/2013 Exploit Author: drone @dronesec More information: http://forelsec.blogspot.com/2013/06/collabtive-10-sqli.html Vendor homepage: http://collabtive.o-dyn.de/ Software link:...

MLMAuction Script (gallery.php, id param) - SQL Injection

No description provided by source. | \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || MLMAuction Script, SQL Injection Vulnerabilities Product Page:...

Joomla JV Comment Extension 3.0.2 (index.php, id param) - SQL Injection

No description provided by source...

PT-2014-5946

Name of the Vulnerable Software and Affected Versions BIC Media Widget plugin version 1.0 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the param parameter in the...