iptables-persistent '/etc/iptables' local information disclosure vulnerability

iptables-persistent is an init.d script used to make iptables rules restart continuously. A security vulnerability exists in iptables-persistent, which allows local attackers to exploit the vulnerability to obtain sensitive information...

SlemBunk Part II: Prolonged Attack Chain and Better-Organized Campaign

Introduction Our follow-up investigation of a nasty Android banking malware we identified at the tail end of last year has not only revealed that the trojan is more persistent than we initially realized – thus making for a much more dangerous threat – but that it is also being used as part of an...

Simple PHP Polling System - Multiple Vulnerabilities

Exploit Title : Multiple Vulnerabilities in Simple PHP Polling System. Author : WICS Date : 05-Jan-2016 Software Link : http://sourceforge.net/projects/pollingsystem/ Overview : Simple PHP Polling System helps organizations to make polls of different types of positions with a number of candidates...

PhpSocial 2.0.0304_20222226 Cross Site Scripting / Open Redirect

Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: XSS / Open Redirect Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to publi...

DELL Scrutinizer 12.0.3 Cross Site Scripting

Document Title: =============== DELL Scrutinizer v12.0.3 - Persistent Software Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1360 Tracking ID: 15943 Release Date: ============= 2015-12-18 Vulnerability Laboratory ID VL-ID:...

Lithium Forum Cross Site Scripting

Document Title: =============== Lithium Forum - previewImages Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1520 Release Date: ============= 2015-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 152...

WordPress Content Text Slider On Post 6.8 Cross Site Scripting

Document Title: =============== Wordpress Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...

DELL Scrutinizer v12.0.3 - Persistent Software Vulnerability

Document Title: =============== DELL Scrutinizer v12.0.3 - Persistent Software Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1360 Tracking ID: 15943 Release Date: ============= 2015-12-18 Vulnerability Laboratory ID VL-ID:...

DELL Scrutinizer v12.0.3 - Persistent Software Vulnerability

Document Title: =============== DELL Scrutinizer v12.0.3 - Persistent Software Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1360 Tracking ID: 15943 Release Date: ============= 2015-12-18 Vulnerability Laboratory ID VL-ID:...

DELL Scrutinizer v12 - Persistent Software Vulnerability

Document Title: =============== DELL Scrutinizer v12 - Persistent Software Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1689 Video: https://www.youtube.com/watch?v=fcVox20f7ZI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1360 Release Dat...

DELL Scrutinizer v12 - Persistent Software Vulnerability

Document Title: =============== DELL Scrutinizer v12 - Persistent Software Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1689 Video: https://www.youtube.com/watch?v=fcVox20f7ZI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1360 Release Dat...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...

Secure Data Space 3.1.1-2 Cross Site Scripting Vulnerability

Secure Data Space version 3.1.1-2 suffers from a cross site scripting vulnerability. Secure Data Space 3.1.1-2 Cross Site Scripting Vulnerability 1. DETAILS - ---------- Product: SECURE DATA SPACE Vendor URL: www.ssp-europe.eu Type: Cross-site ScriptingCWE-79 Date found: 2015-09-30 Date published...

FreeBSD : redmine -- multiple vulnerabilities (0e0385d1-9ed5-11e5-8f5c-002590263bf5)

Redmine reports : Mass-assignment vulnerability that would allow an attacker to bypass part of the security checks. Persistent XSS vulnerability %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML databa...

Unspecified Vulnerability in Sensio Labs Symfony

Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A security vulnerability exists in the...

WP Content Text Slider on Post 6.8 - Persistent Vulnerability

Document Title: =============== WP Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...

WP Content Text Slider on Post 6.8 - Persistent Vulnerability

Document Title: =============== WP Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...

IP.Board 4.1.4.x - Persistent 跨站脚本 漏洞

No description provided by source...

WordPress Users Ultra Plugin 1.5.50 - Persistent 跨站脚本

No description provided by source...

WordPress Plugin Users Ultra 1.5.50 - Persistent Cross-Site Scripting

Exploit Title: WordPress Users Ultra Plugin Persistence XSS Discovery Date: 2015/10/20 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link: https://wordpress.org/plugins/users-ultra/...