Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the pm-dev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

pm-resources.com XSS vulnerability

Open Bug Bounty ID: OBB-131145 Description| Value ---|--- Affected Website:| pm-resources.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

KingCms最新版绕过补丁（版本：9.00.0018）注入一枚

简要描述： KingCms最新版绕过补丁（版本：9.00.0018）注入一枚 详细说明： 写在前面：漏洞存在于用户发送站内信的地方，因此，测试时需要注册一个前台的普通用户。 朋友的公司购买了kingcms的授权，最近kingcms官方给我朋友发来了升级包，升级说明当中说已经解决了已知的安全问题，今天再帮朋友测试下。 自从朋友购买，已经经过了9.00.0015，9.00.0016，9.00.0017，现在更新到了9.00.0018，kingcms服务还不错。9.00.0018的更新时间是2015.07.23，见官网http://www.kingcms.com/download/k9/...

CVE-2015-0711

The hamgr service in the IPv6 Proxy Mobile PM implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and call-processing outage via malformed PM packets, aka Bug ID CSCut94711...

CVE-2015-0711

The hamgr service in the IPv6 Proxy Mobile PM implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and call-processing outage via malformed PM packets, aka Bug ID CSCut94711...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the integrity of protected information

The libcgi-pm-perl package in the Debian GNU/Linux operating system has multiple vulnerabilities that, if exploited, could lead to the compromise of protected information. These vulnerabilities can be exploited remotely...

Apache-James-Server-2.3.2

Software Link: http://ftp.ps.pl/pub/apache/james/server/apache-james-2.3.2.zip Version: Apache James Server 2.3.2 Tested on: Ubuntu, Debian Info: This exploit works on default installation of Apache James Server 2.3.2 Info: Example paths that will automatically execute payload on some action:...

Dexs PM System Wordpress Plugin - Authenticated Persistent XSS (0day)

No description provided by source. =============================================================================== | | / / / / / / // / / -/ - / // / / / / // / ////,//////,// ///, / // team PUBLIC SECURITY ADVISORY | |...

RunCMS <= 1.6.1 (msg_image) SQL Injection Exploit

No description provided by source. !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / /...

woltlab burning board 3.0.x Multiple Vulnerabilities

No description provided by source. +---------------------------------------------------------------------------+ | Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities | +---------------------------------------------------------------------------+ | by Juri Gianni aka yeat -...

openSUSE Security Update : XEN (openSUSE-SU-2012:1572-1)

This security update of XEN fixes various bugs and security issues. - Upstream patch 26088-xend-xml-filesize-check.patch - bnc787163 - CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk XSA 25 CVE-2012-4544-xsa25.patch - bnc779212 - CVE-2012-4411: XEN / qemu: guest...

Session fixation

The GenerateFunction function in bindings/scripts/codegeneratorv8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent function, which allows remote attackers to conduct Universal XSS UXSS attacks via...

CVE-2014-1701

The GenerateFunction function in bindings/scripts/codegeneratorv8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent function, which allows remote attackers to conduct Universal XSS UXSS attacks via...

US Prosecutor drops Criminal charges against Barrett Brown

U.S. Prosecutors decided not to pursue crucial criminal charges against journalist and activist Barrett Brown, and dismiss a majority of charges related to sharing a link to a dump of credit card numbers connected to the breach of intelligence firm Stratfor. Supporters say Brown just copied the...

WordPress Plugin Dexs PM System - (Authenticated) Persistent Cross-Site Scripting

WordPress Plugin Dexs PM System - Authenticated Persistent Cross-Site Scripting =============================================================================== | | / / / / / / // / / -/ - / // / / / / // / ////,//////,// ///, / // team PUBLIC SECURITY ADVISORY | |...

WordPress Dexs PM System Plugin - Authenticated Persistent XSS

Dexs PM System plugin is prone to an authenticated persistent XSS vulnerability that exists because of input validation and output sanitization of the subject paramater. It allows an attacker to potentially hijack session authentication Solution Upgrade the plugin...

Debian: Security Advisory (DSA-2587-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Turkish PM Erdogan’s staff emails hacked and leaked by Syrian Electronic Army Hackers as #OpTurkey

Syrian Electronic army appears to be taking part in ongoing operation against Turkey government website. Hackers collectively called Anonymous and SEA breached into Turkish Ministry of Interior website and the private information of staffers in PM Tayyip Erdogan's office. Hackers claimed that the...

Lan Messenger - sending PM 'UNICODE' Overwrite Buffer Overflow (SEH)

Exploit Title: Lan Messenger Version 1.2 Buffer Overflow vulnerability - UNICODEPOC Date: 09-05-2013 Exploit Author: ariarat Vendor Homepage: http://lmadhavan.com Software Link: http://lmadhavan.com/software/archive/lanmsg12.zip Version: 1.2 & may be old versions! Tested on: Windows 7 & windows X...

[SECURITY] [DSA 2587-1] libcgi-pm-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2587-1 [email protected] http://www.debian.org/security/ December 11, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...