Moderate: Red Hat Security Advisory: Red Hat Ceph Storage 1.3.1 security, bug fix, and enhancement update

Red Hat Ceph Storage 1.3.1 that fixes one security issue, multiple bugs, and adds various enhancements is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

DEBIAN-CVE-2015-5734

Cross-site scripting XSS vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string...

CVE-2015-5734

Cross-site scripting XSS vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string...

CVE-2015-5734

Cross-site scripting XSS vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string...

CVE-2015-5734

Cross-site scripting XSS vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string...

CVE-2015-5734

Cross-site scripting XSS vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string...

CVE-2015-5734

WordPress 4.2.4 patch fixes CVE-2015-5734: XSS in the legacy theme preview (wp-includes/theme.php) that allowed remote injection via a crafted string. Affected: WordPress prior to 4.2.4. Impact noted as cross-site scripting; remediation is upgrading to WordPress 4.2.4 (security release). Exploita...

CVE-2015-5734: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string...

xpshop网店系统sql注入(demo演示)

简要描述： 详细说明： 漏洞位置:xpshop.webui.MyRefund protected void PageLoadobject sender, EventArgs e if Utils.requestbase.Request.QueryString"type" && Utils.requestbase.Request.QueryString"Action" string text = base.Request.QueryString"Action"; if text != null if !text == "GetImg" if text == "GetPackageGID"...

Apple qlmanage - SceneKit::daeElement::setElementName Heap Overflow

Apple qlmanage - SceneKit::daeElement::setElementName Heap Overflow Source: https://code.google.com/p/google-security-research/issues/detail?id=467 There is a heap overflow in daeElement::setElementName. The vulnerable method uses a fixed size 128 bytes heap-allocated buffer to copy the name of a...

Apple qlmanage - SceneKit::daeElement::setElementName Heap Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=467 There is a heap overflow in daeElement::setElementName. The vulnerable method uses a fixed size 128 bytes heap-allocated buffer to copy the name of an arbitrary element. By setting the name of the element to something...

WordPress Landing Pages 1.8.4 Cross Site Scripting ( CVE-2015-4065 )

插件: https://downloads.wordpress.org/plugin/landing-pages.1.8.4.zip 漏洞文件位置在 shared/shortcodes/inbound-shortcodes.php Line 761 preview.php?sc=&post=' width="285" scrollbar='true' frameborder="0" id="inbound-shortcodes-preview" 从上述文件可以看到 GET 方式传过来的参数 post 直接输出到 html 中造成了XSS 触发 url 如下...

PT-2015-2110

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to insufficient access control in the SpringBoard component of the iOS operating system. This allows a local attacker to bypass the lock-screen preview-disabled setting and reply t...

CVE-2015-5861: Improper Access Control

SpringBoard in Apple iOS before 9 allows physically proximate attackers to bypass a lock-screen preview-disabled setting, and reply to an audio message, via unspecified vectors...

[SECURITY] [DLA 294-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb6u7 CVE ID : CVE-2015-2213 CVE-2015-5622 CVE-2015-5731 CVE-2015-5732 CVE-2015-5734 Several vulnerabilities have been fixed in Wordpress, the popular blogging engine. CVE-2015-2213 SQL Injection allowed a remote attacker to compromise the site...

foreman: cross-site scripting (XSS) flaw in template preview screen

A cross-site scripting XSS flaw was found in Foreman's template preview screen. A remote attacker could use this flaw to perform cross-site scripting attacks by tricking a user into viewing a malicious template. Note that templates are commonly shared among users...

foreman: cross-site scripting (XSS) flaw in template preview screen

A cross-site scripting XSS flaw was found in Foreman's template preview screen. A remote attacker could use this flaw to perform cross-site scripting attacks by tricking a user into viewing a malicious template. Note that templates are commonly shared among users...

PT-2015-7057

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.2.4 Description A cross-site scripting XSS issue exists in the legacy theme preview implementation, allowing remote attackers to inject arbitrary web script or HTML via a crafted string. Recommendations For versio...

Unspecified vulnerability in WordPress legacy theme

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. WordPress has a legacy theme preview unspecified vulnerability, no detailed vulnerability details are currently available...

Microsoft released an emergency update: serious remote code execution vulnerability, affecting all versions of Windows-vulnerability warning-the black bar safety net

! Microsoft today released an emergency update that fixes the relates to all versions of Windows in high-risk remote code execution vulnerability. Whether you are using what version of Windows System, we recommend that you have to update it-this one high-risk vulnerability could allow an attacker...