44 matches found
Updated hivex packages fix security vulnerability
Fixes limit recursion in ri-records. CVE-2021-3622...
hivex security update
1.3.10-6.12 - Limit recursion in ri-records CVE-2021-3622 resolves: rhbz1976193...
CVE-2020-11218
Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...
Denial of service
Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...
ri-okna.sk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1135637 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ri-okna.sk website and its...
WordPress Antena_Ri Institute Themes Open Redirect Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in WordPress AntenaRi Institute Themes. An attacker can successfully initiate a phishin...
CVE-2018-10080
Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52esFRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wandns.asp request in conjunction with a crafted admin cookie...
ri-photo.com XSS vulnerability
Open Bug Bounty ID: OBB-48424 Description| Value ---|--- Affected Website:| ri-photo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
RI Blog 1.3 Search.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21880/info RI Blog is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...
[SECURITY] Fedora 17 Update: rubygem-rdoc-3.12-5.fc17
RDoc produces HTML and command-line documentation for Ruby projects. RDoc includes the +rdoc+ and +ri+ tools for generating and displaying online documentation. See RDoc for a description of RDoc's markup and basic use...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: 161564 High CVE-2012-5138: Incorrect file path handling. Credit to Google Chrome Security Team Jüri Aedla. 162835 High CVE-2012-5137: Use-after-free in media source handling. Credit to Pinkie Pie...
Unfixed XSS vulnerability at www.gpa-ri.com.br
Security researcher mygotmanoel, has submitted on 08/01/2008 a cross-site-scripting XSS vulnerability affecting www.gpa-ri.com.br, which at the time of submission ranked 1937699 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/02/2008. It is...
CVE-2007-1240
CVE-2007-1240 involves multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5. The flaws allow remote attackers to inject arbitrary web script or HTML via specific parameters: (1) searchkey to index.php, and (2) sn or (3) ri to modules/htmlframechat/index.php. The d...
CVE-2007-0121
Cross-site scripting XSS vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2007-0121
Cross-site scripting XSS vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2007-0121
CVE-2007-0121 is an XSS vulnerability in RI Blog 1.3 (search.asp) that allows remote attackers to inject arbitrary script/HTML via the q parameter. Public records cite a CVSS v2 base score of 6.8 (Medium), with network attack vector and partial impact to confidentiality, integrity, and availabili...
riblog-xss.txt
BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : RI Blog 1.3 Script Download : http://www.aspindir.com/indir.asp?id=4098 Risk : High Found By : ShaFuck31 Vulnerable file : search.asp Vulnerable : http://www.victim.com/BlogPath/search.asp?q=XSS ExampLe :...
RI Blog 1.3 XSS Vuln.
BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : RI Blog 1.3 Script Download : http://www.aspindir.com/indir.asp?id=4098 Risk : High Found By : ShaFuck31 Vulnerable file : search.asp Vulnerable : http://www.victim.com/BlogPath/search.asp?q=XSS ExampLe :...
RI Blog 1.3 - 'search.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21880/info RI Blog is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user...