9914 matches found
WordPress User Role 1.4.1 Cross Site Scripting Vulnerability
WordPress User Role plugin version 1.4.1 suffers from a cross site scripting vulnerability. WordPress User Role 1.4.1 Cross Site Scripting Vulnerability Plugin Name : User Role Effected Version : 1.4.1 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified...
WordPress User Role 1.4.1 Cross Site Scripting
Plugin Name : User Role Effected Version : 1.4.1 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : In the following field put the payload as...
Cisco Hosted Collaboration Mediation Fulfillment SOAP API Sensitive Information Disclosure Vulnerability
A vulnerability in the Simple Object Access Protocol SOAP application programming interface API of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an authenticated, remote attacker to obtain sensitive information that should be restricted. The attacker must authentica...
Role Scoper WordPress插件反射型跨站脚本漏洞
No description provided by source...
WordPress Role Scoper 1.3.66 Cross Site Scripting Vulnerability
WordPress Role Scoper plugin version 1.3.66 suffers from a cross site scripting vulnerability. Product: Role Scoper WordPress plugin Vendor: Kevin Behrens Vulnerable Versions: 1.3.66 and probably prior Tested Version: 1.3.66 Advisory Publication: October 29, 2015 without technical details Vendor...
EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server
It was found that JBoss EAP did not properly authorize a user performing a shut down. A remote user with the Monitor, Deployer, or Auditor role could use this flaw to shut down the EAP server, which is an action restricted to admin users...
EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server
It was found that JBoss EAP did not properly authorize a user performing a shut down. A remote user with the Monitor, Deployer, or Auditor role could use this flaw to shut down the EAP server, which is an action restricted to admin users...
EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server
It was found that JBoss EAP did not properly authorize a user performing a shut down. A remote user with the Monitor, Deployer, or Auditor role could use this flaw to shut down the EAP server, which is an action restricted to admin users...
EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server
It was found that JBoss EAP did not properly authorize a user performing a shut down. A remote user with the Monitor, Deployer, or Auditor role could use this flaw to shut down the EAP server, which is an action restricted to admin users...
EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server
It was found that JBoss EAP did not properly authorize a user performing a shut down. A remote user with the Monitor, Deployer, or Auditor role could use this flaw to shut down the EAP server, which is an action restricted to admin users...
WordPress Role Scoper Plugin <= 1.3.66 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Role Scoper <= 1.3.66 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The Role Scoper Obsolete – Please install PublishPress Permissions WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...
WordPress Role Scoper 1.3.66 Cross Site Scripting
Advisory ID: HTB23276 Product: Role Scoper WordPress plugin Vendor: Kevin Behrens Vulnerable Versions: 1.3.66 and probably prior Tested Version: 1.3.66 Advisory Publication: October 29, 2015 without technical details Vendor Notification: October 29, 2015 Vendor Patch: October 29, 2015 Public...
Role Scoper WordPress Plugin Reflective Cross-Site Scripting Vulnerability
Role Scoper WordPress plugin is comprehensive access control solution that controls read and edit permissions like a CMS. Role Scoper WordPress 1.3.66 and earlier versions do not effectively filter the "objectname" HTTP GET parameter value of "/wp-admin/admin.php" when "page" is set to...
pacemaker: acl read-only access allow role assignment
A flaw was found in the way pacemaker, a cluster resource manager, evaluated added nodes in certain situations. A user with read-only access could potentially assign any other existing roles to themselves and then add privileges to other users as well...
F5 iControl iCall::Script Root Command Execution Exploit
This Metasploit module exploits an authenticated privilege escalation vulnerability in the iControl API on the F5 BIG-IP LTM and likely other F5 devices. This requires valid credentials and the Resource Administrator role. The exploit should work on BIG-IP 11.3.0 - 11.6.0, 11.5.x...
F5 iControl iCall::Script Root Command Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'nokogiri' class Metasploit3 "http://schemas.xmlsoap.org/soap/encoding/" STRINGATTRS = 'xsi:type' = 'urn:Common.StringSequence',...
PC-EGG pWebManager OS Command Injection Vulnerability
PC-EGG pWebManager is a set of static HTML homepage template tool based on PHP language . A security vulnerability exists in PC-EGG pWebManager versions prior to 3.3.10 and pWebManager for PHP4 versions prior to 2.2.2. A remote attacker can exploit this vulnerability to execute arbitrary OS...
