561 matches found
Joomla! CMS 3.4.3 Cross Site Scripting
Exploit Title: Joomla! CMS 3.4.0-3.4.3 XSS Vulnerability Date: 2015-08-18 Exploit Author: cfreer [email protected] & 0keeteam Vendor Homepage: http://joomla.org Version: 3.4.0 through 3.4.3 Tested on: Apache/2.4.7 Win32 CVE : CVE-2015-6939 Description Inadequate escaping leads to XSS vulnerabilit...
Joomla! -- Core - XSS Vulnerability
The JSST and the Joomla! Security Center report: 20150908 - Core - XSS Vulnerability Inadequate escaping leads to XSS vulnerability in login module...
Joomla! -- Core - Open Redirect vulnerability
The JSST and the Joomla! Security Center report: 20150601 - Core - Open Redirect Inadequate checking of the return value allowed to redirect to an external page...
Websense Triton Detection (HTTP)
HTTP based detection of Websense Triton. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.106001";...
McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite - Ver2 (CVE-2005-3657)
The McAfee Security Center application is meant to allow users to set preferences and settings for numerous installed McAfee components and services, such as the anti-virus component VirusScan, the Personal Firewall Plus, the Privacy Service, or the SpamKiller component. The Security Control Cent...
McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite - Ver2 (CVE-2005-3657)
The McAfee Security Center application is meant to allow users to set preferences and settings for numerous installed McAfee components and services, such as the anti-virus component VirusScan, the Personal Firewall Plus, the Privacy Service, or the SpamKiller component. The Security Control Cent...
Spybot Search Destroy 1.6.2 Security Center Service - Local Privilege Escalation
Spybot Search Destroy 1.6.2 Security Center Service - Local Privilege Escalation Spybot Search & Destroy 1.6.2 Security Center Service Privilege Escalation Vendor: Safer-Networking Ltd. Product web page: http://www.safer-networking.org Affected version: 1.6.2 Summary: Spybot – Search & Destroy...
Spybot Search & Destroy 1.6.2 Security Center Service Privilege Escalation
Summary Spybot – Search & Destroy S&D is a spyware and adware removal computer program compatible with Microsoft Windows 95 and later. It scans the computer hard disk and/or RAM for malicious software. Description The application suffers from an unquoted search path issue impacting the service...
ManageEngine Netflow Analyzer / IT360 File Download
Hi, This is part 9 of the ManageOwnage series. For previous parts see 1. Today we have yet another 0 day - an arbitrary file download vulnerability that be exploited unauthenticated in NetFlow Analyzer and authenticated in IT360. I'm releasing this as a 0 day because ManageEngine have been making...
MS14-076: Vulnerability in Internet Information Services (IIS) could allow security feature bypass: November 11, 2014
None None...
Joomla! -- Core - Unauthorized Login vulnerability
The JSST and the Joomla! Security Center report: 20140902 - Core - Unauthorized Logins Inadequate checking allowed unauthorized logins via LDAP authentication...
Joomla! -- Core - XSS Vulnerability
The JSST and the Joomla! Security Center report: 20140901 - Core - XSS Vulnerability Inadequate escaping leads to XSS vulnerability in commedia...
Soco CMS Local File Include Vulnerability
No description provided by source. Exploit Title: Soco CMS Local File Include Google Dork: Powered by Soco Date: 28/04/2012 Author: BHG Security Center H0me : www.black-hg.org Software Link: http://hentan.eu/php/Soco/ Version: last version Tested on: Linux/Ubuntu - Windows7 p0c :...
MARINET CMS (room.php) <= Blind SQL Vulnerability
No description provided by source. ==================================================== MARINET CMS room.php = Blind SQL Vulnerability ==================================================== Exploit Title: MARINET CMS room.php = Blind SQL Vulnerability Date: 30 - 09 - 2011 Author: BHG Security Cente...
FIFA World Cup Security Team Accidentally Reveals their Wi-Fi Password
This FIFA World Cup, the security has been really going well and yet no calamitous incident reported so far, other than the security company who is responsible to keep an eye on the event’s security, itself tweeted a photograph of their state-of-the-art monitoring centre that exposed the World Cu...
CVE-2014-0347
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to...
Design/Logic Flaw
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to...
CVE-2014-0347
The CVE-2014-0347 vulnerability affects Websense Triton Unified Security Center 7.7.3 (and related Websense suites) prior to Hotfix 31. In the Settings module, the Log Database and User Directories areas fail to sanitize input, allowing an authenticated user to change an input field from type="pa...
CVE-2014-0347
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to...
Triton Unified Security Center多个信息泄露漏洞
Bugtraq ID:66687 CVE ID:CVE-2014-0347 Triton Unified Security Center是基于Web浏览器的图形管理的安全应用。 Triton Unified Security Center在实现上存在多个信息泄露漏洞，攻击者可利用这些漏洞查看高级用户存储的凭证。 0 Websense TRITON Unified Security Center 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.websense.com/content/support/library/deployctr/v76/tusccd.asp...