1416 matches found
Algolia: Stored XSS in name selection
You have a stored XSS vuln when you set your name in your account information. to reproduce just set your name field to: alert'xss' and most pages on your account you will show XSS...
selectionhotel.fr XSS vulnerability
Vulnerable URL: http://www.selectionhotel.fr//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 V...
The vulnerability of the Mac OS X operating system, which allows a hacker to replace the content of text documents
The vulnerability of Mac OS X’s bidirectional text-display and text-selection functions exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the content of text documents using a specially crafted sequence of characters...
CVE-2015-5883
The bidirectional text-display and text-selection implementations in Terminal in Apple OS X before 10.11 interpret directional override formatting characters differently, which allows remote attackers to spoof the content of a text document via a crafted character sequence...
CVE-2015-5883
CVE-2015-5883 affects Apple OS X Terminal prior to 10.11, where Terminal’s bidirectional text handling and text-selection logic treat directional override formatting characters differently. This mismatch can allow remote attackers to spoof the content of a text document via a crafted character se...
Coalfire Receives Investment from The Carlyle Group and The Chertoff Group
Im pleased to announce that we recently closed on a significant investment from The Carlyle Group and The Chertoff Group - two prestigious investment groups that both have extensive experience in the cybersecurity space. The selection of these two firms came after an extensive six-month process o...
Code injection
IBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attackers to cause a denial of service channel-agent abend and process outage via a crafted selection string in an MQI call...
CVE-2015-2013
IBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attackers to cause a denial of service channel-agent abend and process outage via a crafted selection string in an MQI call...
Red Hat Enterprise Virtualization Hypervisor Local Unauthorized Access Vulnerability
Red Hat Enterprise Virtualization Hypervisor is a virtualization solution hypervisor. The Red Hat Enterprise Virtualization Hypervisor WEB management interface fails to properly handle session timeouts when a VM is selected in the VM Grid view, and local users have access to other WEB interfaces...
MPC - Msfvenom Payload Creator
Msfvenom Payload Creator MPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only requiring one input to produce their payload. Fully automating msfvenom & Metasploit is the end goal well as to be be able to automate MPC itself...
[SECURITY] Fedora 22 Update: drupal7-path_breadcrumbs-3.3-1.fc22
Path breadcrumbs module helps you to create breadcrumbs for any page with a ny selection rules and load any entity from the URL. Features Breadcrumbs navigation may be added to any kind of page: static example: node/1 or dynamic example: node/NID. You can load contexts from URL and use it like...
check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4
CheckMK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write checkmk config files .mk files to arbitrary locations via vectors related to row selections...
Msfvenom Payload Creator: MPC
Msfvenom Payload Creator MPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only requiring one input to produce their payload. Fully automating msfvenom & Metasploit is the end goal well as to be be able to automate MPC itself...
Cisco ASA Challenge-Response Tunnel Group Selection Bypass Vulnerability
A vulnerability in the authentication code of Cisco ASA Software could allow an authenticated, remote attacker to access resources of a VPN tunnel group. The vulnerability is due to improper implementation of the tunnel group selection when a user authenticates to the remote access VPN via the...
chromium-browser: use-after-free in DOM
Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, allows remote...
chromium-browser: out-of-bounds read in UI
The SelectionOwner::ProcessTarget function in ui/base/x/selectionowner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service out-of-bounds read via crafted X11 data...
SWFupload 2.5.0 - Cross Frame Scripting (XFS) Vulnerability
Document Title: =============== SWFupload 2.5.0 - Cross Frame Scripting XFS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1422 Release Date: ============= 2015-01-25 Vulnerability Laboratory ID VL-ID: ====================================...
OracleVM 3.2 : ntp (OVMSA-2015-0001)
The remote OracleVM system is missing necessary patches to address critical security updates : - Remove default ntp servers in ntp.conf bug 14342986 - don't generate weak control key for resolver CVE-2014-9293 - don't generate weak MD5 keys in ntp-keygen CVE-2014-9294 - fix buffer overflows via...
OracleVM 2.2 : ntp (OVMSA-2015-0002)
The remote OracleVM system is missing necessary patches to address critical security updates : - don't generate weak control key for resolver CVE-2014-9293 - don't generate weak MD5 keys in ntp-keygen CVE-2014-9294 - fix buffer overflows via specially-crafted packets CVE-2014-9295 - increase...
