VulnCheck KEV: CVE-2015-1579

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the img parameter in a revslidershowimage action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734...

Mulitple WordPress Themes - admin-ajax.php?img Arbitrary File Download

Mulitple WordPress Themes - admin-ajax.php?img Arbitrary File Download WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage:...

MyBB 1.8 Beta 3 - Multiple Vulnerabilities

Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Google Dork: intext:"Powered By MyBB" Date: 15.08.2014 Author: DemoLisH Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/downloads Version: 1.8 - Beta 3 Contact: [email protected] a Cross Site Scripting in...

OL-Commerce 2.1.1 Cross Site Scripting / SQL Injection Vulnerabilities

OL-Commerce version 2.1.1 suffers from cross site scripting and remote SQL injection vulnerabilities. OL-Commerce v2.1.1 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected , email protected .:...

simple forum 3.2 (fd/xss) Multiple Vulnerabilities

No description provided by source. SIMPLE FORUM v 3.2 MULTIPLE VULNERABILITIES author : tomplixsee my email : [email protected] software : SIMPLE FORUM v3.2 download : http://www.gerd-tentler.de/tools/forum/ 1.XSS vulnerable code on forum.php ? ..... ifisset$REQUEST'dateshow' $dateshow =...

am4ss <= 1.2 - Multiple Vulnerabilities

No description provided by source. Exploit Title : am4ss 1.2 = Multiple Vulnerabilities Author : s3n4t00r Home : Sec-w.com Version : all version Date : Jul 31, 2012 XSS Stored 1 1- Register 2 - Login here http://localhost/am4ss/orderdev.php?step=2 3- Create Ticket and add your code html or js 4-...

CVE-2013-2105

The Show In Browser showinbrowser gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on /tmp/browser.html...

Improper access control

The Show In Browser showinbrowser gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on /tmp/browser.html...

CVE-2013-2105

The CVE-2013-2105 entry concerns the Show In Browser gem for Ruby (version 0.0.3). The root cause is a symlink attack on /tmp/browser.html, which allows local users to inject arbitrary web script or HTML. Practical impact is described as a local vulnerability enabling script execution via manipul...

CVE-2013-2105

The Show In Browser showinbrowser gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on /tmp/browser.html...

CVE-2011-4958

Cross-site scripting XSS vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to template placeholders, as demonstrated by a request to 1 admin/reports/, 2...

Cross site scripting

Cross-site scripting XSS vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to template placeholders, as demonstrated by a request to 1 admin/reports/, 2...

Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4

Document Title: =============== Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1220 View: http://www.youtube.com/watch?v=QnfWpuVk-jo Release Date: ============= 2014-03-04 Vulnerability Laboratory ID VL-ID:...

Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4

Document Title: =============== Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1220 View: http://www.youtube.com/watch?v=QnfWpuVk-jo Release Date: ============= 2014-03-04 Vulnerability Laboratory ID VL-ID:...

Design/Logic Flaw

The remote debug shell on the PALO adapter card in Cisco Unified Computing System UCS allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID CSCub13772...

CVE-2012-1313

The remote debug shell on the PALO adapter card in Cisco Unified Computing System UCS allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID CSCub13772...

aspcms background holding shell vulnerability(non-add module)and repair method-vulnerability warning-the black bar safety net

aspcms in the old version, you can add a template directly to add the asp. But the new aspcms has been restricted to add the template format is html,js,css,and of course if you are experiencing iis6 words or by iis6 parsing vulnerability put the file name into 1. asp;. html this format to get to...

[ShowWindows v1.0] Command-line Tool to Manage Open Windows

Show Windows is the command-line tool to manage Windows opened by all running Processes on your system. In addition to showing open Windows, it does little more. Here are some of the things that you can do with ShowWindows, View all open Windows/Apps Windows opened by particular User Windows open...

DEBIAN-CVE-2012-4219

showconfigerrors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file...

am4ss 1.2 <= Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title : am4ss 1.2 alert'Sec-w.com' ================================================= Gr34ts 4 : Sec-w.com Members 0day.today 2018-02-18...