CVE-2016-1000150

Reflected XSS in wordpress plugin simplified-content v1.0.0...

CVE-2016-1000150

Reflected XSS in wordpress plugin simplified-content v1.0.0...

Cross site scripting

Reflected XSS in wordpress plugin simplified-content v1.0.0...

CVE-2016-1000150

Reflected XSS in wordpress plugin simplified-content v1.0.0...

CVE-2016-1000150

CVE-2016-1000150 describes a Reflected XSS in the WordPress plugin simplified-content v1.0.0 . The vulnerability affects the plugin’s input handling, allowing an attacker to inject arbitrary script via reflected content. Multiple connected sources corroborate this finding, with consistent descrip...

CVE-2016-1000150: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin simplified-content v1.0.0...

PT-2016-4542

Name of the Vulnerable Software and Affected Versions Simplified-content version 1.0.0 Description The issue is related to a Reflected XSS in the wordpress plugin. Recommendations For version 1.0.0, update to a newer version that contains a fix for this issue...

VenShop System 2010 Database Disclosure

======================================================================== | Title : VenShop system 2010 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : Mortals online shopping system 2010 Simplified Chinese...

YetiForce CRM < 3.1 - Persistent Cross-Site Scripting

Exploit Title: YetiForce CRM Accounts' select your prefered user, and then in the 'Comments' section input; Either refresh the current page, or navigate back to 'Accounts'...

Out-of-bounds

The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation, related...

CVE-2016-1653: Improper Restriction of Operations within the Bounds of a Memory Buffer

The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation, related...

chromium-browser: memory corruption in V8

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified oth...

CVE-2014-7554

The Bouqs - Flowers Simplified aka com.bouqs.activity application 1.8.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bouqs - Flowers Simplified aka com.bouqs.activity application 1.8.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7554

CVE-2014-7554 concerns the Bouqs - Flowers Simplified Android app (com.bouqs.activity, version 1.8.4) failing to verify X.509 TLS certificates. This creates a vulnerability where man-in-the-middle attackers could spoof SSL servers and access sensitive information by presenting crafted certificate...

CVE-2014-7554: Undefined Security Weakness

The Bouqs - Flowers Simplified aka com.bouqs.activity application 1.8.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8087

Name of the Vulnerable Software and Affected Versions The Bouqs - Flowers Simplified aka com.bouqs.activity version 1.8.4 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a...

HP Smart Update Manager 6.x < 6.4.1 Multiple Vulnerabilities

The version of HP Smart Update manager running on the remote host is prior to 6.4.1. It is, therefore, affected by the following vulnerabilities : - An error exists in the function 'ssl3readbytes' that can allow data to be injected into other sessions or allow denial of service attacks. Note that...

QQPlayer cue File Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python Title: QQPlayer cue File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400 Vulnerable: QQPlayer=2.3.696.400p1 Code : head = '''FILE '''...

QQPlayer asx File Processing Buffer Overflow Exploit

No description provided by source. Title: QQPlayer asx File Processing Buffer Overflow Exploit Author: Li Qingshan of Information Security Engineering Center,School of Software and Microelectronics,Peking University Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Test: QQPlayer...