3034 matches found
Moderate: Red Hat Security Advisory: net-snmp security and bug fix update
Updated net-snmp packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
espndeportes.espn.go.com XSS vulnerability
Vulnerable URL:...
Imgur: Persistent XSS in https://p.imgur.com/albumview.gif and http://p.imgur.com/imageview.gif / post statistics
In p.imgur.com/albumview.gif, a post paramater could be set containing html and javascript. This was not escaped properly and the code would be executed. The reporter used the following example URLs as a proof of concept https://p.imgur.com/albumview.gif?a=F78FO&r=https://community.imgur.com/aler...
Gping - Ping, But With A Graph
Ping, but with a graph Install and run Created/tested with Python 3.4, should run on 2.7 will require the statistics module though. pip3 install pinggraph Tested on Windows and Ubuntu, should run on OS X as well. After installation just run: gping yourhost If you don't give a host then it pings...
Blackhat 2015 Arsenal
Last month at Blackhat Arsenal 2015, Pete and I @willis presented on Serpico. This was our second time at Arsenal. Yet again, awesome people, great venue, and overall a highlight for me of BH/DC/LV. We got some excellent feedback on the project, so thank you to anyone who stopped by. Last year I...
UBUNTU-CVE-2015-5195
ntpopenssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service segmentation fault via a crafted statistics or filegen configuration command that is not enabled during compilation...
WP Statistics <= 9.5.1 - Referer Cross-Site Scripting (XSS)
The WP Statistics WordPress plugin was affected by a Referer Cross-Site Scripting XSS security vulnerability...
WordPress WP Statistics Plugin <= 9.5.1 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
The vulnerability of the Moodle learning management system allows a hacker to execute arbitrary web or HTML code.
The vulnerability of the mod/quiz/report/statistics/statisticsquestiontable.php component of the Moodle learning management system exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary web or HTML code ...
wireshark: The pcapng file parser could crash (wnpa-sec-2015-08)
Off-by-one error in the pcapngread function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service out-of-bounds read and application crash via an invalid Interface Statistics Block ISB interfa...
WP Statistics <= 9.4 - Authenticated SQL Injection
The WP Statistics WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...
WordPress WP Statistics Plugin <= 2.2.4 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Moodle 'mod/quiz/report/statistics/statistics_question_table.php' cross-site scripting vulnerability
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in the Moodle 'mod/quiz/report/statistics/statisticsquestiontable.php' script. A remote...
UBUNTU-CVE-2015-2273
Cross-site scripting XSS vulnerability in mod/quiz/report/statistics/statisticsquestiontable.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the student role for a...
CVE-2015-2273
CVE-2015-2273 is a Moodle XSS flaw in mod/quiz/report/statistics/statistics_question_table.php that allows remote authenticated users (via student role) to inject script/HTML through a crafted quiz response. Affected Moodle versions: 2.5.9 and 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x bef...
Hardcoded credentials
An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document...
IBM SPSS Statistics ActiveX Control Code Execution Vulnerability
IBM SPSS Statistics is a suite of statistical analysis software that helps organizations address the entire analytics process, from planning and data collection to analysis, reporting, and deployment. A code execution vulnerability exists in the ActiveX control of IBM SPSS Statistics version 22.0...
WordPress WP Statistics Plugin Cross-Site Scripting Vulnerability
WordPress is a set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress WP Statistics is a wordpress based statistics plugin. WordPress WP Statistics suffers from a cross-site scripting vulnerability that...
UBUNTU-CVE-2015-3630
Docker Engine before 1.6.1 uses weak permissions for 1 /proc/asound, 2 /proc/timerstats, 3 /proc/latencystats, and 4 /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image...