CVE-2007-4139

Cross-site scripting XSS vulnerability in the Temporary Uploads editing functionality wp-admin/includes/upload.php in WordPress 2.2.1, allows remote attackers to inject arbitrary web script or HTML via the style parameter to wp-admin/upload.php...

patch: OS shell command injection when processing crafted patch files

A flaw was found in GNU patch through version 2.7.6. An ed-style diff payload patch file with shell metacharacters can be used to inject OS shell commands into a system. The ed editor does not need to be present on the vulnerable system for this attack to function. The highest threat from this...

patch: OS shell command injection when processing crafted patch files

A flaw was found in GNU patch through version 2.7.6. An ed-style diff payload patch file with shell metacharacters can be used to inject OS shell commands into a system. The ed editor does not need to be present on the vulnerable system for this attack to function. The highest threat from this...

PT-2019-5218 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.2.4 Description: The issue is related to a stored XSS attack that allows an attacker to inject JavaScript into STYLE elements. This can potentially impact the integrity of the data. The exploitation of this issue...

WordPress iThemes Builder Style Manager Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. iThemes Builder Style Manager is one of the style managers used in it. A cross-site scripting vulnerability exists in the WordPress...

Information disclosure

iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9379

The CVE-2015-9379 entry concerns WordPress plugin WordPress iThemes Builder Style Manager. Affected component: the Style Manager widget/plugin (iThemes Builder Style Manager) for WordPress, with vulnerable versions before 0.7.7. Root cause: cross-site scripting (XSS) vulnerability via the add_que...

EulerOS 2.0 SP5 : patch (EulerOS-SA-2019-1801)

According to the versions of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrar...

DejaBlue: New BlueKeep-Style Bugs Mean You Need to Update Windows Now

Vulnerabilities in Microsoft's Remote Desktop Protocol continue to plague the web...

NewStart CGSL CORE 5.04 / MAIN 5.04 : gnutls Multiple Vulnerabilities (NS-SA-2019-0068)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has gnutls packages installed that are affected by multiple vulnerabilities: - It was found that GnuTLS's implementation of HMAC- SHA-256 was vulnerable to Lucky Thirteen-style attack. A remote attacker could use this flaw to...

Sql injection

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload SEC-314...

CVE-2017-18387

Affected software: cPanel prior to 68.0.15. The vulnerability is an arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314). Root cause: Maketext injection allows code execution, enabling an attacker to run arbitrary code with high integrity/availability impact. Explo...

CVE-2017-18387

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload SEC-314...

Design/Logic Flaw

cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads SEC-378...

CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

Design/Logic Flaw

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

CVE-2018-20877

CVE-2018-20877 affects cPanel prior to 74.0.8, where the WHM Style Upload interface is vulnerable to self-XSS. The underlying issue is rooted in client-side data handling that allows arbitrary script execution within the UI. Exploitation details are not provided in the supplied documents beyond t...

Announcing the Sixth Annual Flare-On Challenge

The FireEye Labs Advanced Reverse Engineering FLARE team is thrilled to announce that the popular Flare-On reverse engineering challenge will return for the sixth straight year. The contest will begin at 8:00 p.m. ET on Aug. 16, 2019. This is a CTF-style challenge for all active and aspiring...

CVE-2019-13638

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156...