1059 matches found
tiny-url <= 1.3.2 - XSS in ZeroClipboard
The Tiny URL WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...
Tiny Server <= 1.1.9 HTTP HEAD DoS
No description provided by source. !/usr/bin/python Overflow exploiting a vulnerability in Tiny Server =1.1.9 HTTP HEAD request. Date of Discovery: 3/19/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://tinyserver.sourceforge.net/tinyserverfull.zip Software Version: =1.1.9 Target...
Tiny Web Gallery 1.5 Image Parameter Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19462/info Tiny Web Gallery is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary...
XOOPS Tiny Event 1.01 - 'print' Option SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27931/info Tiny Event is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
Tiny Portal 1.0 - 'shouts' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28630/info Tiny Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Low: perl-Capture-Tiny
Issue Overview: It was found 1 that the Capture::Tiny module, provided by the perl-Capture-Tiny package, used the File::temp::tmpnam module to generate temporary files: ./lib/Capture/Tiny.pm: $stash-flagfiles$which = scalar tmpnam; This module makes use of the mktemp function when called in the...
UBUNTU-CVE-2012-4230
The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the 1 encoding directive and 2 validelements attribute, which allows attackers to conduct cross-site scripting XSS attacks via application-specific vectors, as demonstrated using a textarea element...
Fedora Update for perl-Capture-Tiny FEDORA-2014-2321
Check for the Version of perl-Capture-Tiny OpenVAS Vulnerability Test Fedora Update for perl-Capture-Tiny FEDORA-2014-2321 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Fedora Update for perl-Capture-Tiny FEDORA-2014-2261
Check for the Version of perl-Capture-Tiny OpenVAS Vulnerability Test Fedora Update for perl-Capture-Tiny FEDORA-2014-2261 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Fedora Update for perl-Capture-Tiny FEDORA-2014-2261
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for perl-Capture-Tiny FEDORA-2014-2321
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : perl-Capture-Tiny-0.24-1.fc19 (2014-2261)
This release fixes CVE-2014-1875 -- insecure temporary file usage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 20 : perl-Capture-Tiny-0.24-1.fc20 (2014-2321)
This release fixes CVE-2014-1875 -- insecure temporary file usage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
[SECURITY] Fedora 20 Update: perl-Capture-Tiny-0.24-1.fc20
Capture::Tiny provides a simple, portable way to capture anything sent to STDOUT or STDERR, regardless of whether it comes from Perl, from XS code or from an external program. Optionally, output can be teed so that it is captured while being passed through to the original handles. Yes, it even...
[SECURITY] Fedora 19 Update: perl-Capture-Tiny-0.24-1.fc19
Capture::Tiny provides a simple, portable way to capture anything sent to STDOUT or STDERR, regardless of whether it comes from Perl, from XS code or from an external program. Optionally, output can be teed so that it is captured while being passed through to the original handles. Yes, it even...
MGASA-2014-0068 Updated perl-Capture-Tiny package fixes security vulnerability
perl-Capture-Tiny before 0.24 used files in /tmp in an insecure manner CVE-2014-1875...
Updated perl-Capture-Tiny package fixes security vulnerability
perl-Capture-Tiny before 0.24 used files in /tmp in an insecure manner CVE-2014-1875...
[Weevely] PHP Stealth Tiny Web Shell
Weevely is a stealth PHP web shell that provides a telnet-like console. It is an essential tool for web application post exploitation, and can be used as stealth backdoor or as a web shell to manage legit web accounts, even free hosted ones. Weevely is currently included in Backtrack and Backbox...
Buffer overflow
Buffer overflow in the Remote command server Rcmd.bat in IpTools aka Tiny TCP/IP server 0.1.4 allows remote attackers to cause a denial of service crash via a long string to TCP port 23...
CVE-2012-5344
CVE-2012-5344 affects IpTools’ Tiny TCP/IP Server (IpTools WebServer/Thttpd.bat 0.1.4). The connected data confirms a directory traversal vulnerability that allows remote reading of arbitrary files via a .. in an HTTP request. OpenVAS entries also reference a related remote buffer overflow for Ip...