WordPress 4.2 - Persistent Cross-Site Scripting

WordPress 4.2 - Persistent Cross-Site Scripting Source: http://klikki.fi/adv/wordpress2.html Overview Current versions of WordPress are vulnerable to a stored XSS. An unauthenticated attacker can inject JavaScript in WordPress comments. The script is triggered when the comment is viewed. If...

Oracle Linux 7 : hivex (ELSA-2015-0301)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0301 advisory. 1.3.10-5.7 - Fix: 'Argument list too long' when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz1145056 1.3.10-5.6 - Fix: typo...

CVE-2014-8502

Heap-based buffer overflow in the peprintedata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a truncated export table in a PE file...

UBUNTU-CVE-2014-8502

Heap-based buffer overflow in the peprintedata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a truncated export table in a PE file...

file: mconvert incorrect handling of truncated pascal string size

A buffer overflow flaw was found in the way the File Information fileinfo extension processed certain Pascal strings. A remote attacker able to make a PHP application using fileinfo convert a specially crafted Pascal string provided by an image file could cause that application to crash...

UBUNTU-CVE-2014-1580

Mozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers a sequence of rendering operations for truncated GIF data within a CANVAS element...

PHP contains a vulnerability study-vulnerability warning-the black bar safety net

0x00containing the vulnerabilities causes First need to understand the includefunction and the requirefunction, they will be included in any format of the file to php form execution. The two function basically the same function, in addition only when the included file does not exist when it will...

Concrete CMS: Bypass auth.email-domains

Email addresses are stored as VARCHAR64. the length is verified on client side only , using a proxytemper data attacker can add longer length email which can be further abused .Exploiting this is rather straightforward: get an email address of 128 characters long . Now register with your 128...

Apache Httpd < 2.4.9 : mod_log_config crash

A flaw was found in modlogconfig. A remote attacker could send a specific truncated cookie causing a crash. This crash would only be a denial of service if using a threaded MPM...

Opera Truncated Dialogs Code Execution Vulnerability (Windows)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperatruncationdialogcodeexecvulnwin.nasl 6079 2017-05-08 09:03:33Z teissa $ Opera Truncated Dialogs Code Execution Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 20...

Opera Truncated Dialogs Code Execution Vulnerability (Linux)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperatruncationdialogcodeexecvulnlin.nasl 6074 2017-05-05 09:03:14Z teissa $ Opera Truncated Dialogs Code Execution Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2013...

Opera Truncated Dialogs Code Execution Vulnerability - Mac OS X

Opera is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Truncated Dialogs Code Execution Vulnerability - Windows

Opera is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Truncated Dialogs Code Execution Vulnerability (Mac OS X)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperatruncationdialogcodeexecvulnmacosx.nasl 6079 2017-05-08 09:03:33Z teissa $ Opera Truncated Dialogs Code Execution Vulnerability Mac OS X Authors: Antu Sanadi Copyright: Copyright ...

Opera Truncated Dialogs Code Execution Vulnerability - Linux

Opera is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type

ospfpacket.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service daemon crash via 1 a 0x0a type field in an IPv4 packet header or 2 a truncated IPv4 Hello packet...

Opera < 12.02 Truncated Dialog Vulnerability

Binary data 800820.prm...

Opera < 12.02 Truncated Dialog Vulnerability

Binary data 6562.prm...

Opera < 12.02 Truncated Dialog Vulnerability

The version of Opera installed on the remote host is earlier than 12.02 and is, therefore, reportedly affected by a truncated dialog vulnerability. Certain user actions, when combined with specially crafted web pages, can cause displayed dialog boxes to be too small thus allowing the dialog butto...

Truncated dialogs may be used to trick users

When an important dialog is being displayed, such as a download dialog, the entire dialog should be visible, so that the user can clearly see what the dialog's buttons will do. In some cases, specific user interactions can cause Opera not to enforce this correctly, allowing the window to become...