CVE-2013-2694: Improper Input Validation

Open redirect vulnerability in invite.php in the WP Symposium plugin 13.04 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the u parameter...

PT-2014-2615

Name of the Vulnerable Software and Affected Versions WP Symposium plugin version 13.04 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the u parameter in the invite.php file. This can be exploited to trick users int...

CVE-2013-2695: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in invite.php in the WP Symposium plugin before 13.04 for WordPress allows remote attackers to inject arbitrary web script or HTML via the u parameter...

UBUNTU-CVE-2014-1492

The certTestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services NSS before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof...

Serv-U FTP Server < 15.0.1.20 DoS

According to its banner, the installed version of Serv-U is a version prior to version 15.0.1.20. It is, therefore, affected by an unspecified denial of service vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

U-Mail injection of arbitrary code written in exp-vulnerability warning-the black bar safety net

u-mail in a file since the parameter filter is not rigorous and resulted inSQL injection by this vulnerability can be your shell to write to a web directory, you can batch getshell it. Baidu & Google Keywords: --------------------- Power by U-Mail Accurate anti-spam, effectively filtering more th...

Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-16 Vulnerability Laboratory ID VL-ID: ====================================...

u-mail 代码执行漏洞

No description provided by source...

u-mail注入导致任意代码执行漏洞

简要描述： 详细说明： u-mail注入导致任意代码执行漏洞 U mail 邮件系统涉及金融、政府、银行，石油、军队、证券、设置是国家外交部重要部门等。所以漏洞危害可想而知。 具体漏洞细节如下 在fileshare.php中 mysqlquery "SET NAMES 'UTF8'"; mysqlselectdb $database ; $fileid = $GET'file'; $inmail = $GET'inmail'; if !$fileid exitout"鍙傛暟閿欒锛? ; $fileid = rawurldecode base64decode$fileid ; $sql ...

JDK: unspecified vulnerability fixed in 7u45 (Deployment)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment...

JDK: unspecified vulnerability fixed in 7u45 (Deployment)

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment...

Bluetooth U 1.2.0 Directory Traversal

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-16 Vulnerability Laboratory ID VL-ID: ====================================...

Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID: ====================================...

Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID: ====================================...

mp3-player 2.5 Cross Site Scripting / Content Spoofing

Hello list! These are Cross-Site Scripting and Content Spoofing vulnerabilities in mp3-player. ------------------------- Affected products: ------------------------- Vulnerable are mp3-player 2.5 and previous versions. ------------------------- Affected vendors: ------------------------- U-Studio...

Multiple vulnerabilities in flv-player

Hello 3APA3A! These are Cross-Site Scripting and Content Spoofing vulnerabilities in flv-player. ------------------------- Affected products: ------------------------- Vulnerable are flv-player 3.5 and previous versions. ------------------------- Affected vendors: ------------------------- U-Stud...

Multiple vulnerabilities in mp3-player

Hello 3APA3A! These are Cross-Site Scripting and Content Spoofing vulnerabilities in mp3-player. ------------------------- Affected products: ------------------------- Vulnerable are mp3-player 2.5 and previous versions. ------------------------- Affected vendors: ------------------------- U-Stud...

flv-player 3.5 Cross Site Scripting / Content Spoofing

Hello list! These are Cross-Site Scripting and Content Spoofing vulnerabilities in flv-player. ------------------------- Affected products: ------------------------- Vulnerable are flv-player 3.5 and previous versions. ------------------------- Affected vendors: ------------------------- U-Studio...

PT-2013-70

Name of the Vulnerable Software and Affected Versions Serv-U File Server affected versions not specified Description The issue is related to insufficient validation of client-supplied parameters used in HTM scripts, allowing a remote attacker to execute arbitrary JavaScript code in the user's...

PT-2013-66

Name of the Vulnerable Software and Affected Versions Serv-U File Server affected versions not specified Description The issue is related to errors in the code of the web interface forms, allowing a remote attacker to modify the system configuration. Recommendations At the moment, there is no...