10613 matches found
RSA Federated Identity Manager URI Redirection Vulnerability (CNVD-2015-01885)
RSA Federated Identity Manager is a standards-based approach that enables end-users to collaborate with business partners, outsourced service providers, supply chain partners, or across multiple offices or surrogates - all through a single identity and single sign-on. A URI redirection...
CVE-2015-2315
Cross-site scripting XSS vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the target parameter in a reminderpopup action to the default URI...
Cross site scripting
Cross-site scripting XSS vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the target parameter in a reminderpopup action to the default URI...
Fedora 22 : suricata-2.0.7-1.fc22 (2015-2790)
This release fixes a parsing issue in the DCERPC parser that can happen when Suricata runs out of memory. The exact scope of the problem isn't clear, but it could certainly lead to crashes. CVE-2015-0928 is assigned for this. The second issue is certain characters in the URI could confuse the...
WordPress WPML Plugin <= 3.1.8 - XSS
This vulnerability allows an attacker to inject arbitrary web script or HTML via the "target" parameter in a reminderpopup action to the default URI. Solution Update the plugin...
Jolla Phone URI Spoofing
-------------------------- NSOADV-2015-001 --------------------------- Jolla Phone tel URI Spoofing 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1 111 111001 111111111 0 10 111...
Fedora 21 : suricata-2.0.7-1.fc21 (2015-2828)
This release fixes a parsing issue in the DCERPC parser that can happen when Suricata runs out of memory. The exact scope of the problem isn't clear, but it could certainly lead to crashes. CVE-2015-0928 is assigned for this. The second issue is certain characters in the URI could confuse the...
Raritan PowerIQ 4.1 / 4.2 / 4.3 Code Execution
Raritan PowerIQ versions 4.1, 4.2, and 4.3 ship with a Rails 2 web interface with a hardcoded session secret of 8e238c9702412d475a4c44b7726a0537. This can be used to achieve unauthenticated remote code execution as the nginx user on vulnerable systems. msf exploitrailssecretdeserialization show...
IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2015-01710)
IBM Rational Quality Manager is a collaborative, Web-based quality management solution. An input validation vulnerability exists in IBM Rational Quality Manager. The vulnerability allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain...
Disucz X3.2 多处反射型XSS漏洞（函数缺陷导致）
简要描述： 某函数缺陷导致的 XSS。 详细说明： member.php?mod=logging&action=login&referer=javascript://www.discuz.net/ 欢迎您回来，Newbie xx，现在将转入登录前页面setTimeout"window.location.href ='javascript://www.discuz.net/';", 2000;setTimeout"window.location.href ='javascript://www.discuz.net/';", 2000; 如果您的浏览器没有自动跳转，请点击此链接...
Generic Web Application DLL Injection
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Generic Web Application DLL Injection', 'Description' = %q This is a general-purpose module for exploiting conditions where a HTTP...
Generic Web Application DLL Injection
This is a general-purpose module for exploiting conditions where a HTTP request triggers a DLL load from an specified SMB share. This module serves payloads as DLLs over an SMB service and allows an arbitrary HTTP URL to be called that would trigger the load of the DLL. Module Options msf use...
Drupal Navigate module cross-site scripting vulnerability
Drupal is an open source content management platform. A cross-site scripting vulnerability exists in the Drupal Navigate module, which allows remote attackers to exploit this vulnerability to construct malicious URIs that can be tricked into being parsed by the user, which can be used to obtain...
GLSA-201502-13 : Chromium: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201502-13 Chromium: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to cause a Denial of...
MantisBT 1.2.x < 1.2.19 Multiple Vulnerabilities
Binary data 8903.prm...
CVE-2015-1471
SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI...
Sql injection
SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI...
Drupal Commerce WeDeal module open redirect vulnerability
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An open redirect vulnerability exists in the Drupal Commerce WeDeal module due to the application failing to properly filter user-supplied input. An attacker can build a...
Updated chromium-browser-stable packages fix security vulnerabilities
Updated chromium-browser packages fix security vulnerabilities: Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.111 allows remote attacke...
CVE-2015-1578
Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 1 pidvesa cookie to u5admin/pidvesa.php or 2 uri parameter to u5admin/meta2.php...