PyroCMS "email"跨站脚本漏洞

PyroCMS是一款内容管理系统。 由于传递到index.php/register中"email" POST参数的输入在返回用户前未能正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 PyroCMS 2.2.3 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： https://www.pyrocms.com/...

Drupal Project Issue File Review模块HTML注入漏洞

Bugtraq ID:65830 Drupal是一套开放源码的内容管理平台。 Drupal Project Issue File Review存在跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 Drupal Project Issue File Review 6.x-2.0 厂商补丁： Drupal ----- Drupal Project Issue File Review 6.x-2.17已经修复该漏洞，建议用户下载更新： http://drupal.org/project/projectissuefilerev...

Mozilla Firefox Cookie Verification Denial of Service Vulnerability - Mac OS X

Mozilla Firefox is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox Cookie Verification Denial of Service Vulnerability - Windows

Mozilla Firefox is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Motorola WiMAX CPEi25890 /cgi-bin/f1_fcgi_cgi.fcgi设备名字段跨站脚本漏洞

code/codeMotorola WiMAX CPEi25890是摩托罗拉发布的WiMax猫。 Motorola WiMAX CPEi25890 /cgi-bin/f1fcgicgi.fcgi脚本不正确过滤设备名字段输入，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 Motorola WiMAX CPEi25890是摩托罗拉发布的WiMax猫。 Motorola WiMAX CPEi25890...

Movable Type Rich Text Editor脚本注入漏洞

Movable Type是一款基于WEB的网络博客系统。 由于通过网页键入的输入在富文本编辑器显示之前缺少过滤。在恶意数据被查看时，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 下列产品和版本存在漏洞： Movable Type Pro version 6.0 Movable Type Pro versions 5.2.x, 5.1x, and 5.0x Movable Type Open Source MTOS versions 5.2.x, 5.1x, and 5.0x Movable Type Advanced / Movable Type...

Mandriva Linux Security Advisory : mediawiki (MDVSA-2013:290)

Updated mediawiki packages fix security vulnerabilities : Kevin Israel Wikipedia user PleaseStand identified and reported two vectors for injecting JavaScript in CSS that bypassed MediaWiki's blacklist CVE-2013-4567, CVE-2013-4568. Internal review while debugging a site issue discovered that...

IBM Sterling Connect:Enterprise跨站脚本漏洞

CVE ID:CVE-2013-6327 IBM Sterling Connect是一款点到点文件传输软件，可实现企业内和企业间的大容量、安全可靠的文件交付。 IBM Sterling Connect:Enterprise存在一个未明跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 IBM Sterling Connect:Enterprise 1.3.0.2 IBM Sterling Connect:Enterprise 1.4.0.0. 厂商补丁： IBM ----- IBM Sterling Connect...

Django Vulnerability Could Allow Attackers Access to Cookies

A security vulnerability in the web framework Django could make it easier for an attacker to steal a user’s cookie and log into their website even after they’ve logged out. The session invalidation vulnerability was discovered by G.S. McNamara, the same researcher who dug up a similar vulnerabili...

Joomla! Jomres组件'property_name'参数HTML注入漏洞

Bugtraq ID:61634 CVE ID:CVE-2013-3931 Joomla!是一套在国外相当知名的内容管理系统 当编辑属性细节时，通过"propertyname" POST参数传递的输入在用使用之前缺少过滤，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话 0 Jomres 7.3.0 component for Joomla! 厂商解决方案 Jomres 7.3.1 component for Joomla!已经修复此漏洞，建议用户下载更新： http://www.jomres.net/...

CVE-2013-2993: Improper Authentication

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.7 does not properly perform authentication for unspecified web services, which allows remote attackers to issue requests in the context of an arbitrary user's active session via unknown vectors...

DiscuzNT(3.5-3.9)未明跨站脚本漏洞

DiscuzNT是一款国内流行的论坛程序 DiscuzNT 3.5多处存在反射型跨站脚本漏洞最新版3.9仍存在，允许攻击者构建恶意WEB页，诱使用户解析，可获得敏感信息或劫持用户会话 0 DiscuzNT 3.5 - 3.9 厂商解决方案 目前没有详细解决方案提供 http://nt.discuz.net/...

PHP vulnerabilities of the session session hijacking-vulnerability warning-the black bar safety net

This article mainly introduced for the PHP website, Session hijacking. session hijacking is a more complex attack methods. Most of the Internet on the computer more there is to attack danger. This is a hijacking of the tcp Protocol, so almost all of the LAN, there is the hijacking possible. The...

phpMyAdmin 3.5. x HTML injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability version: phpMyAdmin 3.5. x Vulnerability description: Bugtraq ID:5 5 9 2 5 CVE ID:CVE-2 0 1 2-5 3 3 9 phpMyAdmin is a PHP-based MySQL management program. phpMyAdmin Trigger, Procedure and Event pages not correctly escape HTML output, use the special name creating/modifying a trigger...

FreeBSD : jenkins -- multiple vulnerabilities (d846af5b-00f4-11e2-b6d0-00e0814cab4e)

Jenkins Security Advisory reports : This advisory announces security vulnerabilities that were found in Jenkins core and several plugins. - The first vulnerability in Jenkins core allows unprivileged users to insert data into Jenkins master, which can lead to remote code execution. For this...

Drupal Exposed Filter Data 模块跨站脚本漏洞

Bugtraq ID:55423 Drupal是一款开源CMS，可以作为各种网站的内容管理平台。 Drupal Exposed Filter Data模块存在跨站脚本漏洞，允许攻击者通过未明参数注入任意WEB脚本或HTML，可导致敏感信息泄露或劫持用户会话。 0 Drupal Exposed Filter Data Module 6.x-1.x 厂商解决方案 Drupal Exposed Filter Data Module 6.x-1.2已经修复此漏洞，建议用户下载使用： http://drupal.org/node/1774636...

p5-RT-Authen-ExternalAuth -- privilege escalation

The RT development team reports: RT::Authen::ExternalAuth 0.10 and below for all versions of RT are vulnerable to an escalation of privilege attack where the URL of a RSS feed of the user can be used to acquire a fully logged-in session as that user. CVE-2012-2770 has been assigned to this...

CVE-2012-1174

The rmrfchildren function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."...

CVE-2012-1174

The CVE-2012-1174 entry concerns systemd's systemd-logind rm_rf_children() in util.c, which during user logout can allow local users to delete arbitrary files via a symlink race against unspecified files. A TOCTOU race condition in the logout cleanup process is the root cause. The vulnerability a...

CVE-2012-1174

The rmrfchildren function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."...