795 matches found
Moodle 2.3.x < 2.3.9 / 2.4.x < 2.4.6 / 2.5.x < 2.5.2 Multiple Vulnerabilities
Binary data 9418.prm...
phpMyAdmin 4.0.x < 4.0.10.15 / 4.4.x < 4.4.15.5 / 4.5.x < 4.5.5.1 Multiple XSS (PMASA-2016-11)
Binary data 9356.prm...
WordPress Kento Post Viewer Counter Plugin Multiple Vulnerabilities
WordPress Kento Post Viewer Counter Plugin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...
BlackBerry Enterprise Service (BES) Management Console 12.x < 12.4.1 Multiple XSS
According to its self-reported version, the BlackBerry Enterprise Service BES management console running on the remote host is prior to 12.4.1. It is, therefore, affected by the following vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of crafted admin...
SOL11772107 - BIG-IP and BIG-IQ cloud image vulnerability CVE-2016-2084
Note: Upgrading a vulnerable version to a not vulnerable version will not mitigate this issue; performing an upgrade on a vulnerable instance will cause the instance to remain vulnerable after the upgrade. Furthermore, any backups that are made from a vulnerable instance and restored to a not...
Petya in the end is what the Ghost-vulnerability warning-the black bar safety net
Late last month, German veteran security vendors Goethe Tower released a security report, the report pointed out the emergence of a named Petya in the new extortion Trojan. Then this new extortion Trojan the hell is going on? 0x01 Trojan overview The Trojan itself is actually technically is not...
Infor CRM 8.2.0.1136 - Multiple HTML Script Injection Vulnerabilities
Infor CRM 8.2.0.1136 Multiple HTML Script Injection Vulnerabilities Vendor: Infor Product web page: http://www.infor.com Affected version: 8.2.0.1136 Summary: Infor® CRM, formerly Saleslogix, is an award-winning customer relationship management CRM solution that provides a complete view of...
WordPress Calculated Fields Form 1.0.x Session Hijacking
Exploit Title: WordPress Calculated Fields Form =1.0.x - Httponly bypass & admin session hijackig. Date: 2016-02-22 Google Dork: Index of /wp-content/plugins/calculated-fields-form/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Plugin URI:...
Updated pitivi packages fix security vulnerability
In pitivi before 0.95, double-clicking a file in the user's media library with a specially-crafted path or filename allows for arbitrary code execution with the permissions of the user running Pitivi CVE-2015-0855...
SurgeFTP Multiple XSS Vulnerabilities (Nov 2015) - Active Check
SurgeFTP Server is prone to multiple stored cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
WordPress < 4.2.4 Multiple Vulnerabilities
Binary data 9031.prm...
zTree Cross Site Scripting Vulnerability
zTree is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ztreeproject:ztree";...
Centreon 2.6.x < 2.6.5 Multiple Vulnerabilities
According to its version number, the Centreon application hosted on the remote web server is version 2.6.x prior to 2.6.5. It is, therefore, affected by multiple vulnerabilities : - A cross-site request forgery XSRF vulnerability exists in the main.php script. A remote attacker can exploit this t...
Shopify: CSV Excel Macro Injection Vulnerability in export list of current users - app.shopify.com
Hi , I have found that when a user tries to Export list of current users who installed his apps through: https://app.shopify.com/services/partners/apiclients//exportinstalledusers the fields of the CSV file are not properly escaped. which makes them vulnerable to CSV Excel Macro Injection...
WordPress Pie Register Cross-Site Scripting Vulnerability
wordpress pie register plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Unity Settings Daemon privilege escalation
User's session access...
Centreon 2.6.1 Persistent Cross Site Scripting
Centreon 2.6.1 Stored Cross-Site Scripting Vulnerability Vendor: Centreon Product web page: https://www.centreon.com Affected version: 2.6.1 CES 3.2 Summary: Centreon is the choice of some of the world's largest companies and mission-critical organizations for real-time IT performance monitoring...
JVN#13684924: BBS X102 vulnerable to cross-site scripting
BBS X102 provided by guide-park.com is a bulletin board software. BBS X102 contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Consider stop using BBS X102 Ver1.03 Since the developer was unreachable, existence of any...
