CVE-2015-2702

CVE-2015-2702 describes a Cross-Site Scripting (XSS) vulnerability in the Message Log of Websense TRITON AP-EMAIL (Email Security Gateway) and V-Series appliances. The issue allows remote attackers to inject arbitrary web script or HTML via the sender address in an email when viewing the audit lo...

CVE-2015-2702

Cross-site scripting XSS vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email...

Error messages of Websense Content Gateway are vulnerable to Cross-Site Scripting

------------------------------------------------------------------------ Error messages of Websense Content Gateway are vulnerable to Cross-Site Scripting ------------------------------------------------------------------------ Han Sahin, September 2014...

Websense Data Security DLP incident Forensics Preview is vulnerable to Cross-Site Scripting

------------------------------------------------------------------------ Websense Data Security DLP incident Forensics Preview is vulnerable to Cross-Site Scripting ------------------------------------------------------------------------ Han Sahin, September 2014...

Cross-Site Scripting vulnerability in Websense Explorer report scheduler

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Websense Explorer report scheduler ------------------------------------------------------------------------ Han Sahin, September 2014...

Websense Email Security vulnerable to persistent Cross-Site Scripting in audit log details view

------------------------------------------------------------------------ Websense Email Security vulnerable to persistent Cross-Site Scripting in audit log details view ------------------------------------------------------------------------ Han Sahin, September 2014...

Websense Appliance Manager Command Injection Vulnerability

Exploit for java platform in category web applications Abstract A command injection vulnerability was found in Websense Appliance Manager that allows an attacker to execute arbitrary code on the appliance. This issue can be combined with other vulnerabilities, like Cross-Site Scripting, to perfor...

Websense Reporting Cross Site Scripting

------------------------------------------------------------------------ Multiple Cross-Site Scripting vulnerabilities in Websense Reporting ------------------------------------------------------------------------ Han Sahin, September 2014...

Websense Explorer Missing Access Control

------------------------------------------------------------------------ Missing access control on Websense Explorer web folder ------------------------------------------------------------------------ Han Sahin, September 2014 ----------------------------------------------------------------------...

Mandriva Linux Security Advisory : qemu (MDVSA-2015:061)

Updated qemu packages fix multiple security vulnerabilities : Sibiao Luo discovered that QEMU incorrectly handled device hot-unplugging. A local user could possibly use this flaw to cause a denial of service CVE-2013-4377. Michael S. Tsirkin discovered that QEMU incorrectly handled vmxnet3 device...

Websense Appliance Manager Command Injection

------------------------------------------------------------------------ Command injection vulnerability in network diagnostics tool of Websense Appliance Manager ------------------------------------------------------------------------ Han Sahin, September 2014...

Websense Appliance Manager - Command Injection

Websense Appliance Manager - Command Injection Abstract A command injection vulnerability was found in Websense Appliance Manager that allows an attacker to execute arbitrary code on the appliance. This issue can be combined with other vulnerabilities, like Cross-Site Scripting, to perform a remo...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt42

3:11-alt42 built March 13, 2015 Sergey V Turchin in task 141821 March 13, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0332, CVE-2015-0333, CVE-2015-0334, CVE-2015-0335, CVE-2015-0336, CVE-2015-0337, CVE-2015-0338, CVE-2015-0339, CVE-2015-0340, CVE-2015-0341, CVE-2015-0342...

RedHat Update for httpd RHSA-2015:0325-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows 2012/2012R2 leaks memory when a hardware snapshot is created multiple times on a CSV

Challenge Windows 2012 / 2012 R2 Hyper-V hosts leak memory when a hardware snapshot is created/removed multiple times on a CSV with a hardware provider. Cause Windows 2012 / 2012 R2 Hyper-V hosts leak memory when a snapshot is created on a CSV using hardware provider. Due to the fact that only a...

Zeuscart 4 Cross Site Scripting / SQL Injection

Advisory: Multiple reflecting XSS-, SQLi and InformationDisclosure-vulnerabilities in Zeuscart v.4 Advisory ID: SROEADV-2015-12 Author: Steffen Rösemann Affected Software: Zeuscart v.4 Vendor URL: http://zeuscart.com/ Vendor Status: pending CVE-ID: will asked to be assigned after release on...

Zeuscart 4.0 - Multiple Vulnerabilities

Zeuscart 4.0 - Multiple Vulnerabilities Advisory: Multiple reflecting XSS-, SQLi and InformationDisclosure-vulnerabilities in Zeuscart v.4 Advisory ID: SROEADV-2015-12 Author: Steffen Rösemann Affected Software: Zeuscart v.4 Vendor URL: http://zeuscart.com/ Vendor Status: pending CVE-ID: will ask...

Zeuscart v.4 - Multiple Vulnerabilities

Exploit for php platform in category web applications Advisory: Multiple reflecting XSS-, SQLi and InformationDisclosure-vulnerabilities in Zeuscart v.4 Author: Steffen Rösemann Affected Software: Zeuscart v.4 Vendor URL: http://zeuscart.com/ Vendor Status: pending CVE-ID: will asked to be assign...

StaMPi - Local File Inclusion

Exploit Title: StaMPi - Local File Inclusion Google Dork: "Designed by StaMPi" inurl:fotogalerie.php Date: 16/2/15 Author : e . V . E . L Contact: [email protected] PoC: http://site.com/path/fotogalerie.php?id=../../../../../../../../../../etc/passwd%00...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt41

3:11-alt41 built Feb. 6, 2015 Sergey V Turchin in task 139918 Feb. 6, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0313, CVE-2015-0314, CVE-2015-0315, CVE-2015-0316, CVE-2015-0317, CVE-2015-0318, CVE-2015-0319, CVE-2015-0320, CVE-2015-0321, CVE-2015-0322, CVE-2015-0323,...