459 matches found
Arbitrary file deletion vulnerability in YidaCMS Web Management System version JS1.8.0
YidaCMS website management system is a simple, practical and efficient website builder. YidaCMS website management system JS1.8.0 version exists arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete any file on the website...
Arbitrary File Creation Vulnerability in ourphp v1.8.0
Ourphp website building system is a php+mysql website building system. ourphp v1.8.0 version of the existence of arbitrary file creation vulnerability, the attacker can be edited through the background of the online template comes with the creation point to create any suffix file and write Trojan...
WordPress tabs-responsive plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site. tabs-responsive plugin is used in which a tab to add plug-ins. A cross-site scripting vulnerability exists in...
WordPress Elementor Page Builder <=1.7.12 - Authenticated Unrestricted Editing vulnerability
Authenticated Unrestricted Editing vulnerability found by James Golovich in WordPress Elementor Page Builder version =1.7.12. Solution Update the WordPress Elementor Page Builder to the latest available version at least 1.8.0...
ONOS Cross-Site Scripting Vulnerability
ONOS is an open source SDN network operating system. A cross-site scripting vulnerability exists in ONOS versions 1.8.0, 1.9.0, and 1.10.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
Unspecified Vulnerability in ONOS
ONOS is a new carrier-grade SDN network operating system. An unspecified vulnerability exists in ONOS versions 1.8.0, 1.9.0, and 1.10.0. An attacker can exploit the vulnerability to make the Netty payload size unlimited...
ALPINE-CVE-2017-7555
Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution...
Apache Traffic Control Denial of Service Vulnerability
Apache Traffic Control is a highly efficient and scalable content delivery network controller from the Apache Apache Software Foundation. A denial of service vulnerability exists in Apache Traffic Control versions 1.8.0 and 2.0.0 RC0. An attacker could exploit this vulnerability to cause a denial...
WordPress Raygun4WP Plugin Cross-Site Scripting Vulnerability
WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language. The platform supports personal blog sites on servers running PHP and MySQL.Raygun4WP plugin is a plugin that integrates Raygun into WordPress sites. A cross-site scripting vulnerability exists i...
Botan Integer Overflow Vulnerability
Botan is a library of cryptographic algorithms in the C++ programming language that supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. An integer overflow vulnerability exists in Botan versions 1.8.0 through 1.11.33. An attacker could exploit this vulnerability to cause memory corruption...
Oxwall (build 9900) has multiple vulnerabilities
Oxwall is a free, open source, community software platform based on PHP and MySQL. A cross-site scripting and URL redirection vulnerability exists in Oxwall version 1.8.0 build 9900. An attacker can exploit this vulnerability to perform unauthorized operations and view other user account...
libupnp Heap Buffer Overflow Vulnerability
libupnp is a portable open source provides an API and open source code UPnP development kit . A remote heap buffer overflow vulnerability exists in libupnp versions 1.6.19 and 1.8.0. Due to the program failing to perform proper boundary checks on user-submitted input. An attacker can exploit this...
Updated ruby-rest-client packages fix security vulnerabilities
Updated ruby-rest-client packages fix security vulnerability: When Ruby rest-client processes an HTTP redirection response, it blindly passes along the values from any Set-Cookie headers to the redirection target, regardless of domain, path, or expiration. This can be used in a session fixation...
Oracle Java SE JRE Unspecified Code Execution Vulnerability (Apr 2015) - Windows
Oracle Java SE JRE is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
sudo: authentication bypass via reset system clock
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch...
PT-2008-2243 · WordPress · Dmsguestbook
Name of the Vulnerable Software and Affected Versions: DMSGuestbook plugin for WordPress versions 1.7.0 and 1.8.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the gbname, gbemail, gburl, and gbmsg parameters to unspecified programs, potentially leading...
AstonSoft DeepBurner 1.8.0 - '.dbr' File Parsing Buffer Overflow
/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 18\12\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...
[SA19044] CrossFire "oldsocketmode" Denial of Service Vulnerability
TITLE: CrossFire "oldsocketmode" Denial of Service Vulnerability SECUNIA ADVISORY ID: SA19044 VERIFY ADVISORY: http://secunia.com/advisories/19044/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: CrossFire 1.x http://secunia.com/product/8396/ DESCRIPTION: Luigi Auriemma has...
XChat 1.8.0/2.0.8 socks5 Remote Buffer overflow Exploit
Exploit for linux platform in category remote exploits ======================================================= XChat 1.8.0/2.0.8 socks5 Remote Buffer overflow Exploit ======================================================= / X-Chatv1.8.0 - v2.0.8: socks-5 remote buffer overflow exploit. by:...