Wordpress admin-font-editor plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site. admin-font-editor is one of the backend font editing plugin. Wordpress admin-font-editor plugin version 1.8 has a...

yiqicms system delete_file.php has arbitrary file deletion vulnerability

Yiqicms is the first marketing enterprise website system completely based on SEO-friendly development, using PHP+Mysql open source building system. Yiqicms 1.8 version of the background there are arbitrary file deletion vulnerability , because the program does not limit the deletion of directorie...

LazyMap - Automate NMAP Scans and Generate Custom Nessus Policies Automatically

Automate NMAP scans and custom Nessus polices. Installing git clone https://github.com/commonexploits/port-scan-automation.git How To Use ./lazymap.sh Features Discovers live devices Auto launches port scans on only the discoverd live devices Can run mulitple instances on multiple adaptors at onc...

Django Security Bypass Vulnerability (CNVD-2016-01467)

Django is a set of Django Software Foundation based on the Python language open source Web application framework. The framework includes object-oriented mapper , view system , template system and so on. A security vulnerability exists in Django versions prior to 1.9.3 and versions 1.6 through 1.8...

Free WMA MP3 Converter Buffer Overflow Vulnerability

Free WMA MP3 Converter is a free WMA & MP3 converter to convert WMA to MP3, MP3 to WMA and more. A local buffer overflow vulnerability exists in Free WMA MP3 Converter v1.8. Local attackers use this vulnerability to process windows software, overwrite registers, and elevate its privileges...

Well-known Forum systems MyBB is burst 0day vulnerabilities-vulnerability warning-the black bar safety net

MyBB is very good Free Forum software, the biggest feature is simple but the functionality is surprisingly powerful. Multi-language support, may be respectively provided at the front Desk the background of the language, each user can set their own use what kind of language to access the forums,...

PT-2015-1974

Name of the Vulnerable Software and Affected Versions Django versions 1.4.x through 1.4.21 Django versions 1.7.x through 1.7.9 Django versions 1.8.x through 1.8.3 Description The issue is related to a resource management error in the contrib.sessions.middleware.SessionMiddleware component of the...

PYSEC-2015-21

validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors...

PYSEC-2015-19

The session.flush function in the cacheddb backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the logsurfer+ package up to version 1.8 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Django Cross-Site Scripting Vulnerability (CNVD-2015-01672)

Django is Django Software Foundation of an open source Web application framework using the Python language . The framework includes an object-oriented mapper, view system, template system and so on. A cross-site scripting vulnerability exists in the 'contents' function in the admin/helpers.py fil...

Oracle Java 1.8.x Detection

Binary data 8895.prm...

Free WMA MP3 Converter 1.8 (.wav) - Buffer Overflow

No description provided by source. !/usr/bin/env python Free WMA MP3 Converter 1.8 Buffer Overflow Version:1.8 Build 20140226 Author:metacom Date:10.23.2014 Download:http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm Tested on:Win7-En 32bit - Win8.1-DE 64bit import struct def...

PHPNet <= 1.8 (ler.php) SQL Injection

No description provided by source. ?php Exploit Title: PHPNet = 1.8 ler.php SQL Injection Exploit Author: WhiteCollarGroup Date: 06th 06 2012 Vendor homepage: http://www.phpnet.com.br/ Software Link: http://phpbrasil.com/script/Wb03ErMczAho/phpnetartigos Google Dork: intext:Powerd by Nielson Roch...

iSupport <= 1.8 XSS/LFI Exploit

No description provided by source. --------------------------------------------- ++ iSupport = 1.8 ++ XSS/Local File Include Exploit --------------------------------------------- Discovered by : Stink' & Essandre DATE : 16/12/09 ////////////////////////////////////////////////////////////////////...

IDevSpot iSupport 1.8 open_tickets.php ticket_id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

Wireshark Denial of Service and Code Execution Vulnerabilities-01 (Mar 2014) - Windows

Wireshark is prone to denial of service DoS and remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Wireshark 1.8.x < 1.8.13 Multiple Vulnerabilities

The installed version of Wireshark 1.8.x is a version prior to 1.8.13. It is, therefore, affected by denial of service vulnerabilities in the following dissectors : - NFS dissector CVE-2014-2281 - RLC dissector CVE-2014-2283 Additionally, a flaw exists in the 'mpegread' function in the MPEG file...

Ruby Interpreter Heap Overflow Vulnerability (Nov 2013) - Windows

Ruby Interpreter is prone to a heap overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ruby-lang:ruby"; if...

wireshark: MQ dissector crash (wnpa-sec-2013-58, upstream bug 9079)

The dissectmqrr function in epan/dissectors/packet-mq.c in the MQ dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not properly determine when to enter a certain loop, which allows remote attackers to cause a denial of service application crash via a crafted packet...