136 matches found
Design/Logic Flaw
In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations...
Cross site scripting
Cross-site scripting XSS vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering...
IVPN 2.6.6120.33863 Privilege Escalation
Exploit IVPN Client for Windows 2.6.6120.33863 Privilege Escalation Date: 06.02.2017 Software Link: https://www.ivpn.net/ Exploit Author: Kacper Szurek Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ Category: local 1. Description It is possible to run openvpn as...
WordPress Woocommerce 2.6.2 API Cross Site Scripting
------------------------------------------------------------------------ Persistent Cross-Site Scripting in Woocommerce WordPress plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...
Centreon 'POST' Parameter File Upload Vulnerability
Centreon is prone to file upload vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:centreon:centreon"; ifdescription...
DEBIAN-CVE-2015-8396
Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM aka GDCM before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, which triggers a buffer overflow...
Centreon 2.6.x < 2.6.2 File Upload RCE
According to its version number, the Centreon application hosted on the remote web server is 2.6.x prior to 2.6.2. It is, therefore, affected by a remote code execution vulnerability due to improper sanitization of user-uploaded files via the main.php script. An authenticated, remote attacker can...
PHPMyAdmin 2.x Convcharset Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12982/info phpMyAdmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'convcharset' parameter. phpMyAdmin versions prior to 2.6.2-rc1 are affected by this...
Profense Web Application Firewall 2.6.2 - CSRF/XSS Vulnerabilities
No description provided by source. Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html Defenses against all OWASP Top Ten vulnerabilities Too bad it doesn't defend its...
Esqlanelapse Software Project <= 2.6.2 Insecure Cookie Handling Vuln
No description provided by source. Esqlanelapse Software Project version: 2.6.1 & 2.6.2 Insecure Cookie Handling Vulnerability donwload: http://sourceforge.net/project/showfiles.php?groupid=118575&packageid=129141&releaseid=519061 ----------------------------------------------------------...
[KIS-2014-05] Dotclear <= 2.6.2 (XML-RPC Interface) Authentication Bypass Vulnerability
------------------------------------------------------------------------- Dotclear = 2.6.2 XML-RPC Interface Authentication Bypass Vulnerability ------------------------------------------------------------------------- - Software Link: http://dotclear.org/ - Affected Versions: Version 2.6.2 and...
[KIS-2014-07] Dotclear <= 2.6.2 (categories.php) SQL Injection Vulnerability
-------------------------------------------------------------- Dotclear = 2.6.2 categories.php SQL Injection Vulnerability -------------------------------------------------------------- - Software Link: http://dotclear.org/ - Affected Versions: Version 2.6.2 and probably prior versions. -...
Dotclear 2.6.2 SQL Injection
-------------------------------------------------------------- Dotclear itemid 76. $core-blog-updCategoryPosition$category-itemid, $category-left, $category-right; 77. 78. 79. 80. dcPage::addSuccessNotice'Categories have been successfully reordered.'; 81. http::redirect'categories.php'; 82. User...
CVE-2014-1613
Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized object in the dcpasswd cookie to a password-protected page, which is not properly handled by 1 inc/public/lib.urlhandlers.php or 2 plugins/pages/public.php...
TaxiMonger for Android - 'name' HTML Injection
source: https://www.securityfocus.com/bid/60566/info TaxiMonger for Android is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser,...
Acuity CMS 2.6.2 - adminfile_managerfile_upload_submit.asp Multiple Arbitrary File Upload Code Executions
Acuity CMS 2.6.2 - adminfilemanagerfileuploadsubmit.asp Multiple Arbitrary File Upload Code Executions source: https://www.securityfocus.com/bid/53616/info Acuity CMS is prone to a directory-traversal vulnerability and an arbitrary-file-upload vulnerability. An attacker can exploit these issues t...
Acuity CMS 2.6.2 - Username Cross-Site Scripting
Acuity CMS 2.6.2 - Username Cross-Site Scripting source: https://www.securityfocus.com/bid/53048/info Acuity CMS is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...
Acuity CMS 2.6.x Cross Site Scripting
OVERVIEW Acuity CMS 2.6.x ASP-based versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Acuity CMS is a powerful but simple, extremely easy to use, low priced, easy to deploy content management system. It is a leader in its price and feature class. 3. VULNERABILITY DESCRIPTION...
sSMTP 2.62 - standardize() Buffer Overflow
sSMTP 2.62 - standardize Buffer Overflow source: https://www.securityfocus.com/bid/41965/info sSMTP is prone to a remote buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result ...
RedHat Security Advisory RHSA-2009:1453
The remote host is missing updates announced in advisory RHSA-2009:1453. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Info/Query IQ is an Extensible Messaging and Presence Protocol XMPP specific request-respons...