CVE-2015-2790 30/03/2015
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image. (CVSS:4.3) (Last Update:2016-12-02)
CVE-2015-2789 30/03/2015
Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder. (CVSS:4.4) (Last Update:2016-12-02)
CVE-2015-2701 25/03/2015
Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests that change a user password via a request to profiles-update/. (CVSS:6.8) (Last Update:2016-12-02)
CVE-2015-2680 23/03/2015
Cross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request in the users page to gxadmin/index.php. (CVSS:6.8) (Last Update:2016-12-02)
CVE-2015-2679 23/03/2015
Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php or (2) username parameter to gxadmin/login.php. (CVSS:7.5) (Last Update:2016-12-02)
CVE-2015-2678 23/03/2015
Multiple cross-site scripting (XSS) vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter in the categories page to gxadmin/index.php or (2) page parameter to index.php. (CVSS:4.3) (Last Update:2016-12-02)
CVE-2015-2564 20/03/2015
SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to users-edit.php. (CVSS:6.5) (Last Update:2015-03-23)
CVE-2015-2275 12/03/2015
Cross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parameters[data][7][title] parameter in a saveImageData action to index.php/AJAXProxy. (CVSS:4.3) (Last Update:2016-12-02)
CVE-2015-2218 05/03/2015
Multiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in wonderpluginaudio.php in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) item[name] or (2) item[customcss] parameter in a wonderplugin_audio_save_item action to wp-admin/admin-ajax.ph […]
CVE-2015-2216 05/03/2015
SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prod_id parameter. (CVSS:7.5) (Last Update:2016-12-02)

cxsecurity.com

SKH - W3Layouts CMS SQLi Vulnerability 22/07/2017
Topic: SKH - W3Layouts CMS SQLi Vulnerability Risk: Medium Text:+++++++++++++++++++++++++ Google Dork : intext:"Designed by SKH - W3Layouts"" Tested on : Windows - Havij 1.16 Pro ********...
VICIdial user_authorization Unauthenticated Command Execution 22/07/2017
Topic: VICIdial user_authorization Unauthenticated Command Execution Risk: High Text:## # This module requires Metasploit: http://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-f...
Easy Chat Server User Registeration Buffer Overflow 22/07/2017
Topic: Easy Chat Server User Registeration Buffer Overflow Risk: High Text:## # This module requires Metasploit: http://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-f...
IPFire proxy.cgi Remote Code Execution 22/07/2017
Topic: IPFire proxy.cgi Remote Code Execution Risk: High Text:## ## This module requires Metasploit: http://metasploit.com/download ## Current source: https://github.com/rapid7/metasploit...
Virtual Postage (VPA) 1.0 Man-In-The-Middle Code Execution 22/07/2017
Topic: Virtual Postage (VPA) 1.0 Man-In-The-Middle Code Execution Risk: Medium Text:# Exploit Title: Virtual Postage (VPA) - Remote Code Execution via MITM # Date: 20/Jul/17 # Exploit Author: MaXe # Vendor Ho...

Commentaires récents

Créez un site Web ou un blog gratuitement sur WordPress.com.

A.Riccobene, security evangelist, security addict, a man who humbly participating in knowledge.

Créez un site Web ou un blog gratuitement sur WordPress.com.

Publier sur

Annuler