|
|
Colapse all |
Post message
Stored XSS Vulnerability in Google Analytics by Yoast Wordpress Plugin 2015-03-05 kingkaustubh me com Stored XSS Vulnerability in Google Analytics by Yoast Wordpress Plugin . contents:: Table Of Content Overview Title :Stored XSS Vulnerability in Google Analytics by Yoast Wordpress Plugin Author: Kaustubh G. Padwad, Rohit Kumar. Plugin Homepage: https://yoast.com/wordpress/plugins/google-analytic [ more ] [ reply ] Last Call - Workhsops of CISTI'2015: 10th Iberian Conference on Information Systems and Technologies 2015-03-05 ML (marialemos72 gmail com) Ultimate PHP Board (UPB) 2.2.7 Cross Site Scripting Vulnerability 2015-03-05 prathan ptr gmail com = Ultimate PHP Board (UPB) 2.2.7 Cross Site Scripting Vulnerability = ----------------------------------------------------------------------- Vendor Homepage : http://www.myupb.com Software Link : http://downloads.sourceforge.net/project/textmb/UPB/UPB%202.2.7/upb2.2.7 .zip Version : 2.2.7 [ more ] [ reply ] [security bulletin] HPSBST03265 rev.1 - HP VMA SAN Gateway running Bash Shell and OpenSSL, Remote Denial of Service (DoS), Unauthorized Access, and Disclosure of Information 2015-03-03 security-alert hp com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emr_na-c04574224 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04574224 Version: 1 HPSBST03265 r [ more ] [ reply ] [security bulletin] HPSBST03274 rev.1 - HP XP P9000 Command View Advanced Edition Software Online Help for Windows and Linux, Remote Cross-site Scripting (XSS) 2015-03-02 security-alert hp com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emr_na-c04582371 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04582371 Version: 1 HPSBST03274 re [ more ] [ reply ] [CVE-2015-1583] ATutor LCMS - CSRF Vulnerability in Version 2.2 2015-02-28 edricteo outlook sg [CVE-2015-1583] ATutor LCMS - CSRF Vulnerability in Version 2.2 ---------------------------------------------------------------- Product Information: Software: ATutor LCMS Tested Version: 2.2, released 25.8.2014 Vulnerability Type: Cross-Site Request Forgery, CSRF (CWE-352) Download link: http:// [ more ] [ reply ] BEdita CMS - XSS & CSRF Vulnerability in Version 3.5.0 2015-02-28 edricteo outlook sg BEdita CMS - XSS & CSRF Vulnerability in Version 3.5.0 ---------------------------------------------------------------- Product Information: Software: BEdita CMS Tested Version: 3.5.0, released 19.1.2015 Vulnerability Type: Cross-Site Scripting (CWE-79) & Cross-Site Request Forgery, CSRF (CWE-352 [ more ] [ reply ] SEC Consult SA-20150227-0 :: Multiple vulnerabilities in Loxone Smart Home 2015-02-27 SEC Consult Vulnerability Lab (research sec-consult com) Wordpress Media Cleaner Plugin - XSS Vulnerability 2015-02-27 iletisim ismailsaygili com tr # Exploit Title: Wordpress Media Cleaner - XSS # Author: İsmail SAYGILI # Web Site: www.ismailsaygili.com.tr # E-Mail: iletisim (at) ismailsaygili.com (dot) tr [email concealed] # Date: 2015-02-26 # Plugin Download: https://downloads.wordpress.org/plugin/wp-media-cleaner.2.2.6.zip # Version: 2.2.6 # Vulnerable File(s): [ more ] [ reply ] [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags 2015-02-27 Jeremy Boynes (jboynes apache org) CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags Severity: Important Vendor: The Apache Software Foundation Versions Affected: Standard Taglibs 1.2.1 The unsupported 1.0.x and 1.1.x versions may also be affected. Description: When an application uses <x:parse> or <x:transform> tags t [ more ] [ reply ] HelpDezk 1.0.1 Multiple Vulnerabilities 2015-02-26 dennis veninga gmail com # Exploit Title: HelpDezk 1.0.1 Multiple Vulnerabilities # Google Dork: "intext: helpdezk-community-1.0.1" # Date: 26-2-2015 # Exploit Author: Dennis Veninga # Vendor Homepage: http://www.helpdezk.org/ # Vendor contacted: 26-2-2015 # Version: 1.0.1 # Tested on: Firefox 36 & Chrome 38 / W8.1-x64 Hel [ more ] [ reply ] Cross-Site-Scripting (XSS) in tcllib's html::textarea 2015-02-26 Ben Fuhrmannek (bef sektioneins de) [SECURITY] [DSA 3176-1] request-tracker4 security update 2015-02-26 Salvatore Bonaccorso (carnil debian org) Wireless File Transfer Pro Android - Multiple CSRF Vulnerabilities 2015-02-26 Vulnerability Lab (research vulnerability-lab com) Document Title: =============== Wireless File Transfer Pro Android - CSRF Vulnerabilities References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1437 Release Date: ============= 2015-02-25 Vulnerability Laboratory ID (VL-ID): ============================= [ more ] [ reply ] Data Source: Scopus CMS - SQL Injection Web Vulnerability 2015-02-26 Vulnerability Lab (research vulnerability-lab com) Document Title: =============== Data Source: Scopus CMS - SQL Injection Web Vulnerability References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1436 Release Date: ============= 2015-02-25 Vulnerability Laboratory ID (VL-ID): ============================= [ more ] [ reply ] DSS TFTP 1.0 Server - Path Traversal Vulnerability 2015-02-26 Vulnerability Lab (research vulnerability-lab com) Document Title: =============== DSS TFTP 1.0 Server - Path Traversal Vulnerability References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1440 Release Date: ============= 2015-02-26 Vulnerability Laboratory ID (VL-ID): ==================================== [ more ] [ reply ] D-Link and TRENDnet 'ncc2' service - multiple vulnerabilities 2015-02-26 Peter Adkins (peter adkins kernelpicnic net) >> D-Link and TRENDnet 'ncc2' service - multiple vulnerabilities Discovered by: ---- Peter Adkins <peter.adkins (at) kernelpicnic (dot) net [email concealed]> Access: ---- Local network; unauthenticated access. Remote network; unauthenticated access*. Remote network; 'drive-by' via CSRF. Tracking and identifiers: ---- CVE - [ more ] [ reply ] [slackware-security] mozilla-firefox (SSA:2015-056-01) 2015-02-26 Slackware Security Team (security slackware com) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] mozilla-firefox (SSA:2015-056-01) New mozilla-firefox packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/p [ more ] [ reply ] |
|
Privacy Statement |
Hash: SHA1
- ------------------------------------------------------------------------
-
Debian Security Advisory DSA-3180-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Alessandro Ghedini
March 05, 2015
[ more ] [ reply ]