justin c. klein keane vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site scripting (XSS) vulnerabilities in the web client in Transmission prior to 2.61 allow remote malicious users to inject arbitrary web script or HTML via the (1) comment, (2) created by, or (3) name field in a torrent file.

Cross-site scripting (XSS) vulnerability in the Sections module 5.x prior to 5.x-1.3 and 6.x prior to 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name (aka the Name field...

Alexander Hass Sections Module 5.x-1.2 Alexander Hass Sections Module 6.x-1.x-dev Alexander Hass Sections Module 6.x-1.1 Alexander Hass Sections Module 6.x-1.0 Alexander Hass Sections Module 5.x-1.x-dev Alexander Hass Sections Module 6.x-1.2 Alexander Hass Sections Module 5.x-1.1 Alexander Hass Sections Module 5.x-1.0

2 EDB exploits

Drupal version 6.16 with OG Menu version 6.x-2.0 suffers from a cross site scripting vulnerability.

Cross-site scripting (XSS) vulnerability in the Context module prior to 6.x-2.0-rc4 for Drupal allows remote authenticated users, with Administer Blocks privileges, to inject arbitrary web script or HTML via a block description.

Steven Jones Context 6.x-2.0 Steven Jones Context

Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x prior to 5.x-1.1 for Drupal allow remote authenticated users, with "update ajax checklists" permissions, to execute arbitrary SQL commands via a save operation, r...

Drupal Ajax Checklist 5.x-1.0

1 EDB exploit

The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the (1) encoding directive and (2) valid_elements attribute, which allows malicious users to conduct cross-site scripting (XSS) attacks via application-specific vectors, as demonstrated u...

Tinymce Tinymce 3.5.8

Cross-site scripting (XSS) vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote malicious users to inject arbitrary web script or HTML via a crafted map name.

Ithoughts Ithoughtshd 4.19

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote malicious users to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file.

Ithoughts Ithoughtshd 4.19

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote malicious users to cause a denial of service (disk consumption) by uploading a large file.

Ithoughts Ithoughtshd 4.19

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook