han sahin vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress prior to 4.6.1 might allow remote malicious users to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a c...

Wordpress Wordpress

11 Github repositories

Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in EMC M&R (aka Watch4Net) prior to 6.5u1 and ViPR SRM prior to 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafte...

Emc Watch4net Emc Vipr Srm

EMC M&R (aka Watch4Net) prior to 6.5u1 and ViPR SRM prior to 3.6.1 might allow remote malicious users to obtain cleartext data-center discovery credentials by leveraging certain SRM access to conduct a decryption attack.

Emc Watch4net Emc Vipr Srm

1 EDB exploit

Directory traversal vulnerability in EMC M&R (aka Watch4Net) prior to 6.5u1 and ViPR SRM prior to 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL.

Emc Vipr Srm Emc Watch4net

1 EDB exploit

SQL injection vulnerability in Synology Video Station prior to 1.5-0763 allows remote malicious users to execute arbitrary SQL commands via the id parameter to watchstatus.cgi.

Synology Video Station

1 EDB exploit

Synology Video Station prior to 1.5-0763 allows remote malicious users to execute arbitrary shell commands via shell metacharacters in the subtitle_codepage parameter to subtitle.cgi.

Synology Video Station

1 EDB exploit

Citrix Command Center prior to 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote malicious users to obtain credentials via a direct request to conf/securitydbData.xml.

Citrix Command Center 5.2 Citrix Command Center 5.1

1 EDB exploit

The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances prior to 7.8.4 Hotfix 02 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the "se...

Websense V-series Appliances Websense Triton 7.8.3

1 EDB exploit

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.

Emc Secure Remote Services 3.02 Emc Secure Remote Services 3.03

The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote malicious users to execute arbitrary OS commands via unspecified vectors.

Emc Secure Remote Services 3.02 Emc Secure Remote Services 3.03

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook