PT-2012-4294

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 20.0.1132.43 Description A buffer overflow issue exists in the JS API within the PDF functionality. This could allow remote attackers to cause a denial of service or possibly have other unspecified impacts via...

JW Player 5.9 Cross Site Scripting / Content Spoofing

Hello list! I want to warn you about security vulnerabilities in JW Player. These are Content Spoofing and Cross-Site Scripting vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are JW Player 5.9.2156 and 5.9.2206, except one vulnerability and...

JW Player 5.9 Cross Site Scripting / Content Spoofing

Exploit for multiple platform in category web applications Hello list! I want to warn you about security vulnerabilities in JW Player. These are Content Spoofing and Cross-Site Scripting vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are JW Play...

EZEIP3. 0 multi-page upload validation vulnerability-vulnerability warning-the black bar safety net

Modify the IE browser security settings, the modulation is the highest, however, prohibit the js execution. 2. Open the Modify upload Type page, add aspx type, click Save, and then open the upload page to upload There is a problem of the upload Type page: http://www.XXX.com/...

PJBlog 3.2.9.518 getwebshell exploit-vulnerability warning-the black bar safety net

Author: do not go to the bell Version: PJblog 3.2.9.518（2012/5/9, When is the latest version The exploit conditions: 1, Using full static mode by default is a fully static mode 2, The user can post the default regular users can not post, so a little tasteless） Vulnerability description: PJblog...

CVE-2012-1190

Cross-site scripting XSS vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted database name...

CVE-2012-1190: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted database name...

CVE-2012-0468: Improper Restriction of Operations within the Bounds of a Memory Buffer

The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service assertion failure and memory corruption or possibly execute arbitrary code via vectors related to jsval.h and the js::arrayshift...

PT-2012-2589

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 11.0 Thunderbird versions 5.0 through 11.0 SeaMonkey versions prior to 2.9 Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related t...

CVE-2012-2400

Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vectors...

CVE-2012-2400

Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vectors...

PT-2012-4013

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 3.3.2 Description The issue concerns an unspecified vulnerability in the wp-includes/js/swfobject.js file. The impact and attack vectors of this issue are unknown. Recommendations For versions prior to 3.3.2, update...

CVE-2012-2400: Undefined Security Weakness

Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vectors...

EZEIP3. 0 multi-page upload validation vulnerability and fix-vulnerability warning-the black bar safety net

Modify the IE browser security settings, the modulation is the highest, however, prohibit the js execution. 2. Open the Modify upload Type page, add aspx type, click Save, and then open the upload page to upload There is a problem of the upload Type page:...

Search for a cms with php through the kill-vulnerability warning-the black bar safety net

Author: z2681 From: 90sec Vulnerability files to the admin directory adminloginstate.php Look at the code ifempty$COOKIE'SAdminID' echo "scriptwindow. location='adminlogin.php'/script"; exit; elseif$COOKIE'SLogin'!= md5$COOKIE'SAdminID'.$ COOKIE'SAdminUserName'.$ COOKIE'SAdminPassWord'.$...

PT-2012-3038

Name of the Vulnerable Software and Affected Versions Cyberoam Central Console versions 2.00.2 Description A directory traversal issue exists in the WWWHELP Service, specifically in the js/html/wwhelp.htm file, allowing remote attackers to include and execute arbitrary local files. This is achiev...

CVE-2012-1047: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the WWWHELP Service js/html/wwhelp.htm in Cyberoam Central Console CCC 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter in an Onlinehelp action...

Whois Cart Billing - Multiple Web Vulnerabilities

Document Title: =============== Whois Cart Billing - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=343 Release Date: ============= 2011-12-22 Vulnerability Laboratory ID VL-ID: ==================================== 343 Produ...

PT-2011-5097

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue allows remote attackers to obtain potentially sensitive information by reading certain web pages, specifically those containing e-mail addresses not intended for...

CVE-2011-4767: Exposure of Sensitive Information to an Unauthorized Actor

The Site Editor aka SiteBuilder feature in Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a...