M-TECH P-Synch 6.2.5 nph-psa.exe css Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/7745/info P-Synch does not adequately filter HTML code from URL parameters, making it prone to cross-site scripting attacks. Code will be executed in the security context of the system running P-Synch. This may enable a...

Sunway Force Control SCADA 6.1 SP3 httpsrv.exe Exploit

No description provided by source. Sunway Force Control SCADA httpsvr.exe Exploit Exploitable with simple SEH Overwrite technique Tested on XP SP0 English Probably will work on XP SP3 if you find none-safeseh dll for p/p/r pointer Canberk BOLAT | @cnbrkbolat cbolat.blogspot.com for fun ; notez:...

Battle.net Clan Script for PHP 1.5.1 - Remote SQL Injection Vulnerability

No description provided by source. script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass = $POST'pass';...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Zyxel P-660HW-T1 v3 wireless router allow remote attackers to hijack the authentication of administrators for requests that change the 1 wifi password or 2 SSID via a request to Forms/WLANGeneral1...

CVE-2014-4162

The CVE-2014-4162 issue affects Zyxel P-660HW-T1 (v3) wireless routers. The documented vulnerability is multiple Cross-Site Request Forgery (CSRF) flaws in the device’s web interface (Forms/WLAN_General_1) that allow remote attackers to hijack administrator authentication and perform changes to (...

PT-2014-5713

Name of the Vulnerable Software and Affected Versions Zyxel P-660HW-T1 version v3 Description The issue affects the Zyxel P-660HW-T1 wireless router, where multiple cross-site request forgery CSRF vulnerabilities exist. These vulnerabilities allow remote attackers to hijack the authentication of...

CVE-2014-4162: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Zyxel P-660HW-T1 v3 wireless router allow remote attackers to hijack the authentication of administrators for requests that change the 1 wifi password or 2 SSID via a request to Forms/WLANGeneral1...

CVE-2013-5760: Exposure of Sensitive Information to an Unauthorized Actor

QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php...

PT-2014-2955

Name of the Vulnerable Software and Affected Versions QNAP Photo Station versions prior to 4.0.3 build0912 Description The issue allows remote attackers to list OS user accounts via a request to "photo/p/api/list.php". Recommendations For versions prior to 4.0.3 build0912, update to firmware 4.0....

Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/22/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless Router...

Zyxel P-660HW-T1 Cross Site Request Forgery

Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless Router Tested on: Zyxel P-660HW-T1 v3 Wireless Router Patch/ Fix:...

ZYXEL P-660HW-T1 3 Wireless Router - Cross-Site Request Forgery

ZYXEL P-660HW-T1 3 Wireless Router - Cross-Site Request Forgery Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/22/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless...

Updated kernel-tmb packages fix multiple bugs and vulnerabilities

Updated kernel-tmb provides upstream 3.12.20 kernel and fixes the following security issues: Buffer overflow in the completeemulatedmmio function in arch/x86/kvm/ x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that...

CVE-2014-3846

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

CVE-2014-3846: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

PT-2014-5548

Name of the Vulnerable Software and Affected Versions Flying Cart affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the p parameter to "index.php" API endpoint. Recommendations At the moment, there is no...

RHEL 6 : libxml2 (RHSA-2014:0513)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0513 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. It was discovered that libxml2 loaded...

CentOS 6 : libxml2 (CESA-2014:0513)

Updated libxml2 packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Moderate: Red Hat Security Advisory: libxml2 security update

Updated libxml2 packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...