2719 matches found
Serv-U Web客户端跨站脚本执行漏洞
BUGTRAQ ID: 50503 Serv-U包含简单的基于浏览器的传输客户端。 Serv-U Web Client在实现上存在跨站脚本执行漏洞，某些发给Web客户端的非特定输入在返回给用户之前没有正确过滤，攻击者可利用此漏洞在受影响站点的用户浏览器中执行任意HTML和脚本代码，窃取cookie身份验证凭证。 RhinoSoft Serv-U Web Client 9.1 .0 RhinoSoft Serv-U Web Client 9.0.0.5 RhinoSoft Serv-U Web Client 11.0.0.3 厂商补丁： RhinoSoft ---------...
CVE-2010-5002
Cross-site scripting XSS vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web script or HTML via the u parameter...
serv-u latest pass to kill all versions of 0day-vulnerability warning-the black bar safety net
serv-u latest pass to kill all versions provide the right code. 1 0. x can also mention that yesterday I success 1 1 version, Do not directly add the system account or to execute commands, with the Add FTP account in the CMD the following connection right. Or error-prone. EXP: style type="text/cs...
U-AIR issue: Virtual Lab Manager is disconnected
Challenge The following error message occurs when running the U-AIR wizard: Virtual Lab Manager is disconnected The following error messages can be found in the Veeam.AIR. log file: timestamp Error Virtual Lab Manager is disconnected. Veeam.Backup.Common.CommonException timestamp Error Server sta...
Unfixed XSS vulnerability at u-store.businesspark.jp
Security researcher p0pc0rn, has submitted on 08/04/2011 a cross-site-scripting XSS vulnerability affecting u-store.businesspark.jp, which at the time of submission ranked 4757510 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It i...
Democrat website Youngdemocrat.org hacked by ALLAH`U EKBER-Team !
Democrat website Youngdemocrat.org hacked by ALLAHU EKBER-Team ! A website of the Democrat Party, set up to attract young people, was hacked since Sunday night. Reports said an anonymous hacker broke into "www.youngdemocrat.org" while Prime Minister and Democrat leader Abhisit Vejjajiva was using...
Yahoo India R&D to Host 'HACK U' for IIT Kharagpur Students !
Yahoo! India R&D will be hosting 'HACK U'– the University Hack Day event for IIT Kharagpur students on campus between 17 and 20 March. Close to 250 students are expected to participate in this four day event of learning, hacking and fun, which is part of Yahoo!'s on-going commitment to nurture...
Yahoo! Announces Hack U™ Spring 2011 Series !
Yahoo! is proud to announce the Hack U™ Spring 2011 calendar of events. Join Yahoo! web experts for a week of learning, hacking and fun! You'll hear interesting tech talks, hacking tips and lessons, and get hands-on coding workshops where you'll work with cutting-edge technology. The week's event...
Alt-N WebAdmin Source Code Disclosure
Vulnerable: v3.3.3 Vendor: www.altn.com Category: Environment Error Vulnerable ======== Alt-N WebAdmin 3.3.3 U-Mail for Windows V9.8 U-Mail GateWay for Windows V9.8 Details: ========= A source code disclosure vulnerability exists with Alt-N WebAdmin Server. Remote attacker can be exploited to...
Alt-N WebAdmin 3.3.3 Source Code Disclosure
Vulnerable: v3.3.3 Vendor: www.altn.com Category: Environment Error Vulnerable ======== Alt-N WebAdmin 3.3.3 U-Mail for Windows V9.8 U-Mail GateWay for Windows V9.8 Details: ========= A source code disclosure vulnerability exists with Alt-N WebAdmin Server. Remote attacker can be exploited to...
Alt-N WebAdmin 3.3.3 - Remote Source Code Information Disclosure
Alt-N WebAdmin 3.3.3 - Remote Source Code Information Disclosure source: https://www.securityfocus.com/bid/45476/info Alt-N WebAdmin is prone to a remote information-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...
Alt-N WebAdmin 3.3.3 - Remote Source Code Information Disclosure
source: https://www.securityfocus.com/bid/45476/info Alt-N WebAdmin is prone to a remote information-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process...
Serv-U Empty Password Authentication Bypass Vulnerability
Serv-U is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access to the affected application. However, this requires that the application has password-based authentication disabled. Serv-U 10.2.0.2 and versions prior to 10.3.0.1 are vulnerabl...
Serv-U Empty Password Authentication Bypass Vulnerability
Serv-U is prone to an authentication-bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:serv-u:serv-u";...
Serv-U < 10.3.0.1 SFTP Authentication Bypass
According to its banner, the installed version of Serv-U is earlier than 10.3.0.1 and is, therefore, potentially affected by the following issue : - If the SFTP server has been configured to only allow public key authentication, it can be bypassed for users accounts that have no password. C Tenab...
Serv-U < 10.3.0.1 SFTP Server Authentication Bypass Vulnerability
Binary data 5712.prm...
Fedora 13 : sepostgresql-9.0.1-20101007.fc13 (2010-16004)
Upgrade base version to v9.0.1 which contains various bug and security fixes. - http://www.postgresql.org/docs/9.0/static/release-9-0.ht ml - http://www.postgresql.org/docs/9.0/static/release-9-0- 1.html Note that Tenable Network Security has extracted the preceding description block directly fro...
CVE-2010-4097
Multiple cross-site scripting XSS vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 title, 3 u, and 4 url parameters. NOTE: the q parameter is already covered by CVE-2009-2302...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 title, 3 u, and 4 url parameters. NOTE: the q parameter is already covered by CVE-2009-2302...
RhinoSoft Serv-U FTPd Server - MDTM Overflow (Metasploit)
$Id: servumdtm.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...