370 matches found
Fizzle 0.5 RSS Feed HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23144/info Fizzle is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code...
RedBLoG 0.5 admin/config.php root_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20115/info The redblog application is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
plexusCMS 0.5 - XSS Remote Shell Exploit & Credentials Leak
No description provided by source. Exploit Title: plexusCMS 0.5 XSS Remote Shell Exploit Google Dork: allinurl: plx-storage Date: 22.02.2013 Exploit Author: neglomaniac Vendor Homepage: http://plexus-cms.org/ Version: 0.5 --- FILES backdoor.php simple commend execute backdoor commands.txt list of...
Fedora 20 : libgadu-1.12.0-0.5.rc3.fc20 (2014-6687)
Security bug fix: remote Gadu-Gadu file relay servers could cause a denial of service memory overwrite or possibly execute arbitrary code via a crafted message CVE-2014-3775. - Fixes related to image transfers. - Regression test reliability fixes. Note that Tenable Network Security has extracted...
AllMyLinks 0.5 (Auth Bypass) SQL Injection Vulnerability
Exploit for php platform in category web applications ----------exploit Debut Auth Bypass SQL Injection Vulnerability ----------Script Info Author : JIKO ----------Script Info Site : http://www.voice-of-web.de/c-AllMyLinks-s37.html Version : 0.5.0 Download :...
Stuxnet 0.5 : Symantec study reveals Stuxnet was dated 2005
Today social media are spreading a shocking news, authors of Stuxnet virus that hit Iranian nuclear program in 2010 according a new research proposed by Symantec security company started in 2005 and contrary to successive instance of the malware he was designed to manipulate the nuclear facility’...
Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities
Document Title: =============== Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=504 Release Date: ============= 2012-04-15 Vulnerability Laboratory ID VL-ID: ====================================...
SpoofTooph 0.5 : Automate Cloning of Bluetooth devices
SpoofTooph 0.5 : Automate Cloning of Bluetooth devices SpoofTooph 0.5 has been updated with some major bug fixes and new features. The new version 0.5 runs scans MUCH faster, which also allows for more Device Names to be resolved during scans. Spooftooph is designed to automate spoofing or clonin...
roundcube -- XSS vulnerability
RoundCube development Team reports: We just published a new release which fixes a recently reported XSS vulnerability as an update to the stable 0.5 branch. Please update your installations with this new version or patch them with the fix which is also published in the downloads section or our...
Fedora 14 : mono-2.6.7-4.fc14 / mono-addins-0.5-2.fc14 (2011-3393)
CVE-2010-4159 - CVE-2010-4254 - mono-core and mono-addins do not depend on mono-devel anymore Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
Rekonq 0.5 Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20100818 Date: 18th August 2010 Author: Tim Brown URL: / Product: Rekonq 0.5 Vendor: Andrea Diamantini Risk: Medium Summary The Rekonq web browser is vulnerable to Javascript injection in a number of components of...
CVE-2010-2536
Multiple cross-site scripting XSS vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 a URL associated with a nonexistent domain name, related to webpage.cpp, aka a "universal XSS" issue; 2 unspecified vectors related to webview.cpp; and t...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 a URL associated with a nonexistent domain name, related to webpage.cpp, aka a "universal XSS" issue; 2 unspecified vectors related to webview.cpp; and t...
CVE-2010-2536
CVE-2010-2536 affects rekonq 0.5 and earlier with multiple XSS vectors (universal XSS via a nonexistent-domain URL and other vectors involving the webview and about: views for favorites, bookmarks, closed tabs, and history). Connected sources show vendor updates acknowledging the issue and releas...
CVE-2009-4794
Multiple SQL injection vulnerabilities in Community CMS 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to view.php and the 2 a parameter in an event action to calendar.php, reachable through index.php...
CVE-2009-4794
CVE-2009-4794 concerns vulnerable installations of Community CMS 0.5 . The issue comprises multiple SQL injection vulnerabilities exploitable via the (1) article_id parameter to view.php and (2) a parameter in an event action to calendar.php (accessible through index.php). Remote attackers could ...
CVE-2009-4733
SQL injection vulnerability in checkuser.php in SimpleLoginSys 0.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...
FFmpeg multiple vulnerabilities (Linux)
This host is installed with FFmpeg and is prone to multiple vulnerabilities OpenVAS Vulnerability Test $Id: gbffmpegmultvulnlin.nasl 5306 2017-02-16 09:00:16Z teissa $ FFmpeg Multiple Vulnerabilities Linux Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Design/Logic Flaw
The avrescalernd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service crash via a crafted AVI file that triggers a divide-by-zero error...
