swfstrings swf_GetBits function 't-data' denial of service vulnerability

SWFTools is a set of software tools for SWF manipulation and creation of utility authoring. swfstrings is a text parsing tool. swftools0.9.2 and previous versions of swfstrings program swfGetBits function 't-data' is empty, resulting in access to the contents of the null pointer, triggering a...

swfstrings rfxswf.c file swf_GetU8 function debug code denial of service vulnerability

SWFTools is a collection of SWF manipulation and creation utility authoring software tools. swfstrings are text parsing tools. A debugging code denial of service vulnerability exists in swftools version 0.9.2 and swftools version 0.9.1. The vulnerability arises because the swfGetU8 function in th...

Telescope 0.9.2 - Markdown Persistent Cross-Site Scripting

Telescope 0.9.2 - Markdown Persistent Cross-Site Scripting Exploit Title: Persistent XSS via Markdown on Telescope = 0.9.2 Date: Aug 22 2014 Exploit Author: shubs Vendor Homepage: http://www.telescopeapp.org/ Software Link: https://github.com/TelescopeJS/Telescope Version: = 0.9.2 CVE :...

Telescope 0.9.2 - Markdown Persistent Cross-Site Scripting

Exploit Title: Persistent XSS via Markdown on Telescope = 0.9.2 Date: Aug 22 2014 Exploit Author: shubs Vendor Homepage: http://www.telescopeapp.org/ Software Link: https://github.com/TelescopeJS/Telescope Version: = 0.9.2 CVE : CVE-2014-5144 Telescope 0.9.2 and below suffer from a persistent cro...

Anchor CMS 0.9.2 Header Injection Vulnerability

Anchor CMS versions 0.9.2 and below suffer from a header injection vulnerability. Anchor CMS = 0.9.2 Current Version header injection in anchor/models/comment.php $headers = 'MIME-Version: 1.0' . "\r\n"; $headers .= 'Content-type: text/html; charset=utf-8' . "\r\n"; $headers .= 'From:...

WP-SlimStat 0.9.2 WordPress Plugin Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26432/info WP-SlimStat Plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

adaptweb 0.9.2 (lfi/sql) Multiple Vulnerabilities

No description provided by source. + AdaptWeb 0.9.2 LFI/SQL Multiple Remote Vulnerabilities + Script : http://adaptweb.sourceforge.net/ + Discovered By SirGod + www.mortal-team.org + Script homepage : http://adaptweb.sourceforge.net/ + Local File Inclusion - PoC...

Kimai 0.9.2 - 'db_restore.php' SQL Injection

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = AverageRanking include Msf::Exploit::Remote::HttpClient include...

AMX Mod 0.9.2 - Remote 'amx_say' Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6968/info A format string vulnerability has been discovered AMX Mod 0.9.2 and earlier which may be exploitable to execute arbitrary code on a target Half-Life server. The problem occurs when calling the 'amxsay' command. ...

openSUSE Security Update : quassel (openSUSE-SU-2014:0114-1)

Add back /etc/sysconfig/quasselcore bnc849850 - Drop fix-CVE-2013-6404.diff: Merged upstream - Update to 0.9.2 - Don't crash if /topic contains newlines. - Fix SSL-related issues. - Fix Phonon notifications not playing sound. - Pingout if connection drops during SASL auth phase. - Prevent...

Fedora 18 : cgit-0.9.2-1.fc18 (2013-9498)

A directory traversal vulnerability was discovered in cgit. By default, cgit is not affected. However, if cgit is configured to use a readme file from a filesystem path instead of from the git repo itself then files outside of the repository can be read. Refer to the discussion on oss-security fo...

[SECURITY] Fedora 18 Update: cgit-0.9.2-1.fc18

Cgit is a fast web interface for git. It uses caching to increase performa nce...

Fedora 19 : cgit-0.9.2-1.fc19 (2013-9467)

A directory traversal vulnerability was discovered in cgit. By default, cgit is not affected. However, if cgit is configured to use a readme file from a filesystem path instead of from the git repo itself then files outside of the repository can be read. Refer to the discussion on oss-security fo...

CVE-2012-5900

Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL commands via the 1 OBID parameter in a single action to admin/action/objects.php, 2 AREAID parameter in a single action to admin/action/areas.php, or 3 start parameter in a show action...

CVE-2012-5898

Cross-site request forgery CSRF vulnerability in SAMEDIA LandShop 0.9.2 allows remote attackers to hijack the authentication of administrators for requests that change account settings...

CVE-2012-5898

The CVE-2012-5898 entry describes a CSRF vulnerability in SAMEDIA LandShop 0.9.2 that can allow an attacker to hijack an administrator’s session to issue requests that change account settings. The connected documents confirm the affected product/version and the nature of the vulnerability but do ...

PT-2012-5271 · Mf · Mf Gig Calendar Plugin

Name of the Vulnerable Software and Affected Versions: MF Gig Calendar plugin version 0.9.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the query string to the calendar page, which is a cross-site scripting XSS vulnerability. This enables attackers to...

CVE-2012-3881

Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 95.php, 2 view.php, or 3 rtg.php...

Cotonti 0.9.2 - Multiple SQL Injections

Cotonti 0.9.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/48028/info Cotonti is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacke...

Cotonti 0.9.2 forums.php Blind SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...