CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

CVE-2012-0804

Heap-based buffer overflow in the proxyconnect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTTP response...

JBoss AS 2.0 - Remote Command Execution

JBoss AS 2.0 - Remote Command Execution THE FULL DAYTONA PACKAGE -- BY KINGCOPE, YEAR 2011 THREE JBOSS APPLICATION SERVER REMOTE EXPLOITS WITH AUTHEN BYPASS PORTED FROM METASPLOIT AND BEEFED UP WITH TWO SCANNERS: PNSCAN W/ SSL SUPPORT SYNSCAN MODDED FILES: daytonabsh.pl, daytonadeployfile.pl,...

Fedora 16 : drupal6-views_bulk_operations-1.11-1.fc16 (2011-13166)

Update to latest upstream release. This release contains some minor bugfixes and a six for a possible XSS attack. See http://drupal.org/node/1286844 for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable ha...

Absolute Software Computrace LoJack for Laptops Detection

The remote host is running Computrace LoJack, a laptop theft-recovery device. Note that a flaw has been discovered in this product that might allow an attacker to execute arbitrary code on the remote host. There is no patch for this vulnerability yet. C Tenable Network Security, Inc. if NASLLEVEL...

Command injection

TYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service CPU consumption by sending an ABOR abort command without an active file transfer...

TYPSoft FTP Server 1.11 (ABORT) Remote DoS Exploit

No description provided by source. / Soft : TYPSoft FTP Server Version: 1.11 Denial of Service in TYPSoft FTP Server up to 1.11 no crash Just the server is saturated, it stops responding. -------------------------------------------------------------------------------------- The vulnerability is...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a...

MoziloCMS Local File Include and Cross Site Scripting Vulnerabilities

MoziloCMS is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

moziloCMS 1.11 - Local File Inclusion Full Path Disclosure Cross-Site Scripting

moziloCMS 1.11 - Local File Inclusion Full Path Disclosure Cross-Site Scripting + moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion PoC 1 :...

moziloCMS 1.11 - Local File Inclusion / Full Path Disclosure / Cross-Site Scripting

moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion PoC 1 : http://127.0.0.1/index.php?cat=10Willkommen&page=../../../../../BOOTSECT.BAK%00 PoC 2 :...

Unrestricted file upload

Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/...

CVE-2009-0602

Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/...

Design/Logic Flaw

MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remote attackers to obtain sensitive information via requests for files in images/deleted/...

CVE-2008-5687

CVE-2008-5687 affects MediaWiki 1.11 through 1.13.3, where backups of deleted images were not properly protected, potentially allowing remote attackers to obtain sensitive information by requesting files under images/deleted/. The connected documents confirm this issue across multiple advisories ...

fresh email script 1.0 - Multiple Vulnerabilities

+-----------------+-----------------+-----------------+ 2. +-----------------+Fresh Email Script+----------------+ 3. +-----------------versions: 1.0 to 1.11 - all 4. +-----------------exploits: file inclusion & cookie manipulation 5. +-----------------founder: Don 6. +-----------------date:...

VBZooM <=V1.11 "reply.php" SQL Injection Vulnerability

================================================= Discovered By: CrAzY CrAcKeR Email: Cr4zY.CrAcKeRathotmaildotcom Script : VBZooM V1.11 ================================================ Search: POWERED BY: VBZooM V1.11 http://www.example.com/vb1/reply.php?UserID=SQL...

Wordpress Plugin Simple Forum 1.10-1.11 SQL Injection Vulnerability

No description provided by source. Simple Forum Version 1.10-1.11 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] Simple Forum - Version 1.10 Simple Forum - Version 1.10 - 2.1.3 Simple Forum - Version 1.11 EXPLAN= sametimes password a...

wpsf110-sql.txt

Simple Forum Version 1.10-1.11 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] Simple Forum - Version 1.10 Simple Forum - Version 1.10 - 2.1.3 Simple Forum - Version 1.11 EXPLAİN= sametimes password and username in error massege for...

Yellow Swordfish Simple Forum 1.10/1.11 - 'topic' SQL Injection

source: https://www.securityfocus.com/bid/27823/info Simple Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...