Dojo Toolkit 1.4.1 - '/doh/runner.html' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38739/info Dojo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Bournal < 1.4.1 Privilege Escalation Vulnerability

Bournal is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Bournal Privilege Escalation Vulnerability

This host is installed with Bournal and is prone to privilege escalation vulnerability OpenVAS Vulnerability Test $Id: gbbournalprivilegeescalationvuln.nasl 4919 2017-01-02 15:22:45Z cfi $ Bournal Privilege Escalation Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks...

CVE-2010-0393

The cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with...

Command injection

Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing."...

Secunia Research: Bournal ccrypt Information Disclosure Security Issue

====================================================================== Secunia Research 22/02/2010 - Bournal ccrypt Information Disclosure Security Issue - ====================================================================== Table of Contents Affected...

Audiotran 1.4.1 - Direct RET Buffer Overflow

Exploit Title: Audiotran v1.4.1 direct RET BOF Date: 2010-1-16 Author: Jacky Software Link: http://www.e-soft.co.uk/Audiotran.htm Version: 1.4.1 Tested on: Windows XP SP2 CVE : if exists Code : Audiotran v1.4.1 Direct RET local BOF Vulnerability. Exploit Discovered by Sébastien Duquette Greetz to...

Audiotran 1.4.1 Buffer Overflow

!/usr/bin/ruby Exploit Title : Audiotran 1.4.1 Win XP SP2/SP3 English Buffer Overflow Date : January 9th, 2010 Author : Sébastien Duquette Software Link : http://www.e-soft.co.uk/Audiotran.htm Version : 1.4.1 OS : Windows Tested on : XP SP2/SP3 En VMware Type of vuln : Stack Overflow / SEH Greetz...

Audiotran 1.4.1 - .pls Local Stack Overflow (Metasploit)

Audiotran 1.4.1 - .pls Local Stack Overflow Metasploit require 'msf/core' class Metasploit3 'Audiotran 1.4.1 PLS File Stack Overflow.', 'Description' = %q This module exploits a stack-based buffer overflow in Audiotran 1.4.1. An attacker must send the file to victim and the victim must open the...

Audiotran 1.4.1 (Windows XP SP2/SP3 English) - Local Buffer Overflow

!/usr/bin/ruby Exploit Title : Audiotran 1.4.1 Win XP SP2/SP3 English Buffer Overflow Date : January 9th, 2010 Author : Sébastien Duquette Software Link : http://www.e-soft.co.uk/Audiotran.htm Version : 1.4.1 OS : Windows Tested on : XP SP2/SP3 En VMware Type of vuln : Stack Overflow / SEH Greetz...

Audiotran 1.4.1 Win XP SP2/SP3 English Buffer Overflow

Exploit for unknown platform in category local exploits ====================================================== Audiotran 1.4.1 Win XP SP2/SP3 English Buffer Overflow ====================================================== !/usr/bin/ruby Exploit Title : Audiotran 1.4.1 Win XP SP2/SP3 English Buffer...

Audiotran 1.4.1 (Windows XP SP2SP3 English) - Local Buffer Overflow

Audiotran 1.4.1 Windows XP SP2SP3 English - Local Buffer Overflow !/usr/bin/ruby Exploit Title : Audiotran 1.4.1 Win XP SP2/SP3 English Buffer Overflow Date : January 9th, 2010 Author : Sébastien Duquette Software Link : http://www.e-soft.co.uk/Audiotran.htm Version : 1.4.1 OS : Windows Tested on...

Minishare 1.4.1 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Minishare...

CVE-2009-1185

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space...

udev: Uncheck origin of NETLINK messages

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/jpgraph/jpgrapherrhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treat...

CVE-2008-5694

PHP remote file inclusion vulnerability in lib/jpgraph/jpgrapherrhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treat...

CVE-2008-5694

PHP remote file inclusion vulnerability in lib/jpgraph/jpgrapherrhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treat...

PT-2008-6746 · Php · Php

Name of the Vulnerable Software and Affected Versions: Sandbox version 1.4.1 Description: A remote file inclusion issue in lib/jpgraph/jpgraph errhandler.inc.php might allow remote attackers to execute arbitrary PHP code. The issue may be located in Aditus JpGraph rather than Sandbox...

CMS Made Simple 1.4.1 Local File Inclusion Vulnerability

No description provided by source. Type: Directory Traversal vulnerability Unix tested / Root privileges escalation Vendor: CMS Made Simple Software: CMS Made Simple 1.4.1 "Spring Garden" and probably others ... Author: M4ck-h@cK Date 29.11.2008 Home: sweet home contact: no, thx : Exploit: Demo: ...