Unfixed XSS vulnerability at www.zupergames.net

Security researcher beyrut-KaI3uS, has submitted on 17/08/2011 a cross-site-scripting XSS vulnerability affecting www.zupergames.net, which at the time of submission ranked 2669207 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It ...

Joomla JoomTouch 1.0.2 Local File Inclusion

================================================================================ o JoomTouch Joomla Component = Local File Inclusion Vulnerability Software : comjoomtouch ver 1.0.2 Vendor : http://www.joomtouch.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Home :...

Joomla! Component JoomTouch 1.0.2 - Local File Inclusion

================================================================================ o JoomTouch Joomla Component = Local File Inclusion Vulnerability Software : comjoomtouch ver 1.0.2 Vendor : http://www.joomtouch.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Home :...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 Bundle 17 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance...

Adobe Shockwave Director File KEY Chunk Parsing Buffer Overflow (APSB11-17; CVE-2011-2111)

A buffer overflow vulnerability has been reported in Adobe Shockwave Player. The vulnerability is due to a mishandling of the Chunk Size field value. Remote attackers can exploit this vulnerability by persuading a target user to open a specially crafted DIR or DCR file with a vulnerable product...

ZDI-11-220: Adobe Shockwave Director File rcsL Chunk Multiple Opcode Parsing Remote Code Execution Vulnerability

ZDI-11-220: Adobe Shockwave Director File rcsL Chunk Multiple Opcode Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-220 June 15, 2011 -- CVE ID: CVE-2011-0335 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products:...

IBM WebSphere Application Server 7.0 < Fix Pack 17 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 17 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - Use of an insecure XML encryption algorithm could allow for decryption of JAX-RPC or JAX-WS Web Services requests. PM34841 - A...

VUPEN Security Research - Apple Safari WebKit Block Dimensions Handling Integer Overflow

VUPEN Security Research - Apple Safari WebKit Block Dimensions Handling Integer Overflow http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Apple Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser, with 4.45 ...

Gentoo Security Advisory GLSA 201006-17 (lighttpd)

The remote host is missing updates announced in advisory GLSA 201006-17. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201006-17 (lighttpd)

The remote host is missing updates announced in advisory GLSA 201006-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

phpCMS 2008 - SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tybe: REMOTE SQL iNJECTioN Vendor: www.phpcms.cn + Software: Phpcms 2008 V2 + author: R3d-D3v!L + TEAM: Xp10hACKEr & 403-T3AM ? contact: Xathotmail.co.jp - ? Date: 17.jan.2011 ?...

Unfixed XSS vulnerability at www.winterfestparade.com

Security researcher nickhacks, has submitted on 17/12/2010 a cross-site-scripting XSS vulnerability affecting www.winterfestparade.com, which at the time of submission ranked 867184 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It...

DIZzy 1.12 Local Stack Overflow

Exploit for windows platform in category local exploits =============================== DIZzy 1.12 Local Stack Overflow =============================== !/usr/bin/ruby Exploit Title: DIZzy 1.12 Local Stack Overflow Google Dork: n/a Date: 17/11/2010 Author: g30rg3x Version: 1.12 Tested on: Windows ...

Solaris 10 (sparc) : 144488-17

SunOS 5.10: kernel patch. Date this patch was last updated by Sun : Jun/17/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

CVE-2010-4144

creationtimestamp| type| source ---|---|--- 2010-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15270...

CVE-2010-3332

creationtimestamp| type| source ---|---|--- 2010-10-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15213 2010-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15265 2010-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15292 2024-06-11...

Mercur Messaging 2005 - IMAP Login Buffer Overflow (Metasploit)

$Id: mercurlogin.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Adobe Acrobat < 9.3.4 / 8.2.4 Multiple Vulnerabilities (APSB10-17)

The version of Adobe Acrobat installed on the remote host is earlier than 9.3.4 / 8.2.4. Such versions are reportedly affected by multiple vulnerabilities : - Multiple vulnerabilities in the bundled Flash Player as noted in APSB10-16. CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214,...

Adobe Reader < 9.3.4 / 8.2.4 Multiple Vulnerabilities (APSB10-17)

The version of Adobe Reader installed on the remote host is earlier than 9.3.4 / 8.2.4. Such versions are reportedly affected by multiple vulnerabilities : - Multiple vulnerabilities in the bundled Flash Player as noted in APSB10-16. CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214,...

Unfixed XSS vulnerability at www.aspentech.com

Security researcher PlanetCreator, has submitted on 17/08/2010 a cross-site-scripting XSS vulnerability affecting www.aspentech.com, which at the time of submission ranked 487230 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...