OTRS < 2.2.5 S/MIME OpenSSL Cryptographic Entropy Weakness

Open Ticket Request System OTRS is prone to a cryptographic entropy weakness. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-0256

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted URL...

PT-2013-2191 · Ruby +2 · Rdoc +3

Name of the Vulnerable Software and Affected Versions: RDoc versions 2.3.0 through 3.12 RDoc versions 4.x before 4.0.0.preview2.1 Description: The issue allows remote attackers to conduct cross-site scripting XSS attacks via a crafted URL, due to improper document generation by darkfish.js in RDo...

Cross-Site Scripting vulnerability in extension Static Info Tables (static_info_tables)

It has been discovered that the extension "Static Info Tables" staticinfotables is vulnerable to Cross-Site Scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.3.0 and below Vulnerability Type: Cross-Site...

CVE-2013-0256 rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted URL...

Fedora 18 : corosync-2.3.0-1.fc18 (2013-1001)

This update fixes potential DoS, because HMAC was used without key. It also improves stability and addresses several bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

[SECURITY] Fedora 17 Update: corosync-2.3.0-1.fc17

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

MLE-Moodle 0.8.8.4 <= Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: MLE-Moodle 0.8.8.4 = Local File Inclusion Vulnerability Date: 19/12/2012 Author: GoLdM Libyan Page FaceBook http://www.facebook.com/pages/وَذَكِّـــرْ/337878286310383 Version: 2.3.0 Category:: Local File Disclosure Vulnerability...

Private Message System 2.3.0 <= XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Private Message System 2.3.0 alert1337; Test : http://upload.traidnt.net/upfiles/4ul41244.jpg Demo: 01 :http://ptl.su/pms/index.php?page="alert1337; 02 :http://qgcomedyshow.freehostia.com/community/mail/index.php?page="alert1337...

Elastix 2.3.0 Cross Site Scripting

! /usr/bin/python Author cheki Date 28/11/2012 Test on Linuxmint Vendor Elastix.org Exploit: https://192.168.2.199/xmlservices/Ebook.php?Page=2%3Cscript%3Ealert%28%221%22%29;%3C/script%3E Vulnerability $Page Parameter Ebook.php file $Page = $GET'Page'; // Page index $idxphone = $GET'phone'; //...

Elastix 2.3.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Author: cheki Exploit Title: Elastix 2.3.0 Cross Site Scripting Date: 05-12-2010 Vendor or Software Link:http://www.elastix.org/ Category:WebApp Version:2.3.0 Price:free Contact: email protected Website: hacking.ge Greetings to: Anuka bolqvadz...

OpenSSH < 2.1.1p3 Format String Privilege Escalation

According to the banner, a version of OpenSSH earlier than 2.1.1p3 is running on the remote host. As such, it is reportedly affected by a format string vulnerability. C Tenable, Inc. include"compat.inc"; if description scriptid17839; scriptversion"1.4";...

Design/Logic Flaw

Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service pluto IKE daemon crash via vectors related to the 1 quickoutI1continue and 2 quickoutI1 functions...

A-PDF All to MP3 2.3.0 - Universal DEP Bypass

!/usr/bin/ruby +Exploit Title: A-PDF All to MP3 v2.3.0 Universal DEP Bypass Exploit +Date: 09\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.a-pdf.com/all-to-mp3/ +Version: 2.3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A Dep bypass method: LoadLibraryA"kernel32.dll" +...

XSS vulnerability in Crucible changeset comments in search results

We have identified and fixed a cross-site scripting XSS vulnerability in the Crucible changeset comments in search results. Affected versions are Crucible 2.3.0 to 2.5.0 inclusive. XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a FishEye/Crucible page. You ca...

MOXA Device Manager MDM Tool Buffer Overflow Vulnerability

MOXA Device Manager is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SDP Downloader HTTP Header Handling Buffer Overflow Vulnerability

This host is installed with SDP Downloader and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsdpdownloaderhttpheaderbofvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ SDP Downloader HTTP Header Handling Buffer Overflow Vulnerability Authors: Sooraj KS Copyright:...

SDP Downloader 2.3.0 - http_response Remote Buffer Overflow

SDP Downloader 2.3.0 - httpresponse Remote Buffer Overflow !/usr/bin/python Bug : SDP Downloader httpresponse Remote Buffer Overflow Exploit by: sup3r Tested on : Xp sp3 http://sdp.ppona.com/ from socket import win32exec - EXITFUNC=process CMD=calc Size=160 Encoder=PexFnstenvSub...

FCKEditor Core 2.x 2.4.3 - &#039;FileManager upload.php&#039; Arbitrary File Upload

Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload Author: grabz Software Link: http://sourceforge.net/projects/fckeditor/ Version: FCKeditor 2.x = 2.4.3 Tested on: 2.0, 2.2, 2.3.2, 2.4.0, 2.4.3 for version 2.0 - 2.2: in file FCKeditor/editor/filemanager/upload/php/upload.php $sType = isset...

FoxPlayer 2.3.0 (.m3u) Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc ==================================================== FoxPlayer 2.3.0 .m3u Buffer Overflow Vulnerability ==================================================== !/usr/bin/perl Title: FoxPlayer Version 2.3.0 .m3u Local BOF PoC Download:...