20527 matches found
Unfixed Redirect vulnerability at www.sarl.org.za
Security researcher p0pc0rn, has submitted on 21/12/2011 a Redirect vulnerability affecting www.sarl.org.za, which at the time of submission ranked 930546 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently unfixed. If y...
XSS in setup.
PMASA-2011-19 Announcement-ID: PMASA-2011-19 Date: 2011-12-21 Summary XSS in setup. Description Crafted values entered in the setup interface can produce XSS; also, if the config directory exists and is writeable, the XSS payload can be saved to this directory. Severity We consider this...
XSS in export.
PMASA-2011-20 Announcement-ID: PMASA-2011-20 Date: 2011-12-21 Summary XSS in export. Description Using crafted url parameters, it was possible to produce XSS on the export panels in the server, database and table sections. Severity We consider these vulnerabilities to be non critical. Mitigation...
Unfixed Redirect vulnerability at blogs.mconstantin.eu.org
Security researcher p0pc0rn, has submitted on 21/12/2011 a Redirect vulnerability affecting blogs.mconstantin.eu.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently unfixed. ...
Unfixed Redirect vulnerability at rowlsintheclass.teacherlingo.com
Security researcher p0pc0rn, has submitted on 21/12/2011 a Redirect vulnerability affecting rowlsintheclass.teacherlingo.com, which at the time of submission ranked 468435 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...
CVE-2011-3587
creationtimestamp| type| source ---|---|--- 2011-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18262 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/plonepopen2.rb 2020-10-15 15:07:04+00:00| seen|...
Apple Safari缓存对象历史枚举漏洞
CVE ID: CVE-2011-4692 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Apple Safari在处理缓存对象时存在错误，可被恶意用户利用枚举已浏览的站点，泄露敏感信息。 0 Apple Safari 5.x 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.apple.com/...
CVE-2011-4779
CVE-2011-4642 affects Splunk Web (Splunk 4.2.x before 4.2.5). The mappy.py component allows remote authenticated admins to execute arbitrary code via the sys module in a crafted request to the search app, enabling CSRF-like abuse. Upgrade to Splunk 4.2.5 or later. Note: CVE-2011-4779 is a reserva...
Exploit Kits Now Updated With New Wares Before Patches Are Ready
The creators and maintainers of exploit kits often rely on public reports of new exploits and proof-of-concept exploit code in order to be able to add new exploits to their software. And in many cases, the exploits included in kits such as Black Hole and Eleonore and others will be for...
CVE-2011-4869
validator/valnsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service daemon crash via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528...
CVE-2011-4528
Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service daemon crash via a crafted response...
CVE-2011-4723
CVE-2011-4723 affects the D-Link DIR-300 router. The vulnerability is information disclosure due to cleartext password storage in the device, enabling context-dependent attackers to obtain sensitive credentials. Root cause is lack of password hashing/storage of passwords in plaintext. Public sour...
CVE-2011-4869
CVE-2011-4528 and CVE-2011-4869 in Unbound describe remote-denial-of-service via crafted responses or memory handling issues in the 1.4.x series. CVE-2011-4528: during processing of duplicate CNAMEs in a signed zone, Unbound may free unallocated memory, potentially crashing the daemon. CVE-2011-4...
CVE-2011-4528
Affected software: Unbound DNS resolver. CVE-2011-4528 describes a denial-of-service condition caused by freeing unallocated memory while processing duplicate CNAME records in a signed zone, leading to a daemon crash via a crafted response. Confirmed affected version range per sources is Unbound ...
CVE-2011-4717
The CVE-2011-4717 issue affects zFTPServer Suite 6.0.0.52 and is a Directory Traversal vulnerability triggered by a crafted RMD (rmdir) command, allowing remote authenticated users to delete arbitrary directories. The exploitation is demonstrated by a PoC in Perl, and multiple sources (Red Hat, N...
CVE-2011-5050
creationtimestamp| type| source ---|---|--- 2011-12-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36473...
.jar not treated as executable in Firefox 3.6 on Mac — Mozilla
Part of the fix for MFSA 2011-40, reported by Mariusz Mlynski, was to treat .jar files as executables. This is necessary because Java treats downloaded .jar files as fully-featured "Applications" rather than restricting them to the limited privileges of in-browser "Applets". The fix taken in...
CVE-2011-5233
creationtimestamp| type| source ---|---|--- 2011-12-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18257...
Symantec IM Manager Administrator Console Code Injection (CVE-2011-0554)
Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. Symantec IM Manager allows the definition of...