OpenText LiveLink 9.7.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: OpenText LiveLink multiple vulnerabilities CSRF, XSS Date: 22/06/2010 Author: Alejandro Ramos http://www.securitybydefault.com Software Link: http://www.opentext.com/ Version: 9.7.1 Tested on: Solaris Opentext NASDAQ OTEX LiveLink 9.7.1 Livelink features several advanced foundation...

RHEL 3 / 4 / 5 : flash-plugin (RHSA-2010:0706)

An updated Adobe Flash Player package that fixes one security issue is now available for Red Hat Enterprise Linux 3 and 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scori...

CVE-2010-2866

creationtimestamp| type| source ---|---|--- 2010-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15076...

Adobe Releases Security Advisory for Flash Player

Adobe has released a security advisory to alert users of a vulnerability affecting Adobe Flash Player. This vulnerability affects Flash Player 10.1.82.76 and earlier versions for Windows, Macintosh, Linux, Solaris, and Adobe Flash Player 10.1.92.10 for Android. Exploitation of this vulnerability...

Unfixed XSS vulnerability at www.aolfeedback-clarabridge.com

Security researcher Azat Harutyunyan, has submitted on 09/06/2010 a cross-site-scripting XSS vulnerability affecting www.aolfeedback-clarabridge.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Site! Professional Edition 2.1 CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================== Site! Professional Edition 2.1 CMS SQL Injection Vulnerability ============================================================== Author : Darkzzzz , poni Email : email protected Date ...

CVE-2010-2924

creationtimestamp| type| source ---|---|--- 2010-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14441...

SuSE 11.2 Security Update: MozillaThunderbird (2010-06-22)

Mozilla Thunderbird was updated to version 3.0.5, fixing lots of security issues. Mozilla has so far not communicated what vulnerabilities were fixed, the list will appear on: http://www.mozilla.org/security/known-vulnerabilities/thunde rbird30.html %NASLMINLEVEL 70300 C Tenable Network Security,...

Scite Text Editor Buffer Overflow

Exploit Title: 0 Days Scite text editor :Local Buffer Overflow PoC Date: 28/06/2010 Author: kmkz Version: Scite 1.76 lastest version Tested on: Linux 2.6.31-22 Code : Proof of Concept !/usr/bin/perl -wU 0-Days PoC Local BoF Scite 1.76 use strict; use diagnostics; use English '-nomatchvars'; use...

Baby Primo Site Pro SQL Injection

Exploit Title: Baby Primo Site Pro SQL injection Vulnerability Date: 22/06/2010 Author: JaMbA Vendor: www.totalprogress.nl Version: N/A Tested on: Windows & Linux CVE : ::::::::::::::::::::::::: ::::::::::::::::::::::::: =================Exploit================== EXPL0!T...

Unfixed XSS vulnerability at www.onlymyhealth.com

Security researcher haRI, has submitted on 22/06/2010 a cross-site-scripting XSS vulnerability affecting www.onlymyhealth.com, which at the time of submission ranked 43112 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...

BPStudent SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================== BPStudent SQL Injection Vulnerability ===================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...

CVE-2010-2440

creationtimestamp| type| source ---|---|--- 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13965...

Job Search Engine Script SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== Job Search Engine Script SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

CVE-2010-5287

creationtimestamp| type| source ---|---|--- 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13980...

SSH Brute Force Attacks Resurface

Security experts are warning about a fresh round of attacks against SSH implementations. The attacks are brute-force attempts to authenticate to remote SSH servers, a tactic that has been used quite often in the past in distributed attacks. The attacks, which the handlers at the SANS Internet Sto...

Unfixed XSS vulnerability at www.uevora.pt

Security researcher Juza, has submitted on 22/05/2010 a cross-site-scripting XSS vulnerability affecting www.uevora.pt, which at the time of submission ranked 94944 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is currently...

Tadbir CMS (fckeditor) Remote Arbitrary File Upload Exploit Vulnerability

Exploit for php platform in category web applications ================================================================= Tadbir CMS fckeditor Remote Arbitrary File Upload Vulnerability ================================================================= Application Info: Name: Tadbir CMS Vendor:...

Onion CMS (XSS/RFI/URL Redirecting) Multiple Vulnerability

Exploit for php platform in category web applications ========================================================== Onion CMS XSS/RFI/URL Redirecting Multiple Vulnerability ==========================================================...

Microsoft Windows XP20002003 - win32k.sys SfnLOGONNOTIFY Local kernel Denial of Service

Microsoft Windows XP20002003 - win32k.sys SfnLOGONNOTIFY Local kernel Denial of Service / Windows 2000/XP/2003 win32k.sys SfnLOGONNOTIFY local kernel Denial of Service Vulnerability Effect : Microsoft Windows 2000/XP/2003 full patch Author:MJ0011 Published: 2010-04-22 Vulnerability Details:...