Unfixed XSS vulnerability at ultimateguide.buffalonews.com

Security researcher p0pc0rn, has submitted on 23/02/2011 a cross-site-scripting XSS vulnerability affecting ultimateguide.buffalonews.com, which at the time of submission ranked 13824 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. ...

CVE-2010-4472

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspecified APIs. NOTE: the previous information was obtained from the February 2011...

CVE-2010-4474

Unspecified vulnerability in the Java DB component in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows local users to affect confidentiality via unknown vectors related to Security, a similar vulnerability to CVE-2009-4269...

CVE-2010-4470

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was obtained from the Februar...

CVE-2010-4451

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, when using Java Update, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install...

CVE-2010-4474

CVE-2010-4474 is reported as an unspecified vulnerability in the Java DB component of Oracle Java SE and Java for Business 6 Update 23 and earlier, with confidentiality impact via unknown vectors. Connected documents provide limited concrete detail for this CVE; one openSUSE patch entry lists CVE...

CVE-2007-2386

creationtimestamp| type| source ---|---|--- 2011-01-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16871 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/mdns/upnplocation.rb 2025-02-06 03:13:38+00:00| seen|...

CubeCart <= 3.0.4 SQL Injection Vulnerability

Exploit for php platform in category web applications /////////////////////////////// 0day.today 2018-03-09...

Unfixed XSS vulnerability at foros.ws

Security researcher RomanceMint, has submitted on 23/12/2010 a cross-site-scripting XSS vulnerability affecting foros.ws, which at the time of submission ranked 25426 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

CubeCart 3.0.4 - SQL Injection

CubeCart 3.0.4 - SQL Injection ///////////////////////////////...

CubeCart 3.0.4 - SQL Injection

///////////////////////////////...

Unfixed XSS vulnerability at library.zdmu.ac.ir

Security researcher P.Daneshmand, has submitted on 23/11/2010 a cross-site-scripting XSS vulnerability affecting library.zdmu.ac.ir, which at the time of submission ranked 3355504 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It i...

PHPmotion 1.62 - FCKeditor Arbitrary File Upload

PHPmotion 1.62 - FCKeditor Arbitrary File Upload ----------------------------------------------------------------------- phpmotion/FCKeditor File upload vulnerabilities ----------------------------------------------------------------------- Author : trycyber [email protected] Homepage :...

digiSHOP 2.0.2 - SQL Injection

digiSHOP 2.0.2 - SQL Injection ----------------------------------- TM | | | Y | | | | |. 1 ||||.| | | | |. | -|. |-' | |: | | |: | | |::.|:. | |::.| | --- ---' ---' | Private Place Of 0days | ----------------------------------- ^Exploit Title : ^Date : 23/7/2010 ^Vendor Site :...

VulnCheck KEV: CVE-2010-0094

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March...

Microsoft Windows Progman Group Converter Insecure Library Loading Vulnerability

Microsoft Windows Progman Group Converter is prone to insecure library loading vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Java RMIConnectionImpl Deserialization Privilege Escalation

This module exploits a vulnerability in the Java Runtime Environment that allows to deserialize a MarshalledObject containing a custom classloader under a privileged context. The vulnerability affects version 6 prior to update 19 and version 5 prior to update 23. This module requires Metasploit:...

UPlusFTP Server 1.7.1.01 Buffer Overflow

!/usr/bin/python import socket,sys,base64 print """ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPlusFTP Server v1.7.1.01 HTTP Remote BoF Exploit PoC Discovered by : Karn Ganeshen Author : Karn Ganeshe...

ZeeAdBox 2x SQL Injection

======================================================= ZeeAdbox v2x SQL Injection Vulnerability ======================================================= Name : ZeeAdbox v2x -SQL iNj3cti0n Vulnerabilty Date : july 23,2010 Critical Level :VERY HIGH vendor URL :?? http://www.zeeways.com Author : ..:...

ZeeAdbox 2.x - SQL Injection

ZeeAdbox 2.x - SQL Injection ======================================================= ZeeAdbox v2x SQL Injection Vulnerability ======================================================= Name : ZeeAdbox v2x -SQL iNj3cti0n Vulnerabilty Date : july 23,2010 Critical Level :VERY HIGH vendor URL :??...