12486 matches found
Auktionshaus Gelb 3 - news.php SQL Injection Vulnerability
No description provided by source...
Unreal Engine 3 - Failed Memory Allocation Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31140/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that use the vulnerable engine and deny...
PHPFaber TopSites 3 Admin/Index.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23419/info TopSites is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...
Fedora 20 : zabbix-2.0.12-3.fc20 (2014-7594)
Patch CVE-2014-3005 local file inclusion via XXE attack https://support.zabbix.com/browse/ZBX-8151 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Ruby on Rails XML Processor YAML Deserialization Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Unreal Tournament 3 1.3 - Remote Directory Traversal Vulnerability
No description provided by source. Luigi Auriemma Application: Unreal Tournament 3 http://www.unrealtournament3.com Versions: 1.3 ONLY both build 3601 and 3614 older versions are safe Platforms: Windows and Linux Bug: directory traversal in the web interface Exploitation: remote, versus server...
Phorum 3.x profile.php target Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/9882/info It has been reported that Phorum is prone to a cross-site scripting vulnerability across multiple modules. The issue presents itself across multiple modules including 'login.php', 'register.php', and...
Apple Safari Feed URI Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24460/info Apple Safari is prone to a denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to cause denial-of-service conditions on a user's compute...
tematres 1.0.3 (auth bypass/sql/xss) Multiple Vulnerabilities
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...
AwingSoft Winds3D Player SceneURL Buffer Overflow
No description provided by source. $Id: awingsoftweb3dbof.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...
PrestaShop 1.1 admin/login.php PATH_INFO Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/32689/info PrestaShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16887/info PEHEPE Membership Management System is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to facilitate a compromise of the application and the underlying system; other attac...
Allaire JRun 3 Directory Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1830/info Allaire JRun is a web application development suite with JSP and Java Servlets. Each web application directory contains a WEB-INF directory, this directory contains information on web application classes,...
Unreal Tournament 3 - Denial Of Service And Memory Corruption Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30430/info Unreal Tournament 3 is prone to multiple remote vulnerabilities, including a denial-of-service issue and a memory-corruption issue. An attacker can exploit these issues to execute arbitrary code within the...
WHMCompleteSolution (cart.php) 3.x.x - 4.0.x Local File Disclosure
No description provided by source. Title : WHMCompleteSolution cart.php Local File Disclosure Author : Lagripe-Dz Product : WHMCS WHMCompleteSolution Vendor : http://whmcs.com/ Date : 10/01/2011 Version : 3.x.x , 4.0.x Tested on : linux+apache...
ZeeMatri 3.x - Arbitrary File Upload Vulnerability
No description provided by source. 1 1 0 I'm SONiC member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : ZeeMatri v3x- Arbitrary file upload Vulnerability Date : july 23,2010 Critical Level :VERY HIGH vendor URL :?? http://www.zeeways.com...
vBulletin 3.6.10/3.7.2 '$newpm[title]' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30777/info vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
PHPX 3.x admin/forums.php CSRF Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly validate access to administrative command...
DesktopOnNet 3 Beta9 Local File Include Vulnerability
No description provided by source. + DesktopOnNet 3 Beta9 Local File Include Vulnerability + Discovered By: cr4wl3r + Download: http://sourceforge.net/projects/don3/files/ x Code in DON3/applications/don3toolbox.don3app/don3toolbox.php requireappfiles/languages/$don3lang.php; --- LFI if...
Mac OS X 10.x 'libc/strtod(3)' Memory Corruption Vulnerability
source: http://www.securityfocus.com/bid/37687/info Mac OS X is prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index. Attackers may exploit this issue to execute arbitrary code within the context of affected applications. Mac O...