iPhone Guitar Directory Traversal

No description provided by source. ---------------------------------------------------------------- Software : iPhone Guitar Type of vunlnerability : Directory Traversal Tested On : iPhone 4 IOS 4.0.1 Risk of use : High ---------------------------------------------------------------- Program...

iphone pdf reader pro 2.3 - Directory Traversal

No description provided by source. ---------------------------------------------------------------- Software : iPhone PDF Reader Pro 2.3 Type of vunlnerability : Directory Traversal Tested On : iPhone 4 IOS 4.0.1 Risk of use : High ----------------------------------------------------------------...

CKEditor 4.0.1 - Multiple Vulnerabilities

No description provided by source. =========================================== Vulnerable Software: ckeditor 4.0.1 standard Download: http://download.cksource.com/CKEditor/CKEditor/CKEditor%204.0.1/ckeditor4.0.1standard.zip Vulns: Full Path Disclosure && XSS...

Apple Safari 3.2 WebKit 'alink' Property Memory Leak Remote Denial of Service Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/33080/info Apple Safari is prone to a denial-of-service vulnerability that resides in the WebKit library. Remote attackers can exploit this issue to crash the affected browser, denial-of-service condition. Apple Safari 3....

iphone mydocs 2.7 - Directory Traversal

No description provided by source. ---------------------------------------------------------------- Software : iPhone MyDocs 2.7 Type of vunlnerability : Directory Traversal Tested On : iPhone 4 IOS 4.0.1 Risk of use : High ---------------------------------------------------------------- Program...

Apple iPhone Safari (decodeURIComponent) Remote Crash

No description provided by source. ?php / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...

McAfee Cloud Single Sign On < 4.0.1 Information Disclosure (SB10066) (Windows)

A version of McAfee Cloud Single Sign On MCSSO prior to 4.0.1 is installed on the remote host. It is, therefore, affected by an information disclosure vulnerability due to a failure to sanitize user-supplied input, resulting in potential directory traversal. An attacker could potentially exploit...

CVE-2013-0499

Cross-site scripting XSS vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gatew...

Cross site scripting

Cross-site scripting XSS vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gatew...

CVE-2013-0499

Cross-site scripting XSS vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gatew...

Fedora 17 : ekiga-4.0.1-1.fc17 / opal-3.10.10-1.fc17 / ptlib-2.10.10-1.fc17 (2013-2890)

New upstream ekiga 4.0.1 release - Core fixes - Fix crash when quitting ekiga while receiving presence information - Fix crash when quitting ekiga right after starting it before STUN ending - Fix crash when disabling an account while icons in roster are changing - Fix crash when receiving call a...

CKEditor 4.0.1 多个安全漏洞

CKEditor是一款在线文字编辑器 CKEditor存在多个安全漏洞，允许攻击者利用漏洞进行跨站请求伪造，跨站脚本攻击及获取路径信息 0 CKEditor 4.0.1 厂商解决方案 目前没有详细解决方案提供： http://ckeditor.com/ =========================================== Vulnerable Software: ckeditor 4.0.1 standard Download:...

CKEditor 4.0.1 - Multiple Vulnerabilities

=========================================== Vulnerable Software: ckeditor 4.0.1 standard Download: http://download.cksource.com/CKEditor/CKEditor/CKEditor%204.0.1/ckeditor4.0.1standard.zip Vulns: Full Path Disclosure && XSS =========================================== Tested On: Debian squeeze 6.0...

CKEditor - 'posteddata.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58045/info CKEditor is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

iCart Pro 4.0.1 SQL Injection

Exploit Title: vbcovor ICART SQLI Date: 25/01/2013 Authors: n3tw0rk Contact: Mail:[email protected] Product: iCart Pro Software Version 4.0.1 Product Download: http://www.vbcover.com/icart.php?do=product&productid=61 Google Dork: inurlicart.php Require Editting product access for SQL error...

CVE-2012-5292

Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 gallerye.php, 2 pageE.php, or 3 pageH.php...

Mozilla Firefox 4.0.1 Integer Overflow

function hexx var y = x.toString16; y = "0x"+y; return y; function itoai return String.fromCharCodei; // n - length in bytes 1 unicode char = 2 bytes function puffx, n whilex.length n x += x; return x.substring0,n; function arr2hextab var s = ""; forvar i in tab x = tabi; x = x.toString16;...

Pandora FMS 4.0.1 - 'sec2' Local File Inclusion

source: https://www.securityfocus.com/bid/52058/info Pandora FMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. Th...

Measuresoft ScadaPro xf Command Execution

Added: 11/28/2011 CVE: CVE-2011-3490 BID: 49613 OSVDB: 75490 Background ScadaPro is Real Time Data Acquisition software for Microsoft Windows. Problem ScadaPro version 4.0.0 and prior runs a legacy network service on UDP port 11234. This service contains multiple stack overflow and remote command...

Measuresoft ScadaPro xf Command Execution

Added: 11/28/2011 CVE: CVE-2011-3490 BID: 49613 OSVDB: 75490 Background ScadaPro is Real Time Data Acquisition software for Microsoft Windows. Problem ScadaPro version 4.0.0 and prior runs a legacy network service on UDP port 11234. This service contains multiple stack overflow and remote command...