MS10-041: Vulnerability in Microsoft .NET Framework Could Allow Tampering (981343)

A data tampering vulnerability exists in the Microsoft .NET Framework that could allow an attacker to tamper with signed XML content without being detected. In custom applications, the security impact depends on the specific usage scenario. Scenarios in which signed XML messages are transmitted...

CVE-2010-2156

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service server exit via a zero-length client ID...

Applicure dotDefender 4.0 administrative interface cross site scripting

Applicure dotDefender 4.0 administrative interface cross site scripting An advisory by EnableSecurity. ID: ES-20100601 Advisory URL: http://resources.enablesecurity.com/advisories/ES-20100601-dotdefender4.txt Affected Versions: version 4.0 Fixed versions: 4.01-3 and later Description: Applicure...

VMSA-2010-0008 VMware View 3.1.3 addresses an important cross-site scripting vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2010-0008 Synopsis: VMware View 3.1.3 addresses an important cross-site scripting vulnerability Issue date: 2010-05-05 Updated on:...

Sql injection

DISPUTED SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report, stating that "there is no such vulnerability... The showUid parameter is generally used in...

CVE-2009-4855

SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report, stating that "there is no such vulnerability... The showUid parameter is generally used in third-party TYP...

CVE-2009-4855

TYPO3 4.0 is affected by a SQL injection vulnerability in index.php via the showUid parameter. The root cause is an injectable showUid value, enabling remote attackers to alter SQL commands. The TYPO3 Security Team disputes the report, noting the showUid parameter is commonly used in third‑party ...

PT-2010-1663 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 version 4.0 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the showUid parameter in index.php. However, the TYPO3 Security Team disputes this report, stating that the showUid parameter i...

Mandriva Update for kdevelop4 MDVA-2010:141 (kdevelop4)

Check for the Version of kdevelop4 OpenVAS Vulnerability Test Mandriva Update for kdevelop4 MDVA-2010:141 kdevelop4 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Microsoft IIS 4.0 - '.htr' Path Overflow (MS02-018) (Metasploit)

$Id: ms02018htr.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Windows NT NNTP Component Buffer Overflow

The Network News Transfer Protocol NNTP component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an...

[ MDVSA-2010:082 ] clamav

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:082 http://www.mandriva.com/security/ Package : clamav Date : April 18, 2010 Affected: 2008.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been found and corrected ...

CVE-2010-1357

The CVE-2010-1357 entry concerns a Cross-site Scripting (XSS) vulnerability in the SBD Directory Software 4.0, specifically in editors/logindialogue.php, exploitable via PATH_INFO. The NVD description confirms the vulnerability allows remote attackers to inject arbitrary web script or HTML. The p...

Satellite-X 4.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ======================================================================================== | Title : Satellite-X 4.0 Auth Bypass SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Dork : 2009...

Satellite-X 4.0 SQL Injection / Shell Upload

======================================================================================== | Title : Satellite-X 4.0 Auth Bypass SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site :...

Satellite-X 4.0 - Authentication Bypass

Satellite-X 4.0 - Authentication Bypass ======================================================================================== | Title : Satellite-X 4.0 Auth Bypass SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Dork :...

Satellite-X 4.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= Satellite-X 4.0 Auth Bypass SQL Injection Vulnerability =========================================================...

Satellite-X 4.0 - Authentication Bypass

======================================================================================== | Title : Satellite-X 4.0 Auth Bypass SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Dork : 2009 © Satellite-X | Tested on: windows...

CVE-2010-0977

PD PORTAL 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb...

CVE-2010-0977

PD PORTAL 4.0 is described as storing sensitive information under the web root with insufficient access control, enabling remote attackers to download the database file db.mdb via a direct request. The available sources confirm this vulnerability pattern but do not provide detailed exploit steps,...