VMSA-2010-0020:VMware ESXi 4.1 Update Installer SFCB Authentication Flaw

VMSA-2010-0020.1 VMware ESXi 4.1 Update Installer SFCB Authentication Flaw VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0020.1 VMware Security Advisory Synopsis: VMware ESXi 4.1 Update Installer SFCB Authentication Flaw VMware Security Advisory Issue date: 2010-12-21...

qEngine 4.1 Mullti Vulnerability

Exploit for php platform in category web applications ================================ qEngine 4.1 Mullti Vulnerability ================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ ...

Clipshare Pro 4.1 Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

ClipShare Pro 4.1 Persistent XSS Vulnerability

Exploit for php platform in category web applications ============================================== ClipShare Pro 4.1 Persistent XSS Vulnerability ============================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: ClipShare Pro...

Null pointer dereference

ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field...

Key Combos Bust iPhone Password Protection

A flaw in the iOS software that runs Apple’s iPhone allows any user to bypass the password entry screen by manipulating the emergency call feature, essentially rendering iPhone passwords useless. The flaw, first disclosed in a discussion on the forums site macrumors.com on October 22, requires...

CVE-2010-3421

Cross-site scripting XSS vulnerability in AffiliateLogin.asp in ProductCart 3, 4.1 SP1, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter, a different vector than CVE-2004-2174 and CVE-2005-0995. NOTE: some of these details ar...

CVE-2010-3421

Cross-site scripting XSS vulnerability in AffiliateLogin.asp in ProductCart 3, 4.1 SP1, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter, a different vector than CVE-2004-2174 and CVE-2005-0995. NOTE: some of these details ar...

CVE-2010-3421

CVE-2010-3421 describes an XSS vulnerability in AffiliateLogin.asp within ProductCart (versions including 3 and 4.1 SP1, and possibly others). The vulnerability allows remote attackers to inject arbitrary script or HTML via the redirectUrl parameter, representing a different vector from CVE-2004-...

CVE-2010-1813

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors involving HTML object outlines...

CVE-2010-1814

MiracleLinux AXSA:2011-34:01 documents CVE-2010-1814 as one of several WebKitGTK+ vulnerabilities. Affected package: webkitgtk-1.2.6-2.AXS4. The advisory indicates these issues are fixed in that release and lists multiple CVEs addressed, including CVE-2010-1814. Remediation is to upgrade to the r...

PT-2010-3444 · Apple · Ios

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted TIFF file. Recommendations: For version...

PT-2010-3447 · Apple +2 · Webkit +3

Name of the Vulnerable Software and Affected Versions: WebKit in Apple iOS versions prior to 4.1 webkitgtk versions prior to 1.2.6 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vecto...

CVE-2010-3100

CVE-2010-3100 describes a directory traversal vulnerability in Porta+ FTP Client 4.1 (and possibly other versions) where crafted filename traversal sequences can cause an FTP server to overwrite arbitrary files on the target system. The affected component is the Porta+ FTP client’s handling of fi...

Bugzilla Multiple Vulnerabilities

Bugzilla is prone to the following vulnerabilities: 1. A security bypass issue. 2. Multiple information disclosure vulnerabilities. 3. A denial-of-service vulnerability. Successfully exploiting these issues may allow an attacker to bypass certain security restrictions, obtain sensitive informatio...

EggBlogg 4.1 <= LFI Vulnerability

Exploit for php platform in category web applications ================================= EggBlogg 4.1 = LFI Vulnerability ================================= Exploit Title: EggBlogg 4.1 = LFI Date: 28 luglio 2010 Author: Anti Sec Software Link: http://eggblog.net/ Version: 4.1 Google dork : Eggblogg...

EDItran Communications Platform (editcp) 4.1 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/41342/info EDItran Communications Platform editcp is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input before copying it into a fixed-length buffer. Attackers can exploit this issue to execute...

EDItran Communications Platform (editcp) 4.1 - Remote Buffer Overflow

EDItran Communications Platform editcp 4.1 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/41342/info EDItran Communications Platform editcp is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input before copying it into a...

ISC DHCPD - Denial of Service

ISC DHCPD - Denial of Service ! /usr/bin/env python Exploit title: isc-dhcpd DoS Date: 03/07/2010 Author: sid Software Link: https://www.isc.org/software/dhcp Version: 4.0.x, 4.1.x, 4.2.x CVE: cve-2010-2156 ps: is possible make a bruteforce on subnet ip address to find a correct value. import sys...

Mandriva Update for dhcp MDVSA-2010:114 (dhcp)

Check for the Version of dhcp OpenVAS Vulnerability Test Mandriva Update for dhcp MDVSA-2010:114 dhcp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...