896 matches found
CVE-2010-2477
Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...
CVE-2010-3903
Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service application crash via a 404 HTTP status code...
CVE-2010-3903
Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service application crash via a 404 HTTP status code...
Microsoft Internet Explorer - Object Type (MS03-020) (Metasploit)
$Id: ms03020ieobjecttype.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Splunk 4.0 - 4.1.2 XSS Vulnerability
Splunk is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:splunk:splunk";...
Splunk 4.x < 4.1.3 404 Response XSS
The version of Splunk Web hosted on the remote web server is affected by a cross-site scripting vulnerability due to a failure to sanitize the contents of the HTTP 'Referer' header before using it in HTTP error 404 messages. An unauthenticated, remote attacker can exploit this issue to inject...
CVE-2010-2429
Cross-site scripting XSS vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response...
Cross site scripting
Cross-site scripting XSS vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response...
Reading Apache CustomLogfiles - Windows
Reading Apache CustomLogfiles SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.96022";...
Jira Atlassian File Attachment Download
Exploit for multiple platform in category web applications ======================================= Jira Atlassian File Attachment Download ======================================= Exploit Title: Jira Atlassian Date: 28/3/2010 Author: Ignacio Garrido Mail: Ign.sec gmail com Software Link:...
HTTP Interesting File Scanner
This module identifies the existence of interesting files in a given directory path. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Interesting File Scanner', 'Description' = %q This modu...
WordPress Yoast GA 3.2.4 Plugin XSS
Exploit for unknown platform in category web applications ================================ Yoast GA 3.2.4 Plugin for WP XSS ================================ Info: The Google Analytics for WordPress plugin automatically tracks and segments all outbound links from within posts, comment author links...
Yoast GA 3.2.4 Plugin for WP XSS
No description provided by source. Info: The Google Analytics for WordPress plugin automatically tracks and segments all outbound links from within posts, comment author links, links within comments, blogroll links and downloads. It also allows you to track AdSense clicks, add extra search engine...
Apache Tomcat 404错误页跨站脚本漏洞
Bugraq ID: 37149 Apache Tomcat是一款开放源码的JSP应用服务器程序。 Apache Tomcat不正确过滤用户输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 由于不正确处理404错误页面，在返回给用户后，可导致恶意脚本代码在目标浏览器上执行，泄漏敏感信息。 Apache Software Foundation Tomcat 3.2.1 Apache Software Foundation Tomcat 3.2 Apache Software Foundation Tomcat 3.1.1 Apache Software Foundation...
Apache Tomcat 3.2.1 - 404 Error Page Cross-Site Scripting
Apache Tomcat is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to...
Cross-Site Scripting vulnerability in ProofReader for Joomla
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в компоненте ProofReader comproofreader для Joomla. Уязвимость на страницах с 404 ошибкой и на существующих страницах сайта. Это DOM Based XSS. XSS IE: http://site/1";alertdocument.cookie;//...
TwonkyMedia Server <= 4.4.17, 5.0.65 xss
Exploit for unknown platform in category web applications ======================================== TwonkyMedia Server = 4.4.17, 5.0.65 xss ======================================== =========================================================================== Title: TwonkyMedia Server Multiple...
Cross-Site Scripting vulnerability in Joomla
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в системе Joomla. XSS: http://site/3Cscript3Ealertdocument.cookie3C/script3E Уязвимость на странице с ошибкой 404. Уязвимы версии Joomla 1.5.x. Версия Joomla 1.5.12 уже не уязвима. Дополнительная информация о данной...
PunBB Automatic Image Upload <= 1.3.5 Delete Arbitrary File Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Automatic Image Upload = v1.3.5 Delete Arbitrary File Vulnerability Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Works only if '$AllowDelete = "USERGROUP";' is not commented in "uploadimgconfig.php" FIND...
PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete
PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete !/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowDelete = "Members"; use LWP::UserAgent; use HTTP::Cookies; my $UserName,$PassWord,$DirectoryFile,$DeleteFile = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or...