39 matches found
CVE-2018-1588
The CVE-2018-1588 entry concerns IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0–5.0.2 and 6.0–6.0.6) with a XML External Entity (XXE) vulnerability when processing XML data. Underlying issue: XXE allow remote attackers to exfiltrate sensitive information or consume memory res...
Sony Playstation 4 (PS4) - WebKit setAttributeNodeNS User After Free Vulnerability
Exploit for hardware platform in category dos / poc Note: While I exploited this bug on the PS4, this bug can also be exploited on other unpatched platforms. As such, I've published it under the "WebKit" folder and not the "PS4" folder. Introduction In around October of 2017, a few others as well...
CVE-2012-5176
Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding...
CVE-2012-5176
Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding...
Safari 5.02 Stack Overflow Denial of Service
Exploit for windows platform in category dos / poc ============================================ Safari 5.02 Stack Overflow Denial of Service ============================================ Exploit Title: Safari 5.02 stack overflow dos Date:10/11/2010 Author: clshack Software Link:...
Safari 5.02 Stack Overflow Denial of Service
No description provided by source. Exploit Title: Safari 5.02 stack overflow dos Date:10/11/2010 Author: clshack Software Link: http://www.apple.com/it/safari/download/ Version:5.02 Tested on: windows xp sp3 en CVE : Browser crash: scriptdocument.write'a'/script...
Apple Safari 5.02 - Stack Overflow Denial of Service
Apple Safari 5.02 - Stack Overflow Denial of Service Exploit Title: Safari 5.02 stack overflow dos Date:10/11/2010 Author: clshack Software Link: http://www.apple.com/it/safari/download/ Version:5.02 Tested on: windows xp sp3 en CVE : Browser crash: document.write'a'...
Apple Safari 5.02 - Stack Overflow Denial of Service
Exploit Title: Safari 5.02 stack overflow dos Date:10/11/2010 Author: clshack Software Link: http://www.apple.com/it/safari/download/ Version:5.02 Tested on: windows xp sp3 en CVE : Browser crash: document.write'a' document.writedocument.body.innerHTML -- Alessio Dalla Piazza Personal Blog:...
Movable Type < 5.02 Multiple Vulnerabilities
Binary data 5535.prm...
FileCopa FTP Server 'NOOP' Command DoS Vulnerability
FileCopa FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ReadMsg.php in @Mail 5.02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving 1 links and 2 images...
CVE-2007-2825
CVE-2007-2825 affects ReadMsg.php in @Mail 5.02 and earlier, where multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, specifically using (1) links and (2) images. The vulnerability is documented across multipl...
CVE-2007-2825
Multiple cross-site scripting XSS vulnerabilities in ReadMsg.php in @Mail 5.02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving 1 links and 2 images...
CVE-2005-4312
SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2004-2384
NullSoft Winamp 5.02 allows remote attackers to cause a denial of service crash by creating a file with a long filename, which causes the victim's player to crash when the file is opened from the command line...
PhotoPost PHP Pro < 5.02 RC4 member.php uid Parameter SQL Injection
Binary data 2903.prm...
PHP-Fusion 45 - Setuser.php HTML Injection
PHP-Fusion 45 - Setuser.php HTML Injection source: https://www.securityfocus.com/bid/12853/info PHP-Fusion is reportedly affected by a HTML injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input passed to the 'setuser.php' script before usin...
AGAIN: Tested on Windows 98 with 'free' Opera 5.02 Build 856a (No Java Runtime Environment installed)
Thursday, 19 April, 2001 There is an interesting oddity with the 'free' Opera 5.02 Build 856a No Java Runtime Environment installed on Windows 98 with downloading files. In particular .exe. While the array of file type associations and instructions what to do with them is wide, the instruction se...
feeble.you!dora.exploit
Sunday, March 18, 2001 Silent delivery and installation of an executable on a target computer. No client input other than opening an email using Eudora 5.02 - Sponsored Mode provided 'use Microsoft viewer' and 'allow executables in HTML content' are enabled. One wonders why they are there in the...