SmarterTools SmarterMail 8.0 Cross Site Scripting

Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: March 14, 2011 Vendor: SmarterTools Application: SmarterMail Version 8.0 Bugs: Stored XSS, Reflected XSS Patch: None Available Timeline: Notify Vendor simultaneous with Vendor Publication:...

SmarterMail 8.0 - Multiple Cross-Site Scripting Vulnerabilities

SmarterMail 8.0 - Multiple Cross-Site Scripting Vulnerabilities Author: Hoyt LLC Research Target: SmarterMail Version 8.0.4086.25048 Tools: Burp Suite Pro 1.3.09, FuzzDB Description: XSS, Cross Site Scripting in SmarterMail 8.0.4086.25048, CWE-79, CAPEC-86 Keywords: Stored XSS, Reflected XSS, Cro...

SmarterMail 7.x Cross Site Scripting / Shell Upload / Traversal

To: Vuln.Lists Re: Coordinated Disclosure, SmarterMail 7.x Versions Private Note - Rewrite as you wish, vendor has acknowledged these bugs and more and issued a fix. ------------------------------ Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: October 28, 2010 Vendor:...

PHP-Nuke 8.0 Cross Site Scripting

Hello list! I want to warn you about Insufficient Anti-automation and Cross-Site Scripting vulnerabilities in PHP-Nuke. SecurityVulns ID: 11485. ------------------------- Affected products: ------------------------- Vulnerable are PHP-Nuke 8.0 and previous versions. ---------- Details: ----------...

Movavi VideoSuite 8.0 (SlideShow.exe) Local Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/perl Title : Movavi VideoSuite 8.0 SlideShow.exe Local Crash PoC Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Crashs and...

Movavi VideoSuite 8.0 (MovieEditor.exe) Local Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/perl Title : Movavi VideoSuite 8.0 MovieEditor.exe Local Crash PoC Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Crashs and...

IBM Lotus Sametime Multiple Cross-Site Scripting Vulnerabilities

IBM Lotus Sametime Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Movavi VideoSuite 8.0 MediaPlayer.exe Buffer Overflow

!/usr/bin/perl Title : Movavi VideoSuite 8.0 MediaPlayer.exe Buffer Overflow Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Remote Access and BOF Tested on : Windows XP SP3 Français...

Movavi VideoSuite 8.0 SlideShow.exe Buffer Overflow

!/usr/bin/perl Title : Movavi VideoSuite 8.0 SlideShow.exe Local Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Crashs and Overflows in Process Tested on : Windows XP SP3...

Movavi VideoSuite 8.0 Slideshow - '.jpg' Local Crash (PoC)

!/usr/bin/perl Title : Movavi VideoSuite 8.0 SlideShow.exe Local Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Crashs and Overflows in Process Tested on : Windows XP SP3...

Movavi VideoSuite 8.0 Slideshow - .jpg Local Crash (PoC)

Movavi VideoSuite 8.0 Slideshow - .jpg Local Crash PoC !/usr/bin/perl Title : Movavi VideoSuite 8.0 SlideShow.exe Local Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Crashs...

Movavi VideoSuite 8.0 Movie Editor - '.avi' Local Crash (PoC)

!/usr/bin/perl Title : Movavi VideoSuite 8.0 MovieEditor.exe Local Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Crashs and Overflows in Process Tested on : Windows XP SP3...

Code injection

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.20, 8.1 before 8.12.48, 8.2 before 8.23, and 8.3 before 8.32.1, when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service device reload...

CVE-2011-0583

Cross-site scripting XSS vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via the cfform tag...

FreeBSD 8.0 Local Denial of Service (forced reboot)

Exploit for bsd platform in category dos / poc Exploit Title: FreeBSD local denial of service - forced reboot Date: 28. January 2011 Author: Kingcope Software Link: http://www.freebsd.org Operating System: FreeBSD Tested on: 8.0-RELEASE This source code when compiled and executed will reboot at...

FreeBSD Local Denial Of Service

Exploit Title: FreeBSD local denial of service - forced reboot Date: 28. January 2011 Author: Kingcope Software Link: http://www.freebsd.org Operating System: FreeBSD Tested on: 8.0-RELEASE This source code when compiled and executed will reboot at least FreeBSD 8.0-RELEASE because of a null...

FreeBSD 8.0 - Local Forced Reboot (Denial of Service)

FreeBSD 8.0 - Local Forced Reboot Denial of Service / Exploit Title: FreeBSD local denial of service - forced reboot Date: 28. January 2011 Author: Kingcope Software Link: http://www.freebsd.org Operating System: FreeBSD Tested on: 8.0-RELEASE This source code when compiled and executed will rebo...

LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD

LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD bug discovered & exploited by Kingcope Dec 2010 Lame Xploit Tested with success on FreeBSD 8.0-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86 FreeBSD 6.3-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86...

Novell Groupwise 8.0 - Multiple Remote Vulnerabilities

Novell Groupwise 8.0 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/44732/info Novell GroupWise is prone to multiple security vulnerabilities, including multiple remote code-execution vulnerabilities, an information-disclosure issue, and a cross-site scripting issue...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4089

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file...