CVE-2009-0502

Cross-site scripting XSS vulnerability in blocks/html/blockhtml.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4, allows remote attackers to inject arbitrary web script or HTML via an HTML block, which is not properly handled when t...

Microsoft Word 2007 Sensitive Information Disclosure Vulnerability

Microsoft Word is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: sudo security update

An updated sudo package to fix a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The sudo superuser do utility allows system administrators to give certain users the ability to run...

CVE-2008-6063

Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name...

CVE-2008-6063

Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name...

CVE-2008-6063

CVE-2008-6063 affects Microsoft Word 2007 when the “Save as PDF” add-on is enabled. The vulnerability causes an absolute pathname to be placed in the Subject field during an “Email as PDF” operation, enabling disclosure of sensitive information such as the sender’s account name and the Temporary ...

CVE-2008-6063: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name...

CVE-2009-0278

Sun Java System Application Server AS 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the 1 WEB-INF or 2 META-INF directory via a malformed request...

CVE-2009-0278: Exposure of Sensitive Information to an Unauthorized Actor

Sun Java System Application Server AS 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the 1 WEB-INF or 2 META-INF directory via a malformed request...

The use of Flash package net horse-vulnerability warning-the black bar safety net

The use of Flash package network. We use the service-end technical protection network horse, protection to protect the go, network the horse of the JS code will still be caught, in those browser capture tool, network the horse of the JS exposed, the principle is very simple, net horse, no matter...

asn-query NSE Script

Maps IP addresses to autonomous system AS numbers. The script works by sending DNS TXT queries to a DNS server which in turn queries a third-party service provided by Team Cymru using an in-addr.arpa style zone set up especially for use by Nmap. The responses to these queries contain both Origin...

asiCMS alpha 0.208 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. =========================================================================================== o asiCMS alpha 0.208 Multiple Remote File Inclusion Vulnerability Software : asiCMS version alpha 0.208 Vendor : http://asicms.sourceforge.net/ Download :...

libxml XML实体名堆缓冲区溢出漏洞

BUGTRAQ ID: 31126 CVE ID：CVE-2008-3529 CNCVE ID：CNCVE-20083529 libxml软件包提供允许用户操控XML文件的函数库，包含有读、修改和写XML和HTML文件支持。 libxml处理畸形XML内容时存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 当libxml2处理超长XML实体名时存在基于堆的缓冲区溢出，如果应用程序链接libxml2处理不可信的畸形XML内容，可导致应用程序崩溃或任意代码执行。 XMLSoft Libxml2 2.6.31 XMLSoft Libxml2 2.6.30 XMLSoft Libxm...

contentnow-uploadxss.txt

=============================================================== ContentNow CMS Upload/XSS Multiple Remote Vulnerabilities =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

CVE-2008-2786

Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to lack of details as of 20080619, it is not clear whether this is the same issue as CVE-2008-2785. A CVE identifier has been assigned for tracking purposes...

CVE-2008-2269

AustinSmoke GasTracker AS-GasTracker 1.0.0 allows remote attackers to bypass authentication and gain privileges by setting the gastrackeradmin cookie to TRUE...

CVE-2008-2269

CVE-2008-2269 affects AustinSmoke GasTracker (AS-GasTracker) 1.0.0. The root issue is an authentication bypass: remote attackers can set the gastracker_admin cookie to TRUE to gain privileges. Impact is described as credential bypass leading to elevated access. Connected sources (NVD, CVE registr...

asgastracker-cookie.txt

--==+================================================================================+==-- --==+ AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 14 MA...

AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability +==-- --==+================================================================================+==-- Discovere...

AS-GasTracker 1.0.0 - Insecure Cookie Handling

AS-GasTracker 1.0.0 - Insecure Cookie Handling --==+================================================================================+==-- --==+ AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability +==-- --==+================================================================================+==...