ArrowChat 1.5.61 - Multiple Vulnerabilities

ArrowChat 1.5.61 - Multiple Vulnerabilities Exploit Title: ArrowChat ?do=" enctype="multipart/form-data" --------------------...

PandaLabs Uncovers the Cyber-Crime Black Market

Inventory is growing and prices are dropping on the cyber crime black market, according to a new report from security firm Panda Labs. Stolen banking credentials, malicious programs and stolen credit cards are all for sale online in what Panda experts say is a flourishing criminal black market...

Intel® Desktop Boards Privilege Escalation

Summary: Software running administrative ring 0 privilege can under certain circumstances change code running in System Management Mode. Description: A new BIOS update is available for selected Intel desktop motherboards to ensure proper configuration settings. These changes would prevent a...

Intel Desktop Boards SMM Local Privilege Escalation Vulnerability (Linux)

This host has Intel Desktop Boards running which is prone to Local Privilege Escalation Vulnerability. OpenVAS Vulnerability Test $Id: gbinteldesktopboardsmmlocalprvesclin.nasl 6522 2017-07-04 15:22:28Z cfischer $ Intel Desktop Boards SMM Local Privilege Escalation Vulnerability Linux Authors:...

Intel Desktop Boards SMM Local Privilege Escalation Vulnerability (INTEL-SA-00022) - Linux

Intel Desktop Boards are prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Input validation

Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory...

CVE-2008-7096: Undefined Security Weakness

Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory...

CVE-2009-1677: Improper Control of Generation of Code

Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow 1 remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account's "display name" setting and then invoking...

Directory traversal

Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards iDB 0.2.5 Pre-Alpha SVN 243 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter in a settings action to profile.php...

CVE-2009-1498

Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards iDB 0.2.5 Pre-Alpha SVN 243 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter in a settings action to profile.php...

CVE-2009-1498: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards iDB 0.2.5 Pre-Alpha SVN 243 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter in a settings action to profile.php...

Silentum Boards Cross Site Scripting

--------------------------------------------------------- Portal Name: Silentum Boards Version : All version Vendor : http://hypersilence.net/silentumboards.php Author : PouyaServer , [email protected] Risk: Low Aria-security.net Vulnerability : XSS...

Unfixed XSS vulnerability at www.hawaiiusedboards.com

Security researcher SaMTHG, has submitted on 16/09/2008 a cross-site-scripting XSS vulnerability affecting www.hawaiiusedboards.com, which at the time of submission ranked 21297453 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It ...

CVE-2008-2011: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the National Rail Enquiries Live Departure Boards gadget before 1.1 allows remote National Rail Enquiries servers or man-in-the-middle attackers to inject arbitrary web script or HTML, and execute arbitrary code, via a response body, as demonstrated by a...

Joomla! Component com_Marketplace 1.1.1 - SQL Injection

Joomla! Component comMarketplace 1.1.1 - SQL Injection Joomla Component Markplace 1.1.1 Remote Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Tested on: Markplace Version 1.1.1 and 1.1.1-pl1 Dork:"Marketplace Version 1.1.1" "Marketplace Version 1.1.1-pl1" inurl:index.php?option=commarketplac...

Remote file inclusion

PHP remote file inclusion vulnerability in templates/Official/partuserprofile.php in Connectix Boards 0.8.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatepath parameter...

CVE-2008-0502

PHP remote file inclusion vulnerability in templates/Official/partuserprofile.php in Connectix Boards 0.8.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatepath parameter...

CVE-2008-0502

The CVE-2008-0502 entry documents a PHP remote file inclusion vulnerability in Connectix Boards (templates/Official/part_userprofile.php) affecting version 0.8.2 and earlier. The root cause is that the template_path parameter can be controlled to include an arbitrary URL, enabling remote attacker...

CVE-2008-0502

PHP remote file inclusion vulnerability in templates/Official/partuserprofile.php in Connectix Boards 0.8.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatepath parameter...

CVE-2008-0502: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in templates/Official/partuserprofile.php in Connectix Boards 0.8.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatepath parameter...