9294 matches found
jQuery uploadify v2.1.0 Remote File Upload
Exploit for unknown platform in category web applications ========================================== jQuery uploadify v2.1.0 Remote File Upload ========================================== Exploit Title: jQuery uploadify v2.1.0 Remote File Upload Date: 21/01/2010 Author: k4cp3r/Ablus Version: v2.1....
SA-CONTRIB-2010-009 - Block Class - Cross Site Scripting
Block Class module allows users to add classes to any block through the block's configuration interface. This release includes a fix for a cross-site scripting XSS vulnerability through which JavaScript could be inserted in the class field of a block's configuration interface. Versions affected...
CVE-2008-7252
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors...
TrendMicro Web-Deployment Active-X Remote Execution
param NAME="YvVSW"...
XSS Vulnerability in Active Calendar 1.2.0
XSS Vulnerability in Active Calendar 1.2.0 Discovered by Martin Barbella [email protected] Description of Vulnerability: ----------------------------- Active Calendar is PHP Class, that generates calendars year, month or week view as a HTML Table XHTML-Valid. From:...
Active Calendar 1.2.0 Cross Site Scripting
XSS Vulnerability in Active Calendar 1.2.0 Discovered by Martin Barbella Description of Vulnerability: ----------------------------- Active Calendar is PHP Class, that generates calendars year, month or week view as a HTML Table XHTML-Valid. From: http://micronetwork.de/activecalendar/index.php I...
On a national content-filtering system Dos security defect analysis-vulnerability warning-the black bar safety net
Author: jianxin 80sec EMail: jianxin80sec.com Site: http://www.80sec.com Date: 2009-1-2 From: http://www.80sec.com/release/dos-with-XXX.txt Directory 0×0 0 Preface 0×0 1 know it, understand this content filtering system 0×0 2 Hack it, the firewall class ids of some security research 0×0 3 somethi...
Cbse Class IV 1.0 Cross Site Scripting
+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...
ActiveKB RFI Vulnerability
Exploit for unknown platform in category web applications ========================== ActiveKB RFI Vulnerability ========================== ====================== Dz-Ghost Team =================== Exploit : 1- http://server/sm-ak051/includes/classes/class.template.php?panelPHPFile=EV!L...
Ptag 4.0.0 - Multiple Remote File Inclusions
Ptag 4.0.0 - Multiple Remote File Inclusions Exploit Title: Ptag sqltable = ptagprefix."session"; $this - cookiename = ptagprefix."session"; //If RSS mode, switch session to non-viewed tracker. if ptagoutput == "rss" parent::construct$ptagsql, sha1""; else parent::construct$ptagsql; ? PoC...
SaurusCMS <= 4.6.4 Multiple RFI Exploit
No description provided by source. Exploit Title: SaurusCMS = 4.6.4 Multiple RFI Exploit Date: 19-12-2009 Author: cr4wl3r Software Link: http://www.saurus.info Version: N/A Tested on: GNU/LINUX Code class.writeexcelworkbook.inc.php global $classpath; requireonce...
EasyMail SMTP ActiveX Control AddAttachment buffer overflow
Added: 12/10/2009 BID: 36440 OSVDB: 59939 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A stack buffer overflow vulnerability in the...
Mandriva Linux Security Advisory : mono (MDVSA-2009:322)
Multiple vulnerabilities has been found and corrected in mono : IOActive Inc. found a buffer overflow in Mono.Math.BigInteger class in Mono 1.2.5.1 and previous versions, which allows arbitrary code execution by context-dependent attackers CVE-2007-5197. Multiple cross-site scripting XSS...
CVE-2009-4154
Directory traversal vulnerability in includes/feedcreator.class.php in Elxis CMS allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...
Kide Shoutbox v0.4.6 XSS & AXFR
Exploit for unknown platform in category web applications =============================== Kide Shoutbox v0.4.6 XSS & AXFR =============================== Exploit : Go to the shoutbox and type: red text or hi or 3xplo!t :...
The Penetration Testing Marketplace in 2010
By Nick Selby Managing Director, Trident Risk Management Vulnerability assessment vendor Rapid7 has announced the first of a series of steps to integrate its penetration testing and vulnerability assessment scanning products. The first step is a module that allows users of the Metasploit Framewor...
Radiant Systems Sued By Companies Affected by Hack
Seven restaurants in Louisiana and Mississippi, have filed a class-action suit against Georgia-based Radiant Systems for producing a point-of-sale POS system that they say was not compliant with payment card industry security standards and resulted in an undetermined number of customers having...
Elxis - Filename Directory Traversal
Elxis - Filename Directory Traversal source: https://www.securityfocus.com/bid/37158/info Elxis is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could...
[SECURITY] Fedora 11 Update: php-pear-Net-Ping-2.4.5-1.fc11
OS independent wrapper class for executing ping calls...
CVE-2009-3843
HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make...