Gopher <= 3.0.9 (+VIEWS) Remote (Client Side) Buffer Overflow Exploit

No description provided by source. / gopherv3.0.9+: remote client buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xgopher-client.c -o xgopher-client syntax: ./xgopher-client port bindshell port The Internet Gopher Client is based on the UMN Gopher/Gopherd 2.3....

Google Desktop Search Remote Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11541/info Google Desktop Search is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize HTML tag content. An attacker may leverage this issue...

Silentum Uploader 1.4.0 - Remote File Deletion Exploit

No description provided by source. Vendor: http://hypersilence.net Versions: Silentum Uploader 1.4.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=2 ---- Due to insufficient validation of client-side data, we...

MS IE 4.0/5.0,Outlook 98 0 window.open Redirect Vulnerability

No description provided by source. Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 3/Windows NT 4,Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4,Outlook 98 0 window.open Redirect Vulnerability source: http://www.securityfocus.com/bid/766/info If window.open is called with ...

Spyce 2.1.3 spyce/examples/automaton.spy Direct Request Error Message Information Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution. An attacker may leverage these issues to execute arbitrary script code in the...

Spyce 2.1.3 spyce/examples/getpost.spy Name Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution. An attacker may leverage these issues to execute arbitrary script code in the...

Spyce 2.1.3 docs/examples/redirect.spy Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution. An attacker may leverage these issues to execute arbitrary script code in the...

Zikula CMS 1.3.5 - Multiple Vulnerabilities

No description provided by source. Document Title: =============== Zikula CMS v1.3.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1114 Release Date: ============= 2013-10-16 Vulnerability Laboratory ID VL-ID:...

Spyce 2.1.3 docs/examples/handlervalidate.spy x Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution. An attacker may leverage these issues to execute arbitrary script code in the...

FangMail储存型XSS

简要描述： http://www.fangmail.net/abous/Successcase.html 近10w客户？ 详细说明： 邮件正文插入 即可触发。 漏洞证明：...

openSUSE Security Update : subversion (openSUSE-SU-2013:1836-1)

This update fixes the following issues with subversion CVE-2013-4505,CVE-2013-4558 : - bnc850747: update to 1.8.5 - CVE-2013-4505: moddontdothat does not restrict requests from serf clients. - CVE-2013-4558: moddavsvn assertion triggered by autoversioning commits. + Client-side bugfixes : - fix...

openSUSE Security Update : subversion (openSUSE-SU-2014:0334-1)

Apache Subversion was updated to 1.7.16 bnc862459 This release addresses one security issue: CVE-2014-0032: moddavsvn DoS vulnerability with SVNListParentPath. Affects servers with moddavsvn when configured on the root path of the server and SVNListParentPath is on. - Client-side bugfixes : - cop...

openSUSE Security Update : subversion (openSUSE-SU-2013:0687-1)

Subversion received minor version updates to fix remote triggerable vulnerabilities in moddavsvn which may result in denial of service. On openSUSE 12.1 : - update to 1.6.21 bnc813913, addressing remotely triggerable + CVE-2013-1845: moddavsvn excessive memory usage from property changes +...

openSUSE Security Update : subversion (openSUSE-SU-2013:1006-1)

This update of subversion includes several bug and security fixes. - update to 1.7.10 bnc821505 CVE-2013-1968 CVE-2013-2088 CVE-2013-2112 - Client-side bugfixes : - fix 'svn revert' 'no such table: revertlist' spurious error - fix 'svn diff' doesn't show some locally added files - fix changelist...

Arbitrary Code Execution

Overview Affected versions of this package are vulnerable to Arbitrary Code Execution. $parse allowed arbitrary code execution via Angular expressions under some very specific conditions. The only applications affected by these vulnerabilities are those that match all of the following conditions:...

openssl security update

1.0.1e-16.14 - fix CVE-2010-5298 - possible use of memory after free - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment - fix CVE-2014-0198 - possible NULL pointer dereference - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet - fix CVE-2014-0224 - SSL/TLS MITM vulnerabilit...

FreeBSD : gnutls -- client-side memory corruption (9733c480-ebff-11e3-970b-206a8a720317)

GnuTLS project reports : This vulnerability affects the client side of the gnutls library. A server that sends a specially crafted ServerHello could corrupt the memory of a requesting client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

The Code of the audit logic upload vulnerability discovery-vulnerability warning-the black bar safety net

0×0 0 Preface Saying a person happy,two people sharing became two parts of a happy,this I see is not necessarily right,if share and to be shared between the two is a rival relationship,and share the joy of the reason happens to be... ha ha,do not say,all know; BUT, if one of the tips to be shared...

Kadira: API keys being cached

Your API keys are cached on the client side.This will trigger client side attacks...

gnutls -- client-side memory corruption

GnuTLS project reports: This vulnerability affects the client side of the gnutls library. A server that sends a specially crafted ServerHello could corrupt the memory of a requesting client...