6485 matches found
mBlogger 1.0.04 (addcomment.php) Persistent XSS Exploit
No description provided by source. !/usr/bin/python Exploit Title: mBlogger v1.0.04 addcomment.php Persistent XSS Exploit Date : 04 September 2010 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/mblogger/ Version ...
Gopher <= 3.0.9 (+VIEWS) Remote (Client Side) Buffer Overflow Exploit
No description provided by source. / gopherv3.0.9+: remote client buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xgopher-client.c -o xgopher-client syntax: ./xgopher-client port bindshell port The Internet Gopher Client is based on the UMN Gopher/Gopherd 2.3....
PhpMyAdmin Client Side 0Day Code Injection and Redirect Link Falsification
No description provided by source. PhpMyAdmin Client Side 0Day Code Injection and Redirect Link Falsification Credits: Emanuele 'emgent' Gentili [email protected] Marco 'whitesheep' Rondini [email protected] Alessandro 'scox' Scoscia [email protected] In error.php, PhpMyAdmi...
SpagoBI 4.0 - Persistent XSS Vulnerability
No description provided by source. 01. Advisory Information Title: Persistent Cross-Site Scripting XSS in SpagoBI Date published: 2014-03-01 Date of last update: 2014-03-01 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: High 02. Vulnerability Information CVE...
MPlayer 0.9/1.0 MMST Get_Header Remote Client-Side Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11962/info A remote, client-side buffer overflow vulnerability reportedly affects MPlayer. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying them...
FangMail储存型XSS
简要描述： http://www.fangmail.net/abous/Successcase.html 近10w客户？ 详细说明： 邮件正文插入 即可触发。 漏洞证明：...
openSUSE Security Update : subversion (openSUSE-SU-2013:0687-1)
Subversion received minor version updates to fix remote triggerable vulnerabilities in moddavsvn which may result in denial of service. On openSUSE 12.1 : - update to 1.6.21 bnc813913, addressing remotely triggerable + CVE-2013-1845: moddavsvn excessive memory usage from property changes +...
openSUSE Security Update : subversion (openSUSE-SU-2014:0334-1)
Apache Subversion was updated to 1.7.16 bnc862459 This release addresses one security issue: CVE-2014-0032: moddavsvn DoS vulnerability with SVNListParentPath. Affects servers with moddavsvn when configured on the root path of the server and SVNListParentPath is on. - Client-side bugfixes : - cop...
openSUSE Security Update : subversion (openSUSE-SU-2013:1006-1)
This update of subversion includes several bug and security fixes. - update to 1.7.10 bnc821505 CVE-2013-1968 CVE-2013-2088 CVE-2013-2112 - Client-side bugfixes : - fix 'svn revert' 'no such table: revertlist' spurious error - fix 'svn diff' doesn't show some locally added files - fix changelist...
openSUSE Security Update : subversion (openSUSE-SU-2013:1836-1)
This update fixes the following issues with subversion CVE-2013-4505,CVE-2013-4558 : - bnc850747: update to 1.8.5 - CVE-2013-4505: moddontdothat does not restrict requests from serf clients. - CVE-2013-4558: moddavsvn assertion triggered by autoversioning commits. + Client-side bugfixes : - fix...
Arbitrary Code Execution
Overview Affected versions of this package are vulnerable to Arbitrary Code Execution. $parse allowed arbitrary code execution via Angular expressions under some very specific conditions. The only applications affected by these vulnerabilities are those that match all of the following conditions:...
openssl security update
1.0.1e-16.14 - fix CVE-2010-5298 - possible use of memory after free - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment - fix CVE-2014-0198 - possible NULL pointer dereference - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet - fix CVE-2014-0224 - SSL/TLS MITM vulnerabilit...
FreeBSD : gnutls -- client-side memory corruption (9733c480-ebff-11e3-970b-206a8a720317)
GnuTLS project reports : This vulnerability affects the client side of the gnutls library. A server that sends a specially crafted ServerHello could corrupt the memory of a requesting client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...
The Code of the audit logic upload vulnerability discovery-vulnerability warning-the black bar safety net
0×0 0 Preface Saying a person happy,two people sharing became two parts of a happy,this I see is not necessarily right,if share and to be shared between the two is a rival relationship,and share the joy of the reason happens to be... ha ha,do not say,all know; BUT, if one of the tips to be shared...
Kadira: API keys being cached
Your API keys are cached on the client side.This will trigger client side attacks...
gnutls -- client-side memory corruption
GnuTLS project reports: This vulnerability affects the client side of the gnutls library. A server that sends a specially crafted ServerHello could corrupt the memory of a requesting client...
gnutls -- client-side memory corruption
GnuTLS project reports: This vulnerability affects the client side of the gnutls library. A server that sends a specially crafted ServerHello could corrupt the memory of a requesting client...
Connect "_method"跨站脚本漏洞
Connect是一款基于WEB的应用。 Connect不正确过滤"method" POST参数数据，允许远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 Connect 2.x Connect 2.8.1版本已修复该漏洞，建议用户下载使用： https://github.com/senchalabs/connect...
WordPress Unconfirmed Plugin 's'插件跨站脚本漏洞
Bugtraq ID:66781 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress Unconfirmed插件不正确过滤's'参数，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 WordPress Unconfirmed Plugin 1.2.4 WordPress Unconfirmed 1.2.5版本已修复该漏洞，建议用户下载使用： http://wordpress.org/plugins/unconfirmed...
CVE-2014-2866
CommonSpot (PaperThin) before 7.0.2 and 8.x before 8.0.3 is vulnerable because access restrictions rely on client-side JavaScript, which can be bypassed by an attacker who can modify that code to perform operations that should be restricted. The Red Hat security entry documents the same descripti...