Microsoft Excel Series Integer Underflow (MS11-045; CVE-2011-1278)

Microsoft Excel is a popular spreadsheet application. A vulnerability has been identified in Microsoft Excel. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execu...

Microsoft Office Excel Scenario Record Buffer Overflow (MS11-045; CVE-2011-1275)

Microsoft Excel is a popular spreadsheet application. This is a remote code execution vulnerability. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execute...

Technote 7.2 - Blind SQL Injection

Technote 7.2 - Blind SQL Injection Exploit Title: technote blind sql injection Google Dork: inurl:/technote7/board.php?board= Date: 2011.06.11 Author: BlueH4G http://blueh4g.org Software Link: http://www.technote.co.kr/php/technote1/board.php?board=consult&command=skininsert&exe=insertdownshop...

Tugux CMS 1.2 Multiple Remote Vulnerabilities

Summary Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web. Description The application suffers from multiple issues including: reflected and stored xss, sql Injection, local file inclusion, url redirection. Vulnerable parameters include:...

Vulnerability in Google ClientLogin Protocol !

Vulnerability in Google ClientLogin Protocol ! A group of security and privacy researchers from the Institute of Media Informatics at Ulm University in Germany, is claiming to have discovered a serious security vulnerability in Google's ClientLogin protocol. In a recent analysis of the Android...

PHP-Nuke 8.x <= "chng_uid" Blind SQL Injection Vulnerability

PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articles with users system. Each user can submit comments to discuss the articles. Main features include: web based admin, surveys, top page, access stats pag...

Multiple Vulnerabilities in Ripe website manager

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Ripe website manager which could be exploited to perform cross-site scripting, cross-site request forgery and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in Ripe website manager The...

PivotX 'Reset my password' Feature Data Manipulation Vulnerability

PivotX is prone to data manipulation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pivotx:pivotx"; ifdescription...

Fedora 14 : proftpd-1.3.3c-1.fc14 (2010-17091)

This is an update to the current upstream maintenance release, which addresses two security issues that can be exploited by malicious users to manipulate certain data and compromise a vulnerable system. - A logic error in the code for processing user input containing the Telnet IAC Interpret As...

Multiple SQL injection vulnerabilities in e107

High-Tech Bridge SA Security Research Lab has discovered three SQL injection vulnerabilities in e107 which could lead to execution of arbitrary SQL commands in applications database. 1 SQL injection vulnerabilities in e107 1.1 An input validation error exists in the URL in /e107admin/wmessage.php...

CVE-2010-1967

CVE-2010-1967 affects HP Insight Software Installer for Windows, prior to version 6.1. It is described as an unspecified local vulnerability that could allow a local user to read or modify data via unknown vectors. HP’s Security Bulletin notes that only v6.1 and newer mitigate the issue, with a l...

Secunia Research: Joomla BookLibrary Component Four SQL Injection Vulnerabilities

====================================================================== Secunia Research 30/06/2010 - Joomla BookLibrary Component Four SQL Injection Vulnerabilities - ====================================================================== Table of Contents Affected...

Secunia Research: TaskFreak "password" SQL Injection Vulnerability

====================================================================== Secunia Research 29/06/2010 - TaskFreak "password" SQL Injection Vulnerability - ====================================================================== Table of Contents Affected...

PHPWCMS 1.4.5 r398 Cross Site Request Forgery

PHPWCMS 1.4.5 r389 Cross Site Request Forgery function myfunc var frm = document.getElementById"csrf"; frm.submit; window.onload = myfunc; input type="hidden"...

PHPWCMS Cross-Site Request Forgery Vulnerability

No description provided by source. ?php / Exploit Title: PHPWCMS Cross-Site Request Forgery Vulnerability Date: 06/16/2010 Author: Jeremiah Talamantes Software Link: http://phpwcms.googlecode.com/files/phpwcmsr398.zip Version: 1.4.5 r398 Tested on: WinXP SP2 EN on WAMP 2.0 CVE: N/A Jeremiah...

[ MDVSA-2010:101 ] mysql

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:101 http://www.mandriva.com/security/ Package : mysql Date : May 19, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been found an...

OCS Inventory NG Server <= 1.3.1 (login) Remote Authentication Bypass

Exploit for php platform in category web applications ===================================================================== OCS Inventory NG Server OCS Inventory NG function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass...

OCS Inventory NG Server 1.3.1 - 'LOGIN' Remote Authentication Bypass

OCS Inventory NG = 1.3.1 login Remote Authentication Bypass function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass $'log'.action = $'ocsreports'.value + $$'meth' + '?lang=' + $$'lang'; if $$'type' == 0 $'login'.value = "'...

Ziepod+ 1.0 Cross Application Scripting

Exploit for windows platform in category remote exploits ======================================= Ziepod+ 1.0 Cross Application Scripting ======================================= !/usr/bin/python import thread import socket """ |------------------------------------------------------------------| | ...

Multiple Vulnerabilities in EASY Enterprise DMS

No description provided by source. ------------------------------------------------ Multiple Vulnerabilities in EASY Enterprise DMS - Stored XSS - XSS - Content Injection / Phishing through Frames - Unauthorized access to files - Unauthorized manipulation of data Date: 25.03.2010...