Lucene search
+L

5024 matches found

attackerkb
attackerkb
•added 2010/05/25 2:30 p.m.•11 views

CVE-2010-2037

Directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

7.5CVSS6AI score0.11077EPSS
SaveExploits2References4
Prion
Prion
•added 2010/05/25 2:30 p.m.•23 views

Directory traversal

Directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

7.5CVSS7.8AI score0.11077EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2010/05/25 2:00 p.m.•37 views

CVE-2010-2037

Directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

6.2AI score0.11077EPSS
SaveExploits2References2
CVE
CVE
•added 2010/05/25 2:00 p.m.•111 views

CVE-2010-2037

CVE-2010-2037 is a directory traversal vulnerability in the Joomla! component Percha Downloads Attach (com_perchadownloadsattach) version 1.1. An attacker can read arbitrary files by providing a ‘..’ in the controller parameter to index.php, enabling potential exposure of sensitive information an...

7.5CVSS6.2AI score0.11077EPSS
SaveExploits2References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/25 12:00 a.m.•7 views

CVE-2010-2037: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

7.5CVSS6AI score0.11077EPSS
SaveExploits2References2
ThreatPost
ThreatPost
•added 2010/05/19 2:39 p.m.•10 views

Research: 1.3 Million Malicious Ads Viewed Daily

The true extent of the malvertizing scourge became much clearer this week with the release of new research by Dasient which shows that about 1.3 million malicious ads are being viewed online everyday, most pushing drive-by downloads and fake security software. Dancho Danchev sums up the findings...

1AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2010/05/19 12:00 a.m.•33 views

Joomla Percha Downloads Attach 1.1 Local File Inclusion

=========================================================================================================================== o Joomla Component Percha Downloads Attach Local File Inclusion Vulnerability Software : comperchadownloadsattach version 1.1 Vendor : http://www.percha.com/ Author :...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/05/19 12:00 a.m.•18 views

Joomla! Component Percha Downloads Attach 1.1 - Controller Traversal Arbitrary File Access

Joomla! Component Percha Downloads Attach 1.1 - Controller Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2010/05/19 12:00 a.m.•37 views

Joomla! Component Percha Downloads Attach 1.1 - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

7.5CVSS5.8AI score0.11077EPSS
SaveExploits2
OSV
OSV
•added 2010/05/05 1:22 p.m.•7 views

DEBIAN-CVE-2010-0406

OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...

4CVSS5.9AI score0.01759EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2010/05/05 1:22 p.m.•30 views

CVE-2010-0406

OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...

4CVSS5.9AI score0.01759EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/04 12:00 a.m.•3 views

CVE-2010-0406: Undefined Security Weakness

OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...

4CVSS5.9AI score0.01759EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/04/30 12:00 a.m.•49 views

Google Chrome Multiple Vulnerabilities (win)

This host is installed with Google Chrome Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnapr10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome Multiple Vulnerabilities win Authors: Madhuri D Updated By: Madhuri D on 2010-05-10...

10CVSS1.1AI score0.01852EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2010/04/23 2:30 p.m.•41 views

CVE-2010-1504

Cross-site scripting XSS vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitrary web script or HTML via vectors related to a chrome://downloads URI...

4.3CVSS6AI score0.01081EPSS
SaveExploits0References2
Mend
Mend
•added 2010/04/23 2:00 p.m.•2 views

CVE-2010-1504

Cross-site scripting XSS vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitrary web script or HTML via vectors related to a chrome://downloads URI...

6.3CVSS0.01081EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2010/04/23 2:00 p.m.•38 views

CVE-2010-1504

Removed by vendor...

4.3CVSS6.7AI score0.01081EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/04/23 12:00 a.m.•4 views

CVE-2010-1504: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitrary web script or HTML via vectors related to a chrome://downloads URI...

4.3CVSS6AI score0.01081EPSS
SaveExploits0References2
exploitpack
exploitpack
•added 2010/04/03 12:00 a.m.•24 views

PHP-fusion dsmsf Mod Downloads - SQL Injection

PHP-fusion dsmsf Mod Downloads - SQL Injection ======================================================== PHP-fusion dsmsf module downloads SQL Inj3ct0r Exploit ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

0.8AI score
SaveExploits0
zdt
zdt
•added 2010/04/03 12:00 a.m.•30 views

PHP-fusion dsmsf (module downloads) SQL Inj3ct0r Exploit

Exploit for php platform in category web applications ======================================================== PHP-fusion dsmsf module downloads SQL Inj3ct0r Exploit ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/04/03 12:00 a.m.•23 views

Zip Unzip 6.0 - .zip Local Stack Buffer Overflow

Zip Unzip 6.0 - .zip Local Stack Buffer Overflow / // local file header $lfheader = "\x50\x4B\x03\x04\x14\x00\x00\x00\x00\x00\xB7\xAC\xCE\x34\x00\x00\x00". "\x00\x00\x00\x00\x00\x00\x00\x00\xe4\x0f\x00\x00\x00"; // central directory file header $cdfh...

1AI score
SaveExploits0
Rows per page
Query Builder