Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to hijack the authentication of administrators...

Sql injection

SQL injection vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-4477

Affected software: Drupal Drag & Drop Gallery module (6.x). Vulnerability type: Access bypass in the module’s handling of uploads and access controls (CVE-2012-4477). Root cause: unresolved access-control flaws in the Drag & Drop Gallery code path that can allow remote attackers to bypass restric...

CVE-2012-4478

The CVE-2012-4478 vulnerability is a CSRF flaw in Drupal’s Drag & Drop Gallery 6.x module that can enable remote attackers to hijack an administrator’s session. Affected component: Drag & Drop Gallery module (Drupal contrib) 6.x. Root cause: CSRF in the module’s handling of admin actions, allowin...

CVE-2012-4478

Cross-site request forgery CSRF vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to hijack the authentication of administrators...

Drupal Drag And Drop 6.x-1.5 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Drupal Module Drag Drop Gallery 6.x-1.5 - upload.php Arbitrary File Upload

Drupal Module Drag Drop Gallery 6.x-1.5 - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54179/info Drag & Drop Gallery is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize...

Drupal Modules - Drag & Drop Gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

UBUNTU-CVE-2011-3023

Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to drag-and-drop operations...

Yahoo! Messenger 11.5 Buffer Overflow

No description provided by source. Title: ====== Yahoo! Messenger v11.5 - Buffer Overflow Vulnerability Date: ===== 2012-02-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=434 VL-ID: ===== 434 Introduction: ============= Der Yahoo Messenger eigene Schreibung Yahoo!...

CVE-2011-3980

Technical details about CVE-2011-3980 are not publicly provided in the connected documents. The materials reference TYPO3 Drag Drop Mass Upload extension 2.0.2 and earlier and arbitrary file upload, but do not specify vectors or root cause. Monitor for updates.

Hack Record Book

Записная книга для хранения и обработки найденных на сайтах уязвимостей. Можно сохранить: + Ссылку. + Описание уязвимости. + ТИЦ, PR можно узнать автоматически. + Alexa rate. + Google indexed|not filtered pages count. + Дату и время записи. + Рейтинг уязвимости. + Ваши личные заметки по данному...

iClone - SQL Injection

iClone - SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iClone SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.reallusion.com/iclone/ Platform: Windows Price:$199 Author :...

Stack-Based Buffer Overflow Vulnerability in Collaboration Common Utility

Overview Collaboration Common Utility, a component of multiple Hitachi products, is vulnerable to stack-based buffer overflow when the Drag and Drop Component for Collaboration feature is also installed. Impact No details available. Solution Please refer to the 'Vendor Information' section for th...

Code injection

Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service memory error or possibly have unspecified other impact via vectors related to the "drag + drop" functionality...

CVE-2010-2109

Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service memory error or possibly have unspecified other impact via vectors related to the "drag + drop" functionality...

CVE-2010-2109

Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service memory error or possibly have unspecified other impact via vectors related to the "drag + drop" functionality...

CVE-2010-2109

Removed by vendor...

Google Patches 'High Risk' Chrome Flaws

Google has pushed out another automatic Chrome browser update to fix multiple security issues that could expose users to hacker attacks. Google Chrome 5.0.375.55, available for Windows, Mac and Linux, addresses at least two “high risk” vulnerabilities and several security-related denial-of-servic...

Ubuntu Update for openjdk-6 vulnerabilities USN-923-1

Ubuntu Update for Linux kernel vulnerabilities USN-923-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9231.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for openjdk-6 vulnerabilities USN-923-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...