1945 matches found
Code injection
The deliver function in the sendmail delivery agent lib/mail/network/deliverymethods/sendmail.rb in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address...
CVE-2011-0739
The deliver function in the sendmail delivery agent lib/mail/network/deliverymethods/sendmail.rb in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address...
rubygem-mail -- Remote Arbitrary Shell Command Injection Vulnerability
Secunia reports: Input passed via an email from address is not properly sanitised in the "deliver" function lib/mail/network/deliverymethods/sendmail.rb before being used as a command line argument. This can be exploited to inject arbitrary shell commands...
FreeBSD : php-filter -- Denial of Service (c623f058-10e7-11e0-becc-0022156e8794)
The following DoS condition in filter extension was fixed in PHP 5.3.4 and PHP 5.2.15 : Stack consumption vulnerability in the filtervar function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTERVALIDATEEMAIL mode is used, allows remote attackers to cause a denial of service memory...
Account protection status warning scares Facebook Users !
Over the last few weeks we have been contacted by a number of members of the our Facebook page, concerned by a message they saw on Facebook, warning them that their account protection was "very low". With fake anti-virus also known as scareware attacks becoming an ever-growing problem they attemp...
CVE-2010-3717
The t3libdiv::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly restrict input to filtervar FILTERVALIDATEEMAIL operations in PHP, which allows remote attackers to cause a denial of service memory consumption and application crash via a...
BPJewelry Store SQL Injection
----------------------------------------------------------------------------------------- BPJewelry Store SQL-i Vulnerability ----------------------------------------------------------------------------------------- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...
Quick Player 1.3 - Unicode (SEH)
Quick Player 1.3 - Unicode SEH Quick Player 1.3 Unicode SEH Exploit Author Abhishek Lyall and Puneet Jain [email protected] , abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable applicatio...
Windows Mobile 6.5 TR WinCE 5.2 MessageBox Shellcode ARM
Windows Mobile 6.5 TR WinCE 5.2 MessageBox Shellcode ARM. Shellcode exploit for windows platform / Device: HTC Touch2 System: Windows Mobile 6.5 TR WinCE 5.0.2 Addresses of functions can be different on different devices so , you can edit the functions addresses. Coded by Celil Ünüver from...
DSquare Exploit Pack: D2SEC_LOTUSCAL
Name| d2seclotuscal ---|--- CVE| CVE-2010-3407 Exploit Pack| D2ExploitPack Description| IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow Vulnerability Notes|...
IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow
Exploit for windows platform in category remote exploits ============================================================== IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow ============================================================== source:...
IBM Lotus Domino iCalendar - Email Address Stack Buffer Overflow
source: http://labs.mwrinfosecurity.com/advisories/lotusdominoicalstackbufferoverflow/ IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow Vulnerability Package Name: Lotus Domino Server Date Reported: 2010-01-09 Affected Versions: Versions 8.0 and 8.5 on AIX, AIX 64bit, Linux, Linux...
Cross site scripting
Cross-site scripting XSS vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2009-4995: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Comdev One Admin SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================ Comdev One Admin SQL Injection Vulnerability ============================================ Author: farzin0123pianist Version: possible all versions Description : Dork : "Powered by Comdev One Admin o...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change 1 passwords, 2 usernames, and 3 e-mail addresses...
Phorum Cross-Site Scripting Vulnerability
This host is running Phorum and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodphorumxssvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Phorum Cross-Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod, http://www.secpod.com This...
CVE-2010-1629
Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...
