Micro CMS 1.0 b1 - Persistent XSS Vulnerability

No description provided by source. Title : Micro CMS Persistent Cross-Site Scripting Vulnerability. Author : Veerendra G.G from SecPod Technologies www.secpod.com Vendor : http://www.micro-cms.com/ Advisory : http://secpod.org/blog/?p=135 http://secpod.org/advisories/SECPODMicroCMS.txt Version :...

FlashGameScript <= 1.7 (user) Remote SQL Injection Vulnerability

No description provided by source. FlashGameScript = 1.7 member.php$user SQL-Injection Exploit Vulnrability Discovered By: Xenduer77 ---July 7th, 2007 $user Is passed straight to the query without being filtered. SQL-INJECTION: For Version 1.7: -------...

CUPS 1.1.x Negative Length HTTP Header Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6437/info A vulnerability has been reported for CUPS that if exploited may result in a DoS or the execute of code on affected systems. An attacker can exploit this vulnerability by connecting to a vulnerable system and...

Microsoft Internet Explorer 6.0 Codebase Double Backslash Local Zone File Execution Weakness

No description provided by source. source: http://www.securityfocus.com/bid/10344/info A vulnerability has been reported that may potentially permit HTML documents to gain unauthorized access to local resources by using specific syntax when referencing said resource as a value for the CODEBASE...

GameSiteScript <= 3.1 (profile id) Remote SQL Injection Vulnerability

No description provided by source. GameSiteScript Profile$id SQL-Injection Exploit Vulnerability Discovered By: Xenduer77 ---July 7th, 2007 $id Is passed straight to the query without being filtered. SQL-INJECTION: For Version 3.1: -------...

Advanced Image Hosting 2.2 (index.php) SQL Injection Vulnerability

No description provided by source. ========================================== Advanced Image Hosting v2.2 SQLi Vulnerability ========================================== InformatioN Title : Advanced Image Hosting v2.2 SQLi Vulnerability Author : keracker Vendor or Software Link : http://yabsoft.com...

MS12-063 Microsoft Internet Explorer execCommand Use-After-Free Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Ramaas Software CMS SQL Injection Vulnerability

No description provided by source. Exploit Title: Ramaas Software CMS SQL Injection Vulnerability Version: Web Application Tested on: Apcahe/Unix Dork : intext:Powered by Ramaas Software Code : --------------------------------------------------------------------------------------- Greetz to all...

SoftBizScripts Dating Script SQL Injection Vunerability

No description provided by source. Exploit Title: SoftBizScripts Dating Script SQL Injection Vunerability Date: 29-4-2010 Author: 41.w4r10r Vendor Link : http://softbizscripts.com/ Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : inurl:searchresults.php?browse=1 Code :...

phpegasus (fckeditor) Remote Arbitrary File Upload Exploit

No description provided by source. ?php / ----------------------------------------------------------------- phpegasus fckeditor Remote Arbitrary File Upload Exploit -----------------------------------------------------------------...

Microsoft Windows XP/2000/NT 4 HTML Converter HR Align Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8016/info Microsoft Windows platforms are prone to a boundary condition error in the HTML converter. If the 'Align' attribute of the 'HR' tag is given an excessively large value, an internal buffer will be overrun. This...

CVE-2014-0476

creationtimestamp| type| source ---|---|--- 2014-06-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33899 2015-11-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38775 2018-05-29 15:50:33+00:00| seen|...

CVE-2014-3868

creationtimestamp| type| source ---|---|--- 2014-06-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39223...

openSUSE Security Update : flash-player (openSUSE-SU-2012:0723-1)

Adobe Flash Player was updated to 11.2.202.236, fixing lots of bugs and critical security issues. We also disabled inclusion of mms.cfg again, as it caused trouble on hardware accelerated systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-5329) (BEAST)

Oracle/Sun OpenJDK 1.6.0 was updated to the 1.10.4release, fixing lots of bugs and security issues. Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html for more details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

openSUSE Security Update : acroread (openSUSE-2012-33)

Acrobat Reader was updated to version 9.4.7 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-33. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-5329) (BEAST)

Oracle/Sun OpenJDK 1.6.0 was updated to the 1.10.4release, fixing lots of bugs and security issues. Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html for more details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

openSUSE Security Update : openssl (openSUSE-SU-2014:0492-1) (Heartbleed)

This openssl update fixes one security issue : - bnc872299: Fixed missing bounds checks for heartbeat messages CVE-2014-0160. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-277...

openSUSE Security Update : flash-player (openSUSE-SU-2012:0265-1)

flash-player was updated to the security update to 11.1.102.62. It fixes lots of security issues, some already exploited in the wild. Details can be found on: https://www.adobe.com/support/security/bulletins/apsb12-03.h tml These vulnerabilities could cause a crash and potentially allow an attack...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0637-1)

A critical vulnerability has been identified in Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.23 and earlier versions for Android. This memory corruption vulnerability CVE-2011-2110 could cause a crash and potentiall...