CVE-2012-0989

creationtimestamp| type| source ---|---|--- 2012-01-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36582...

Koobface Gang Apparently Hiding in Plain Sight

The individuals allegedly responsible for wreaking havoc on Facebook with the infamous Koobface botnet are living lavishly, blatantly flaunting their ill-gotten gains and taking little precautions to cover their tracks. Their locations, travels, business ventures, social media personas, Internet...

Cisco IOS XSS and XSRF Vulnerabilities

On June 19, 2009, Cisco released a security response for cross-site scripting and cross-site request forgery vulnerabilities in the HTTP server in IOS. Exploitation of these vulnerabilities could result in attacker supplied JavaScript or HTML being injected into web pages. Further, a remote...

Cisco IOS ICMP Redirect Denial of Service

It is possible to cause a denial of service by flooding the remote device with ICMP requests, which will cause the redirect cache to grow. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17794; scriptversion"1.8"; scriptcvsdate"Date: 2018/11/15 20:50:20";...

Pragyan CMS v 3.0 Remote File Disclosure

Exploit for php platform in category web applications Title Pragyan CMS v 3.0 = Remote File Disclosure Author Or4nG.M4n Download http://space.dl.sourceforge.net/project/pragyan/pragyan/3.0/PragyanCMS-v3.0-beta.tar.bz2 vuln download.lib.php line 16 vuln index.php line 234 $GET'fileget' exploit...

Gregarius 0.6.1 - Multiple SQL Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/51338/info Gregarius is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication...

CVE-2012-6644

creationtimestamp| type| source ---|---|--- 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36530 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36529 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36524 2012-01-09...

CVE-2012-5292

creationtimestamp| type| source ---|---|--- 2012-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36521 2012-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36522 2012-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36523...

CVE-2011-4191

creationtimestamp| type| source ---|---|--- 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18327 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18328 2012-01-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18351...

Wind noise CMS 0DAY exploits-exploits warning-the black bar safety net

Keywords: inurl:User/Regservice. asp The wind noise the registration page... Vulnerability page:/user/SetNextOptions. asp Use method: Constructor injection user/SetNextOptions. asp? sType=1&EquValue=aaaa&SelectName=aaa&ReqSql=select+1,adminname,3,4,5,6,7,8++from+FSMFAdmin “adminname”admin user na...

CVE-2012-5342

creationtimestamp| type| source ---|---|--- 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37942 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37940 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37941...

Yaws-Wiki 1.88 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Yaws-Wiki 1.88 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/51276/info Yaws is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

Yaws-Wiki 1.88 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/51276/info Yaws is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML...

Research: Botnets, the Most Prevalent Threat in the Enterprise

Botnets are the most significant source of malicious Web traffic for enterprises on the Internet, according to new research from ZScaler’s ThreatLabz. Over the past 30 days, botnets have accounted for nearly 80 percent of the security blocks within ZScaler’s network. In a distant second place amo...

VUPEN Security Research - Microsoft Windows Time Behaviour Remote Use-after-free Vulnerability (MS11-090)

VUPEN Security Research - Microsoft Windows Time Behaviour Remote Use-after-free Vulnerability MS11-090 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Microsoft Windows is a series of software operating systems and...

VUPEN Security Research - Microsoft Windows Media Player DVR-MS Buffer Overflow Vulnerability (MS11-092)

VUPEN Security Research - Microsoft Windows Media Player DVR-MS Buffer Overflow Vulnerability MS11-092 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Microsoft Windows Media Player WMP is a media player and media library...

VUPEN Security Research - Microsoft Windows "datime.dll" Remote Code Execution Vulnerability (MS11-090)

VUPEN Security Research - Microsoft Windows "datime.dll" Remote Code Execution Vulnerability MS11-090 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Microsoft Windows is a series of software operating systems and graphica...

VUPEN Security Research - Adobe Flash Player "SAlign" Memory Corruption Vulnerability (CVE-2011-2459)

VUPEN Security Research - Adobe Flash Player "SAlign" Memory Corruption Vulnerability CVE-2011-2459 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Adobe Flash Player is a cross-platform browser-based application runtime...

Microsoft Windows Time Behaviour Remote Use-after-free Vulnerability (MS11-090)

No description provided by source. VUPEN Security Research - Microsoft Windows Time Behaviour Remote Use-after-free Vulnerability MS11-090 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Microsoft Windows is a series of...

Nagios XI - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Nagios XI - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: www.securityfocus.com/bid/51069/info Nagios XI is prone to an HTML injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Successful...