Multiple Multicast Vulnerabilities in Cisco IOS Software - Cisco Systems

Two crafted Protocol Independent Multicast PIM packet vulnerabilities exist in Cisco IOS software that may lead to a denial of service DoS condition. Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available. TRUSTED...

Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42908/info Amiro.CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to r...

CVE-2010-3003

creationtimestamp| type| source ---|---|--- 2010-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34546 2010-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34543 2010-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34544 2010-08-31...

XOOPS 2.0.14 - article.php SQL Injection

XOOPS 2.0.14 - article.php SQL Injection / \ / | | | \ / | | | | | | | | | | || | | | | | | | | '| | | | | | | | | | |/ \ / |/ / / | | | | || | || | || || | / || | | | / | | || / / |/ || ,|\|,| +-+-+-+-+ |C|r|e|w| +-+-+-+-+ XOOPS 2.0.14 article.php SQL Injection Vulnerability Discovered By...

chillyCMS 1.1.3 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================== chillyCMS 1.1.3 Multiple Vulnerabilities ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

μTorrent (uTorrent) 2.0.3 - DLL Hijacking

Title: uTorrent =2.0.3 Dll Hijacking Local Exploits By: DrIDE Tested: Windows 7RC Note: These are additional DLL's with unsafe Load Paths Reference: http://www.exploit-db.com/exploits/14726/ If the payload .DLL file is renamed to any of these files and placed in the utorrent.exe directory, the...

CVE-2010-5240

creationtimestamp| type| source ---|---|--- 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14786 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14787...

CVE-2010-3143

creationtimestamp| type| source ---|---|--- 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14745 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14778...

CVE-2010-3131

creationtimestamp| type| source ---|---|--- 2010-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14730 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14783...

CVE-2010-3129

creationtimestamp| type| source ---|---|--- 2010-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14726 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14748...

ATM Makers Release Fixes for 'Jackpotting' Flaw

Two ATM manufacturers have released software updates to address the remotely exploitable vulnerabilities in their machines’ firmware that IOActive researcher Barnaby Jack demonstrated line on stage at the Black Hat conference last month. In response to the demonstration, in which Jack was able to...

MS10-054: Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214) (remote check)

The remote host is affected by several vulnerabilities in the SMB server that may allow an attacker to execute arbitrary code or perform a denial of service against the remote host. These vulnerabilities depend on access to a shared drive, but do not necessarily require credentials. C Tenable...

SAP NetWeaver J2EE Engine - Authentication bypass

Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs:XSS Exploits: YES Reported: 20.08.2010 Vendor response: 23.08.2010 Date of Public Advisory: 17.06.2011 CVSS: 9.0 Author:Alexander Polyakov Description Authentication bypass vulnerability in SAP NetWeav...

Flock Browser 3.0.0 - Malformed Bookmark HTML Injection

Flock Browser 3.0.0 - Malformed Bookmark HTML Injection source: https://www.securityfocus.com/bid/42556/info Flock Browser is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and...

Zomplog CMS 3.9 Cross Site Request Forgery / Cross Site Scripting

Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download: http://www.zomp.nl/zomplog/downloads/zomplog/zomplog3.9.zip --- -= CSRF PoC 1 - Change Admin Password =- Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Create Admin User...

ACollab Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: ACollab Multiple Vulnerabilities Vendor: http://www.atutor.ca/acollab Vulnerable Version: 1.2 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: ACollab as described by its vendor is an accessible, open source...

ACollab - Multiple Vulnerabilities

ACollab - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: ACollab Multiple Vulnerabilities Vendor: http://www.atutor.ca/acollab Vulnerable Version: 1.2 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: ACollab as described by its...

CMS Source - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/42437/info CMS Source is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include local file-include, SQL-injection, and cross-site-scripting issues. Exploiting these...

Apple Zaps JailbreakMe Bugs in Record Time

Less than two weeks after exploits for a pair of serious security vulnerabilities were fitted into an automated JailbreakMe.com exploit, Apple has rushed out a patch to block the jailbreaking of iPhone, iPad and iPod Touch devices. The iOS 3.2.2 for iPad and iOS 4.0.2 iPhone and iPod Touch update...

VUPEN Security Research - Microsoft Internet Explorer "CIframeElement" Object Use-after-free Vulnerability (CVE-2010-2558)

VUPEN Security Research - Microsoft Internet Explorer "CIframeElement" Object Use-after-free Vulnerability CVE-2010-2558 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Internet Explorer is a web browser developed by Microsoft and included as part of the...