Miniwebsvr 0.0.10 Directory Traversal

miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the latest version of the application available...

CVE-2005-3294

creationtimestamp| type| source ---|---|--- 2010-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12604 2010-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15860...

VMware View Portal 3.1 - Cross-Site Scripting

VMware View Portal 3.1 - Cross-Site Scripting DSECRG-09-058 Vmware View - XSS vulnerability Source:http://www.dsecrg.com/pages/vul/show.php?id=158 Linked XSS in VMware Portal Digital Security Research Group DSecRG Advisory DSECRG-09-058 Application: VMware View Portal Versions Affected:...

VUPEN Security Research - Adobe Shockwave 3D Blocks Field Code Execution Vulnerability (CVE-2010-1283)

VUPEN Security Research - Adobe Shockwave 0xFFFFFF49 3D Block Code Execution Vulnerability CVE-2010-1283 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to...

VUPEN Security Research - Adobe Shockwave 3D Two Remote Code Execution Vulnerabilities (CVE-2010-1284)

VUPEN Security Research - Adobe Shockwave 3D Two Code Execution Vulnerabilities CVE-2010-1284 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of th...

MiniWebsvr 0.0.10 - Directory Traversal / Listing

miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the latest version of the application available...

miniwebsvr v0.0.10 Directory Traversal / Listing Exploits

Exploit for windows platform in category remote exploits ========================================================= miniwebsvr v0.0.10 Directory Traversal / Listing Exploits ========================================================= miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By:...

MiniWebsvr 0.0.10 - Directory Traversal Listing

MiniWebsvr 0.0.10 - Directory Traversal Listing miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the late...

Adobe Patches 'Critical' Shockwave, ColdFusion holes

Adobe joined the Patch Tuesday train today with the release of patches for at least 21 documented security vulnerabilities in the Shockwave and ColdFusion product lines. According to the APSB10-12 security bulletin, 18 of the 21 flaws affected the Shockwave Player, a free software product that le...

CVE-2010-1939

creationtimestamp| type| source ---|---|--- 2010-05-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12573 2010-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12614...

MS10-030: Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution (978542)

The remote host is running a version of Microsoft Outlook Express / Windows Mail that contains a flaw that could be used to cause an integer overflow, resulting in remote code execution. To exploit this flaw, an attacker would need a victim to connect to a mail server under their control and send...

Main PHP-Nuke Site Compromised

The main site for the PHP-Nuke content management system software has been compromised and is serving malicious iFrame exploits to visitors. Researchers at Websense found that the phpnuke.org site is currently serving several different exploits. The attack uses the common iFrame-redirection...

openUrgence Vaccin Multiple Remote File Include Vulnerabilities

openUrgence Vaccin is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2010-1143

creationtimestamp| type| source ---|---|--- 2010-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33940 2010-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12610...

osCommerce Local File Include and HTML Injection Vulnerabilities

osCommerce is prone to a local file-include vulnerability and an HTML- injection vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Researcher: 'MS Should Have Simple PDF Viewer'

Microsoft should add a basic PDF viewer to Windows to help protect users from the spike in attacks exploiting bugs in Adobe’s Reader, said a security researcher. Read the full article. Computerworld...

SAP NetWeaver XSS Vulnerability in ICF

Application: SAP NetWeaver Versions Affected: SAP BASIS 6.4-7.2 Vendor URL: Bugs: Buffer Overflow Exploits: XSS Reported: 05.02.2010 Date of Public Advisory: 15.09.2010 Author: Alexey Sintsov Description SAP NetWeaver ICF BSP has linked XSS vulnerability. The vulnerability was found at...

Webthaiapp detail.php(cat) Blind Sql injection Vulnerability

Exploit for php platform in category web applications ============================================================ Webthaiapp detail.phpcat Blind Sql injection Vulnerability ============================================================ --==+==================================================+==--...

Webthaiapp - 'detail.php?cat' Blind SQL Injection

--==+==================================================+==-- --==+ Webthaiapp detail.phpcat Blind Sql injection Vulnerability +==-- --==+==================================================+==-- Date : 30-04-2010 -=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= AUTHOR: Xeleno...

Webthaiapp Blind SQL Injection

--==+==================================================+==-- --==+ Webthaiapp detail.phpcat Blind Sql injection Vulnerability +==-- --==+==================================================+==-- Date : 30-04-2010 -=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= AUTHOR: Xeleno...