7381 matches found
Main PHP-Nuke Site Compromised
The main site for the PHP-Nuke content management system software has been compromised and is serving malicious iFrame exploits to visitors. Researchers at Websense found that the phpnuke.org site is currently serving several different exploits. The attack uses the common iFrame-redirection...
openUrgence Vaccin Multiple Remote File Include Vulnerabilities
openUrgence Vaccin is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2010-1143
creationtimestamp| type| source ---|---|--- 2010-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33940 2010-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12610...
osCommerce Local File Include and HTML Injection Vulnerabilities
osCommerce is prone to a local file-include vulnerability and an HTML- injection vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Researcher: 'MS Should Have Simple PDF Viewer'
Microsoft should add a basic PDF viewer to Windows to help protect users from the spike in attacks exploiting bugs in Adobe’s Reader, said a security researcher. Read the full article. Computerworld...
SAP NetWeaver XSS Vulnerability in ICF
Application: SAP NetWeaver Versions Affected: SAP BASIS 6.4-7.2 Vendor URL: Bugs: Buffer Overflow Exploits: XSS Reported: 05.02.2010 Date of Public Advisory: 15.09.2010 Author: Alexey Sintsov Description SAP NetWeaver ICF BSP has linked XSS vulnerability. The vulnerability was found at...
Webthaiapp Blind SQL Injection
--==+==================================================+==-- --==+ Webthaiapp detail.phpcat Blind Sql injection Vulnerability +==-- --==+==================================================+==-- Date : 30-04-2010 -=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= AUTHOR: Xeleno...
Webthaiapp detail.php(cat) Blind Sql injection Vulnerability
Exploit for php platform in category web applications ============================================================ Webthaiapp detail.phpcat Blind Sql injection Vulnerability ============================================================ --==+==================================================+==--...
Webthaiapp - 'detail.php?cat' Blind SQL Injection
--==+==================================================+==-- --==+ Webthaiapp detail.phpcat Blind Sql injection Vulnerability +==-- --==+==================================================+==-- Date : 30-04-2010 -=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= AUTHOR: Xeleno...
Google Chrome < 4.1.249.1064 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 4.1.249.1064. Such versions are reportedly affected by multiple vulnerabilities : - A cross-origin bypass in Google URL GURL. Issue 40445 - An HTML5 media handling issue could lead to memory corruption. Issue 40487 - A font...
Adobe Vulnerabilities Continue to Rise
It’s no secret to anyone who has been paying attention that Adobe Reader and Acrobat have become prime targets for attackers in the last year or so, but new research shows just how dramatic the increase has been in the number of high-risk vulnerabilities identified in Adobe products recently...
CVE-2010-1708
creationtimestamp| type| source ---|---|--- 2010-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12411...
CVE-2010-1654
creationtimestamp| type| source ---|---|--- 2010-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12415...
NovaStor NovaNet <= 13.0 issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All - many of the following were inexplicably fixed in the latest version NovaBACKUP Network 13.0, but still, a 2.5 year run isn't too bad... http://digit-labs.org/files/exploits/novanet-own-lnx.c - - linux remote root = 12.0...
CVE-2010-1703
creationtimestamp| type| source ---|---|--- 2010-04-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12395...
Microsoft Windows SMTP Server MX Record Denial of Service Vulnerability
The Microsoft Windows Simple Mail Transfer Protocol SMTP Server is prone to a denial-of-service vulnerability and to to an information-disclosure vulnerability. Successful exploits of the denial-of-service vulnerability will cause the affected SMTP server to stop responding, denying service to...
Net Solutions' Hack Heightens Role of ISP in App Layer Security
According to research, the malicious iframe used in the latest Network Solutions attack pointed to corpadsinc.com which then downloads Adobe exploits onto victims’ machines. The hacks raise an issue increasingly being faced by Website owners: what’s the responsibility of the ISP or service or clo...
CVE-2010-0432
creationtimestamp| type| source ---|---|--- 2010-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12264 2010-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12263 2010-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12330...
Nodesforum Multiple Remote File Inclusion Vulnerabilities
Nodesforum is prone to multiple remote file inclusion vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Sun About Face: Out-of-Cycle Java Update Patches Critical Flaw
In a sudden about-face, Sun has rushed out a Java update to fix a drive-by download vulnerability that exposed Windows users to in-the-wild malware attacks. The patch comes less than a week after Sun told a Google researcher it did not consider the issue serious enough to warrant an out-of-cycle...