Oracle Document Capture Actbar2.ocx — Insecure Method

Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.com Bugs: Insecure method, File overwriting Exploits: YES Reported: 22.03.2010 Vendor response: 31.03.2010 Date of Public Advisory: 24.01.2011 Author: Evdokimov Dmitriy Description ActiveX components...

Oracle Document Capture empop3.dll — insecure method

Application: Oracle Document Capture Versions Affected: 6.4 — 7.2 Vendor URL: http://www.oracle.com Bugs: Insecure method, File overwriting, File deleting Exploits: YES Reported: 22.03.2010 Vendor response: 31.03.2010 Date of Public Advisory: 24.01.2011 CVE-number:CVE-2010-3591 Author: Evdokimov...

ZippHo 3.0.6 (.zip) 0day stack buffer overflow PoC exploit

Exploit for windows platform in category local exploits...

OpenCart <= 1.3.2 SQLi Vulnerability

OpenCart is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:opencart:opencart";...

CVE-2010-1003

creationtimestamp| type| source ---|---|--- 2010-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33769...

CVE-2010-1345

creationtimestamp| type| source ---|---|--- 2010-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11785 2010-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15453...

CVE-2010-1269

creationtimestamp| type| source ---|---|--- 2010-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11776 2010-03-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11805 2010-03-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11912...

CVE-2010-1270

creationtimestamp| type| source ---|---|--- 2010-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11776 2010-03-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11805 2010-03-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11912...

CVE-2010-1055

creationtimestamp| type| source ---|---|--- 2010-03-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11755...

CVE-2010-2275

creationtimestamp| type| source ---|---|--- 2010-03-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33764...

Dojo Toolkit 1.4.1 - dohrunner.html Multiple Cross-Site Scripting Vulnerabilities

Dojo Toolkit 1.4.1 - dohrunner.html Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/38739/info Dojo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues...

Ananta Gazelle SQL Injection Vulnerability

www.BugReport.ir AmnPardaz Security Research Team Title: Ananta Gazelle SQL Injection Vulnerability Vendor: http://www.anantasoft.com/ Vulnerable Version: 1.0 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: Ananta Gazelle is a rich JavaScript enabled CMS with...

AneCMS 1.0 - 'index.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/38657/info AneCMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potential...

60cycleCMS - 'select.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/38637/info 60cycleCMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser,...

MS10-016: Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561)

The remote Windows host contains a version of Windows Movie Maker that is affected by a buffer overflow vulnerability due to the way the application parses project file formats. If an attacker can trick a user on the affected system into opening a specially crafted Movie Maker or Producer file...

TikiWik < 4.2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/38608/info TikiWiki is prone to multiple vulnerabilities, including: - An SQL-injection vulnerability - An unspecified authentication-bypass vulnerability - An unspecified vulnerability Exploiting these issues could allow an attacker to compromise the...

Deimos Kasa <= 2.58 (table) Local Integer Overflow Vulnerability

Exploit for unknown platform in category local exploits...

SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 2065)

This update of acroread fixes : - Cross-domain request vulnerability. CVE-2010-0186 : CVSS v2 Base Score: 5.8 - An unspecified vulnerability that possibly allowed remote code execution. CVE-2010-0188 : CVSS v2 Base Score: 6.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

iPhone / iTouch FTPDisc 1.0 3 ExploitsInOne Buffer Overflow DoS

Exploit for unknown platform in category dos / poc =============================================================== iPhone / iTouch FTPDisc 1.0 3 ExploitsInOne Buffer Overflow DoS =============================================================== Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne...

AST-2010-003: Invalid parsing of ACL rules can compromise security

Asterisk Project Security Advisory - AST-2010-003 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Invalid parsing of ACL rules can compromise | | | security |...