Internet Explorer 8 Exploit Found in Watering Hole Campaign Targeting Chinese Dissidents

On March 16th, we discovered a premeditated waterhole campaign that hosts exploits and malware on websites frequented by a specific target group. In this case the target includes Chinese dissidents. For the attacker, this approach is highly attractive since it is very difficult to discover the...

SA-CONTRIB-2013-025 - Fresh Theme - Cross Site Scripting (XSS)

This third-party contributed theme change Drupal's interface. The theme doesn't properly sanitize user-entered content in the 3 slide gallery on the homepage leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker would have to have the...

chillyCMS 1.3.0 - Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability Failure to Restrict URL Access chillyCMS uses 302 redirects to restrict access to the unautorized pages. Exploit Step 1: Create a rule in No-Redirect Add-on: ^http://localhost/chillyCMS/ Step 2: Access...

phpPgAdmin Multiple XSS Vulnerabilities

phpPgAdmin is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Fresh Element CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title:Fresh Element CMS Multiple Vulnerabilities Date: 02.01.2011 Author: Dr.0rYX and Cr3w-DZ Category: webapps/0day TESTED ON : Windows Vista . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | ...

More than 3,000 may accept been victims of phone hacking !

Up to 3,000 bodies who may accept been victims of the phone-hacking aspersion will be contacted by police, it has emerged. Officers plan to address to abstracts from politics, showbusiness and action whose names were begin at the bounds of a clandestine detective confined over the scam. The added...

DHS Investing $40 Million for Cybersecurity Research !

Insider threats, botnets and malware, and assay to abutment the Comprehensive Civic Cyber Initiative CNCI are amid areas of cybersecurity advance the Department of Homeland Aegis DHS will accomplish in budgetary year 2011. The DHS Science and Technology Homeland Aegis Advanced Assay Projects Bure...

FreshWebMaster Fresh FTP Filename Directory Traversal Vulnerability

This host is installed with Fresh FTP Client and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbfreshftpclientdirtraversalvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ FreshWebMaster Fresh FTP Filename Directory Traversal Vulnerability Authors: Antu Sanadi Copyright:...

FreshWebMaster Fresh FTP Filename Directory Traversal Vulnerability

Fresh FTP Client is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4149

Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename. NOTE: some of these details are obtained from third party information...

CVE-2010-4149

Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename. NOTE: some of these details are obtained from third party information...

CVE-2010-4149

CVE-2010-4149 concerns FreshWebMaster Fresh FTP prior to or around 5.37, where a directory traversal flaw allows an FTP server to cause the client to write arbitrary files by using a ..\ pattern in the filename. The root cause is insufficient sanitization of the downloaded filename, enabling trav...

Netzbrett Database Disclosure Vulnerability

Exploit for unknown platform in category web applications =========================================== Netzbrett Database Disclosure Vulnerability =========================================== ============================================================================== » Note : Tribute to the...

Cross site scripting

Cross-site scripting XSS vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to inject arbitrary web script or HTML via the Email parameter. NOTE: this can be leveraged to modify cookies and conduct session fixation attacks...

CVE-2008-7042

The CVE-2008-7042 entry refers to a PHP remote file inclusion vulnerability in FreshScripts Fresh Email Script, versions 1.0 through 1.11. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the tmp_sid parameter of url.php. This indicates an RFI in a user-supplie...

CVE-2008-7043

Cross-site scripting XSS vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to inject arbitrary web script or HTML via the Email parameter. NOTE: this can be leveraged to modify cookies and conduct session fixation attacks...

CVE-2008-7042: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the tmpsid parameter...

CVE-2008-7043: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to inject arbitrary web script or HTML via the Email parameter. NOTE: this can be leveraged to modify cookies and conduct session fixation attacks...

fes-rficookie.txt

+-----------------+-----------------+-----------------+ 2. +-----------------+Fresh Email Script+----------------+ 3. +-----------------versions: 1.0 to 1.11 - all 4. +-----------------exploits: file inclusion & cookie manipulation 5. +-----------------founder: Don 6. +-----------------date:...