7100 matches found
Xavi 7968 ADSL Router - webconfigwanconfirm.htmlconfirm?pvcName Cross-Site Scripting
Xavi 7968 ADSL Router - webconfigwanconfirm.htmlconfirm?pvcName Cross-Site Scripting source: https://www.securityfocus.com/bid/52098/info Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities. The attacker can exploit the issues to...
Xavi 7968 ADSL Router - Multiple Cross-Site Request Forgery Vulnerabilities
Xavi 7968 ADSL Router - Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/52098/info Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities. The attacker can exploit the issues to execute...
Xavi 7968 ADSL Router - webconfiglanlan_config.htmllocal_lan_config?host_name_txtbox Cross-Site Scripting
Xavi 7968 ADSL Router - webconfiglanlanconfig.htmllocallanconfig?hostnametxtbox Cross-Site Scripting source: https://www.securityfocus.com/bid/52098/info Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities. The attacker can exploit...
Xavi 7968 ADSL Router - '/webconfig/wan/confirm.html/confirm?pvcName' Cross-Site Scripting
source: https://www.securityfocus.com/bid/52098/info Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities. The attacker can exploit the issues to execute arbitrary script code in the context of the vulnerable site, potentially...
Opera array index overflow
Integer overflows in array functions...
SuSE 11.1 Security Update : ruby (SAT Patch Number 5716)
This update of ruby provides 1.8.7p357, which contains many stability fixes and bug fixes while maintaining full compatibility with the previous version. A detailailed list of changes is available from http://svn.ruby-lang.org/repos/ruby/tags/v187357/ChangeLog . The most important fixes are : -...
SuSE 11.1 Security Update : ruby (SAT Patch Number 5716)
This update of ruby provides 1.8.7p357, which contains many stability fixes and bug fixes while maintaining full compatibility with the previous version. A detailailed list of changes is available from http://svn.ruby-lang.org/repos/ruby/tags/v187357/ChangeLog . The most important fixes are : -...
Opera 11.60 Array Integer Overflow
CAL-2012-0004 opera array integer overflow 1 Affected Products ================= 11.60 and prior 2 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com has discovered a integer overflow vulnerability in array functions like Int32Array,Int16Array... . Opear vendor sa...
MySQL < 5.0.92 Multiple Denial of Service
The version of MySQL installed on the remote host is older than 5.0.92. As such, it reportedly is prone to multiple denial of service attacks : - The improper handling of type errors during argument evaluation in extreme-value functions, e.g., 'LEAST' or 'GREATEST' causes server crashes...
PT-2012-2039 · Whmcs · Whmcs
Name of the Vulnerable Software and Affected Versions: WHMCS versions 4.0.x through 5.0.x Description: The issue is related to improper handling of characters in the subject field of a crafted ticket, which can trigger arbitrary code execution in the Smarty templating system. This allows remote...
CVE-2011-3837
Directory traversal vulnerability in blogsystem/datafunctions.php in Wuzly 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the preview parameter to index.php...
SuSE 10 Security Update : Mozilla NSS (ZYPP Patch Number 7746)
This update updates Mozilla NSS to 3.12.11. The update marks the compromised DigiNotar Certificate Authority as untrusted For more information read: MFSA 2011-34 - update to 3.12.10 o root CA changes o filter certain bogus certs bmo642815 o fix minor memory leaks o other bugfixes - update to 3.12...
SuSE 11.1 Security Update : libfreebl3 (SAT Patch Number 5138)
This update updates Mozilla NSS to 3.12.11. The update marks the compromised DigiNotar Certificate Authority as untrusted For more information read : MFSA 2011-34 - update to 3.12.10 - root CA changes - filter certain bogus certs bmo642815 - fix minor memory leaks - other bugfixes - update to...
MySQL User-Defined Functions Multiple Vulnerabilities
User-defined functions in MySQL can allow a database user to cause binary libraries on the host to be loaded. The insert privilege on the table 'mysql.func' is required for a user to create user-defined functions. When running on Windows and possibly other operating systems, MySQL is potentially...
Oracle Database Multiple Vulnerabilities (April 2009 CPU)
The remote Oracle database server is missing the April 2009 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Advanced Queuing - Application Express - Cluster Ready Services - Core RDBMS - Database Vault - Listener - Password Policy...
phpDocumentor: Function call injection
Background The phpDocumentor package provides automatic documenting of PHP API directly from the source. Description phpDocumentor bundles Smarty with the modifier.regexreplace.php plug-in which does not properly sanitize input related to the ASCII NUL character in a search string. Impact A remot...
COMTREND CT-5624 Router - Root/Support Password Disclosure/Change
!/usr/bin/perl + Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit Author: Todor Donev Email: todor.donev@@gmail Type: Hardware Vuln Type: Remote Tested: Board ID : CT-5624 Software : A011-306TSR-C01R03 Bootloader : 1.0.37-0.7-3 ADSL : A2pB022c3.d20e Board ID : CT-563...
Mozilla: crash while profiling page with many functions (MFSA 2011-49)
Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly have...
Comtrend Router CT-5624 Remote Root/Support Password Disclosure
Exploit for hardware platform in category web applications !/usr/bin/perl + Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit Author: Todor Donev Email: email protected@gmail Type: Hardware Vuln Type: Remote Tested: Board ID : CT-5624 Software : A011-306TSR-C01R03...
