PT-2015-4259

Name of the Vulnerable Software and Affected Versions D-Link DIR-655 rev Bx versions prior to 2.12b01 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the html response page parameter in the login.cgi page. Recommendations F...

Typo3 JobControl 2.14.0 - Cross Site Scripting / SQL Injection

No description provided by source. Mogwai Security Advisory MSA-2014-02 ---------------------------------------------------------------------- Title: JobControl dmmjobcontrol Multiple Vulnerabilities Product: dmmjobcontrol Typo3 Extension Affected versions: 2.14.0 Impact: high Remote: yes Product...

Mental JS Sandbox Bypass

Title: Mental JS Sandbox Bypass Product: Mental JS Author: Rafay Baloch And Gliuseppe Trotta @guitro Company: RHAINFOSEC Website: http://services.rafayhackingarticles.net ============ Description ============ Mentaljs is a js sandbox created by Gareth Heyes, the JS sandbox is inserted at beginnin...

Mozilla Firefox 2.0.0.16 Buffer Overflow

!/usr/bin/python FireFox 2.0.0.16 Windows XP SP3 x86 Remote Exploit Author: Dominic Chell Exploits the UTF-8 URL overflow vulnerability described in CVE-2008-0016. As of September 2009 there are no public exploits for this vulnerability. However, according to securityfocus an exploit is available...