CVE-2011-2634

CVE-2011-2634 affects Opera prior to 11.10, enabling remote attackers to hijack (1) searches and (2) customizations via unspecified third‑party applications. The linked open vulnerability entries corroborate Opera browser vulnerabilities in 2011, with multiple advisories referencing Opera 11.x. R...

CVE-2011-2634

Opera before 11.10 allows remote attackers to hijack 1 searches and 2 customizations via unspecified third party applications...

xAurora Web Browser 10.00 DLL Hijack

/ Exploit : xAurora Web Browser v10.00 rsrc32.dll DLL Hijacking Exploit Software : xAurora Web Browser v10.00 Build 12:10:2005 - Powered By ICTA Language : Win32-Assembly Language Download :...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add user accounts or 2 grant the administrative privilege to a user account, related to a...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

HP Service Manager / HP Service Center multiple security vulnerabilities

Uauthorized access, privilege escalation, information leakage, HTTP session hijack, crossite scripting...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to 1 ajax-weblog-guardar.php, 2 verpost.php, 3 comments.php, or 4 perfil.php...

Report: Gmail Not Alone; Yahoo! And Hotmail Users Phished Also

In addition to widely publicized attacks targeting the Gmail accounts of government officials and activists, Trend Micro reported yesterday that Yahoo! Mail and Hotmail are being targeted with similar but separate attacks as well. The report, on Trend Micro’s Malware Blog on Thursday, was the fir...

CVE-2011-1026

Multiple cross-site request forgery CSRF vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators...

CVE-2011-1026

Multiple cross-site request forgery CSRF vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators...

Apache Archiva跨站脚本和HTML注入漏洞

Bugtraq ID: 48011 CVE ID：CVE-2011-1077 Apache Archiva是一款管理一个和多个远程存储的软件。 Apache Archiva存在多个存储型和反射型跨站脚本问题，在请求参数中或发送表单中提交包含恶意代码的JavaScript，诱使用户处理可导致恶意脚本在目标用户浏览器上执行，可获得敏感信息或劫持用户会话 Apache Archiva 1.3.4 Apache Archiva 1.3.3 Apache Archiva 1.3.2 Apache Archiva 1.3.1 Apache Archiva 1.3 Apache Archiva...

MSN Live Messenger 14.0 Plus! DLL Hijack

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Session fixation

Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2010-0217

Zeacom Chat Server (before 5.1) uses a short JSESSIONID, giving low entropy and enabling brute-force session hijacking or a potential DoS via server crash. The root cause is weak session management in the web-chat component, with a 10-character JSESSIONID described as providing only about 9 bits ...

CVE-2011-1325

Cross-site request forgery CSRF vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

BlueFTP 1.2 DLL Hijack

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

CVE-2011-1905

Multiple cross-site request forgery CSRF vulnerabilities in unspecified administrative modules in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allow remote attackers to hijack the authentication ...

CVE-2011-1905

Technical details about CVE-2011-1905 are not publicly available in the provided connected documents. The records summarize CSRF vulnerabilities in Proofpoint products but do not specify affected components, versions beyond general ranges, or remediation details. Monitor for updates.

CVE-2011-1545

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...