Xilisoft Video Converter Ultimate DLL Hijack

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

EasyPHP Web Server 5.3.5.0 DLL Hijack

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

CVE-2011-0748

Multiple cross-site request forgery CSRF vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that 1 add or 2 edit administrator accounts...

CVE-2011-1682

Multiple cross-site request forgery CSRF vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 create a list or 2 insert cross-site scripting XSS sequences. NOTE: this issue exists because of an incomplete fix for...

CVE-2011-0748

Multiple cross-site request forgery CSRF vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that 1 add or 2 edit administrator accounts...

CVE-2011-0440

Cross-site request forgery CSRF vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs...

CVE-2011-0440

Mahara is affected by CVE-2011-0440: a CSRF vulnerability in Mahara 1.2.x (before 1.2.7) and 1.3.x (before 1.3.4) allows an attacker to hijack a user’s session and perform blog deletions via forged requests. The OpenVAS entries corroborate multiple Mahara vulnerabilities tied to CVE-2011-0440, an...

CVE-2011-0545

Cross-site request forgery CSRF vulnerability in adduser.do in Symantec LiveUpdate Administrator LUA before 2.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts, and possibly have unspecified other impact, via the userRole...

Barracuda IMFirewall 620 - Input Validation Vulnerability

Document Title: =============== Barracuda IMFirewall 620 - Input Validation Vulnerability References Source: ==================== EDB-ID: 10347 http://www.exploit-db.com/exploits/10347/ Release Date: ============= 2011-03-16 Vulnerability Laboratory ID VL-ID: ====================================...

Mozilla Products Multiple Vulnerabilities (MFSA2011-02, MFSA2011-03, MFSA2011-04, MFSA2011-05, MFSA2011-06, MFSA2011-07) - Windows

Mozilla Firefox/Seamonkey are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Lms Web Ensino - Multiple Input Validation Vulnerabilities

Lms Web Ensino - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/46829/info LMS Web Ensino is prone to the following input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities 2. An SQL-injection vulnerability 3. A cross-site...

Celebrity Ashton Kutcher Firesheep'd at TED Conference

High profile celebrity Ashton Kutcher had his Twitter account hijacked at the celebrity infested Technology, Entertainment, Design TED Conference, TED2011, in Long Beach, California, on Wednesday. Kutcher, best known for his role on the sitcom That 70’s Show and, later, as host of MTV’s Punk’d...

CVE-2011-0059

Cross-site request forgery CSRF vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

CVE-2011-1104

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

A1 Website Download 2.3.3 DLL Hijack

A1 Website Download dll hijacking vulnerability software : http://www.microsystools.com version : 2.3.3 author : d3c0der - [email protected] website : www.attackerz.ir file : Download.exe Vulnerable dll : fwpuclnt.dll simple exploit by TheLeader and H.D. Moore include define DllExport declspec...

CVE-2011-0584

CVE-2011-0584 refers to a session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 . The issue allows remote attackers to hijack web sessions via unspecified vectors, indicating an authentication/session management weakness that persists across affected ColdFusion versions. The vulner...

Design/Logic Flaw

The web management portal on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie...

CVE-2011-0046

Multiple cross-site request forgery CSRF vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allow remote attackers to hijack the authentication of arbitrary users for requests related to 1 adding a saved search in buglist.cgi, 2 voting in...

CVE-2011-0650

Cross-site request forgery CSRF vulnerability in Greenbone Security Assistant GSA before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirement...