9 matches found
EUVD-2012-5432
Malware in sbrugna...
CVE-2012-5540
Multiple cross-site scripting XSS vulnerabilities in the Hostip module 6.x-2.x before 6.x-2.2 and 7.x-2.x before 7.x-2.2 for Drupal allow remote attackers with control of hostip.info to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-5540
Multiple cross-site scripting XSS vulnerabilities in the Hostip module 6.x-2.x before 6.x-2.2 and 7.x-2.x before 7.x-2.2 for Drupal allow remote attackers with control of hostip.info to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Hostip module 6.x-2.x before 6.x-2.2 and 7.x-2.x before 7.x-2.2 for Drupal allow remote attackers with control of hostip.info to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-5540
The CVE-2012-5540 issue affects the Drupal Hostip module (6.x-2.x before 6.x-2.2 and 7.x-2.x before 7.x-2.2). Root cause: data sourced from an untrusted third party (hostip.info) is not sanitized, enabling cross-site scripting (XSS). Impact: remote attackers can inject arbitrary script/HTML via u...
CVE-2012-5540
Multiple cross-site scripting XSS vulnerabilities in the Hostip module 6.x-2.x before 6.x-2.2 and 7.x-2.x before 7.x-2.2 for Drupal allow remote attackers with control of hostip.info to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-5540: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Hostip module 6.x-2.x before 6.x-2.2 and 7.x-2.x before 7.x-2.2 for Drupal allow remote attackers with control of hostip.info to inject arbitrary web script or HTML via unspecified vectors...
SA-CONTRIB-2012-149 - Hostip - Cross Site Scripting (XSS)
Hostip enables you to query the http://www.hostip.info/ API to get the country / state information based on the user's IP address or a specific IP passed to it. The module fails to sanitize data retrieved from an untrusted third party source, thereby exposing an arbitrary script injection...
ASP.NET w3wp (COM Components) Remote Crash Exploit
Exploit for unknown platform in category dos / poc ================================================== ASP.NET w3wp COM Components Remote Crash Exploit ================================================== // w3wp-dos.c // include "stdafx.h" pragma comment lib,"ws232" include include include include...