251 matches found
V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln
Exploit for unknown platform in category web applications ==================================================================== V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln ==================================================================== + V3 Chat - Profiles/Dating Scri...
Absolute News Feed 1.0 - Remote Insecure Cookie Handling
Absolute News Feed 1.0 - Remote Insecure Cookie Handling Discovered by : Hakxer Script : Absolute News Feed http://www.xigla.com/absolutenf/demo.htm Greetz : Allah , All My friend ,www.educ-up.com ------------------------------- Poc : javascript:document.cookie="xlaAFSuser=p=admin"; Exploit Go To...
Absolute File Send 1.0 Remote Cookie Handling Vulnerability
Exploit for unknown platform in category web applications =========================================================== Absolute File Send 1.0 Remote Cookie Handling Vulnerability =========================================================== | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | |...
aflog 1.01 Multiple Insecure Cookie Handling Vulnerabilies
Exploit for unknown platform in category web applications ========================================================== aflog 1.01 Multiple Insecure Cookie Handling Vulnerabilies ========================================================== aflog 1.01 Multiple Insecure Cookie Handling Vulnerabilies url...
xecms-cookie.txt
-+================================================================================+- -+ xeCMS = 1.0.0 RC2 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On: 18 MAY 2008 Script...
Web Slider 0.6 - Insecure CookieAuthentication Handling
Web Slider 0.6 - Insecure CookieAuthentication Handling --==+================================================================================+==-- --==+ Web Slider = 0.6 Insecure Cookie/Authentication Handling +==--...
Website META Language: Insecure temporary file usage
Background Website META Language is a free and extensible Webdesigner's off-line HTML generation toolkit for Unix. Description Temporary files are handled insecurely in the files wmlbackend/p1ipp/ipp.src, wmlcontrib/wmg.cgi, and wmlbackend/p3eperl/eperlsys.c, allowing users to overwrite or delete...
openSUSE 10 Security Update : gvim (gvim-4822)
Vim allows to open content via external programs if the argument contains a 'http:' sub-string. It insecurely invoked external web browsers to fetch the remote content. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
Debian Security Advisory DSA 1156-1 (kdebase)
The remote host is missing an update to kdebase announced via advisory DSA 1156-1. Ludwig Nussel discovered that kdm, the X display manager for KDE, handles access to the session type configuration file insecurely, which may lead to the disclosure of arbitrary files through a symlink attack...
Debian Security Advisory DSA 1219-1 (texinfo)
The remote host is missing an update to texinfo announced via advisory DSA 1219-1. Multiple vulnerabilities have been found in the GNU texinfo package, a documentation system for on-line information and printed output. CVE-2005-3011 Handling of temporary files is performed in an insecure manner,...
[SECURITY] [DSA 1437-1] New cupsys packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1437-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 26, 2007 http://www.debian.org/security/faq -...
DSA-1437-1 cupsys
Bulletin has no description...
Php-Stats 0.1.9.2 Multiple Vulnerabilities Exploit
No description provided by source. ?php / Php-Stats 0.1.9.2 Multiple Vulnerabilities Exploit Blind SQL Injection / Remote Code Execution P.o.C. author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://php-stats.com/downloads details..: works with magicquotesruntime = off 1 Blind SQL...
Multiple OS kernel insecure handling of stdio file descriptor
XFOCUS team http://www.xfocus.org/ had discovered Multiple OS kernel insecure handling of stdio file descriptor. =================== Affected OS Version AIX 5.3 Solaris 9 HPUX B11.11 maybe other version,we did not tested =========== Description The affected OSes allows local users to write to or...
[SECURITY] [DSA 1219-1] New texinfo packages fix multiple vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1219-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 27, 2006 - ------------------------------------------------------------------------ Package : texinfo...
Debian DSA-1156-1 : kdebase - programming error
Ludwig Nussel discovered that kdm, the X display manager for KDE, handles access to the session type configuration file insecurely, which may lead to the disclosure of arbitrary files through a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Debian DSA-788-1 : kismet - several vulnerabilities
Several security related problems have been discovered in kismet, a wireless 802.11b monitoring tool. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2626 Insecure handling of unprintable characters in the SSID. - CAN-2005-2627 Multiple integer...
[SECURITY] [DSA 788-1] New kismet packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 788-1 [email protected] http://www.debian.org/security/ Martin Schulze August 29th, 2005 http://www.debian.org/security/faq -...