Cisco IOS Software IP Version 6 over Multiprotocol Label Switching Vulnerabilities (cisco-sa-20110928-ipv6mpls)

Cisco IOS Software is affected by two vulnerabilities that cause a Cisco IOS device to reload when processing IP version 6 IPv6 packets over a Multiprotocol Label Switching MPLS domain. These vulnerabilities are : - Crafted IPv6 Packet May Cause MPLS-Configured Device to Reload - ICMPv6 Packet Ma...

Lady Gaga website hacked and fans details stolen by Hackers

Lady Gaga website hacked and fans details stolen by Hackers Lady Gaga has called in police after thousands of her fans personal details were stolen from her website. Her record label Univeral acted after the site was hacked into by US cyber attackers SwagSec. A source said: "She's upset and hopes...

Report: Google May Face $500m Fine Over Rogue Pharma Ads

The Wall Street Journal is reporting that search giant Google is close to reaching a settlement with the U.S. Justice Department over an investigation of the company’s policy of running ads from online pharmacies that operate outside U.S. borders and in violation of U.S. law. Google has not made ...

PhreeBooks R30RC4 Cross Site Scripting

------------------------------------------------------------------------ Software................PhreeBooks R30RC4 Vulnerability...........Reflected Cross-site Scripting Download................http://sourceforge.net/projects/phreebooks Release Date............2/22/2011 Tested...

CVE-2010-1645

Cacti before 0.8.7f, as used in Red Hat High Performance Computing HPC Solution and other products, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in 1 the FQDN field of a Device or 2 the Vertical Label field of a Graph Template...

CVE-2010-1645: Improper Input Validation

Cacti before 0.8.7f, as used in Red Hat High Performance Computing HPC Solution and other products, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in 1 the FQDN field of a Device or 2 the Vertical Label field of a Graph Template...

No title provided

Cacti before 0.8.7f, as used in Red Hat High Performance Computing HPC Solution and other products, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in 1 the FQDN field of a Device or 2 the Vertical Label field of a Graph Template...

Acoustica CD/DVD Label Maker Proof Of Concept

Exploit Title: Acoustica cd/dvd label maker .m3u PoC Date: April 27,2010 Software Link: http://www.acoustica.com/cd-label-maker/ Version: 3.32 Tested on: Windows XP Sp3/Windows 7 Author: chap0 Email: chap0x90 at gmail dot com Contacted Vendor Apr 19, 2010 Auto Reply Support Ticket ID:155626 Apr 1...

Acoustica 3.32 CDDVD Label Maker - .m3u (PoC)

Acoustica 3.32 CDDVD Label Maker - .m3u PoC Exploit Title: Acoustica cd/dvd label maker .m3u PoC Date: April 27,2010 Software Link: http://www.acoustica.com/cd-label-maker/ Version: 3.32 Tested on: Windows XP Sp3/Windows 7 Author: chap0 Email: chap0x90 at gmail dot com Contacted Vendor Apr 19, 20...

Acoustica v. 3.32 cd/dvd label maker .m3u PoC

Exploit for windows platform in category dos / poc ============================================= Acoustica v. 3.32 cd/dvd label maker .m3u PoC ============================================= Exploit Title: Acoustica cd/dvd label maker .m3u PoC Date: April 27,2010 Software Link:...

CVE-2010-0576

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching MPLS and Label Distribution Protocol LDP are enabled, allows remote attackers to cause a denial of service device reload or process...

Code injection

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching MPLS and Label Distribution Protocol LDP are enabled, allows remote attackers to cause a denial of service device reload or process...

Cisco IOS Software Multiprotocol Label Switching Packet Vulnerability

A device running Cisco IOS® Software, Cisco IOS XE Software, or Cisco IOS XR Software is vulnerable to a remote denial of service DoS condition if it is configured for Multiprotocol Label Switching MPLS and has support for Label Distribution Protocol LDP. A crafted LDP UDP packet can cause an...

OpenJDK: Signed applet remote misuse possibility (6782871)

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing...

Cross site scripting

Cross-site scripting XSS vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, allows remote authenticated users, with webform creation privileges, to inject arbitrary web script or HTML via a field label...

CVE-2009-4532

Cross-site scripting XSS vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, allows remote authenticated users, with webform creation privileges, to inject arbitrary web script or HTML via a field label...

CVE-2009-4532

Cross-site scripting XSS vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, allows remote authenticated users, with webform creation privileges, to inject arbitrary web script or HTML via a field label...

CVE-2009-4532: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, allows remote authenticated users, with webform creation privileges, to inject arbitrary web script or HTML via a field label...

PT-2009-5472 · Drupal · Date Module

Name of the Vulnerable Software and Affected Versions: Drupal Date module versions prior to 6.x-2.3 Description: A cross-site scripting XSS issue exists in the Date Tools sub-module of the Date module, allowing remote authenticated users with specific privileges to inject arbitrary web script or...

CVE-2009-3156: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authenticated users, with "use date tools" or "administer content types" privileges, to inject arbitrary web script or HTML via a "Content type label" field...