1161 matches found
openSUSE Security Update : libcgroup-devel (openSUSE-SU-2011:0316-1)
libcgroup suffered from a heap based buffer overflow CVE-2011-1006. The cgrulesengd daemon did not verify the origin of netlink messages, allowing local users to spoof events CVE-2011-1022. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
openSUSE Security Update : hplip (openSUSE-SU-2011:0068-1)
Specially crafted SNMP replies could cause a buffer overflow in hplip's sane backend CVE-2010-4267. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update hplip-3814. The text description of this...
Phire CMS <= 1.1 Files Disclosure Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Cook Media Web Development Group Sensitive Database Disclosure
Exploit for php platform in category web applications +Exploit Title: Cook Media Web Development Group Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 27.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Cook Media Group, LLC." inurl:"php?script=...
Cook Media Web Development Group SQL Injection
+Exploit Title: Cook Media Web Development Group Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 27.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Cook Media Group, LLC." inurl:"php?script=" + Category : Web Apps SQli...
Restaurant Chain is First Fined Under Massachusetts Data Breach Law
UPDATE: A Massachusetts restaurant chain was the first company fined under the state’s toughest in the nation data breach law and will have to pay $110,000 in penalties, according to a statement by the Massachusetts Attorney General. The Briar Group LLC entered into a settlement with Massachsuett...
SmarterMail 8.0 Multiple XSS Vulnerabilities
Exploit for asp platform in category web applications Author: Hoyt LLC Research Target: SmarterMail Version 8.0.4086.25048 Tools: Burp Suite Pro 1.3.09, FuzzDB Description: XSS, Cross Site Scripting in SmarterMail 8.0.4086.25048, CWE-79, CAPEC-86 Keywords: Stored XSS, Reflected XSS, Cross Site...
SmarterTools SmarterMail 8.0 Cross Site Scripting
Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: March 14, 2011 Vendor: SmarterTools Application: SmarterMail Version 8.0 Bugs: Stored XSS, Reflected XSS Patch: None Available Timeline: Notify Vendor simultaneous with Vendor Publication:...
SmarterMail 7.37.4 - Multiple Vulnerabilities
SmarterMail 7.37.4 - Multiple Vulnerabilities Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: October 28, 2010 Vendor: SmarterTools Application: SmarterMail 7.x Bugs: Stored XSS, Reflected XSS, Directory Traversal, File Upload Parameters, OS Execution, XML Injection,...
SmarterMail 7.x Cross Site Scripting / Shell Upload / Traversal
To: Vuln.Lists Re: Coordinated Disclosure, SmarterMail 7.x Versions Private Note - Rewrite as you wish, vendor has acknowledged these bugs and more and issued a fix. ------------------------------ Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: October 28, 2010 Vendor:...
Embedthis Appweb Web Server 3.2.2-1 (Ejscript) Remote XSS Vulnerability
Summary Appweb has a multi-threaded, event-driven, core to deliver exceptional throughput, response and outstanding memory utilization. It is compact and will embed using as little as 800K of memory. Appweb is a standards-based embedded HTTP server that has a wealth of features. Description Appwe...
MODx Revolution CMS 2.0.4-pl2 Remote XSS POST Injection Vulnerability
Exploit for php platform in category web applications ===================================================================== MODx Revolution CMS 2.0.4-pl2 Remote XSS POST Injection Vulnerability ===================================================================== getObject'modUser',array 30: 'use...
openSUSE Security Update : OpenOffice_org-draw (openSUSE-SU-2010:0732-1)
Specially crafted ppt files could cause a heap based buffer overflow in OpenOfficeorg Impress. Attackers could exploit that to crash OpenOfficeorg or potentially even execute arbitrary code CVE-2010-2935, CVE-2010-2936. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Zen Cart v1.3.9f (typefilter) Local File Inclusion Vulnerability
Exploit for php platform in category web applications ================================================================ Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability ================================================================ Vendor: Zen Ventures, LLC Product web page:...
Husdawg_ LLC. System Requirements Lab - ActiveX Unsafe Method (Metasploit)
$Id: systemrequirementslabunsafe.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
openSUSE Security Update : w3m (openSUSE-SU-2010:0393-1)
w3m did not handle embedded nul characters in the common name and in subject alternative names of x509 certificates. CVE-2010-2074 has been assigned to this issue. This update also turns on verification of x509 certificates by default which was not the case before. %NASLMINLEVEL 70300 C Tenable...
Rising Tide Media LLC CMS SQL Injection Vulnerability
Exploit for php platform in category web applications ===================================================== Rising Tide Media LLC CMS SQL Injection Vulnerability ===================================================== EDB-ID: CVE: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Exploit...
Rising Tide Media LLC CMS SQL Injection
Rising Tide Media LLC CMS SQL Injection Vulnerability EDB-ID: CVE: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Exploit Code: Vulnerable App: . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / || ||\ / /...
Sysax Multi Server "open", "unlink", "mkdir", "scp_get" Commands DoS Vulnerabilities
Title: Sysax Multi ServerSFTP module "open", "unlink", "mkdir", "scpget" Commands DoS Vulnerabilities Product: Sysax Multi Server Vendor: Codeorigin, LLC Version: 5.25 earlier versions may also be affected Platform: Windows Type of Vulnerability: Buffer overflow --DoS Risk rating: Medium Date of...
Sysax Multi Server 5.25 Denial Of Service
Title: Sysax Multi ServerSFTP module "open", "unlink", "mkdir", "scpget" Commands DoS Vulnerabilities Product: Sysax Multi Server Vendor: Codeorigin, LLC Version: 5.25 earlier versions may also be affected Platform: Windows Type of Vulnerability: Buffer overflow --DoS Risk rating: Medium Date of...