Ruby Version Manager escape sequence injection vulnerability

Overview Ruby Version Manager contains an escape sequence injection vulnerability. Ruby Version Manager is a command line tool for managing multiple ruby environments. Ruby Version Manager contains an escape sequence injection vulnerability. Impact A user may unknowingly open a malicious file. As...

Linux Kernel “install_special_mapping()”local bypass security restrictions vulnerability-vulnerability warning-the black bar safety net

Affected system: Linux kernel 2.6.11.11 - 2.6.37 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 4 5 3 2 3 The Linux Kernel is open sourceOSLinux the kernel. The Linux Kernel in the realization of the presence of the vulnerability, an...

KLA10184 Vulnerability in Fenrir Grani

Script interaction prevention was missing in Fenrir Grani. By exploiting this vulnerability malicious users can modify clipboard content. This vulnerability can be exploited remotely via a specially designed web site. Original advisories Original bulletin Related products Sleipnir Grani CVE list...

Movable Type vulnerable to cross-site scripting

Overview Movable Type contains a cross-site scripting vulnerability. Movable Type, a web log system from Six Apart KK, contains a cross-site scripting vulnerability. This vulnerability is different than the previous vulnerabilities disclosed on JVN. Impact An arbitrary script may be executed on t...

MediaCoder-0.7.5.4797.exe 0-days Buffer Overflow Exploit(SEH)

Exploit for windows platform in category local exploits ============================================================= MediaCoder-0.7.5.4797.exe 0-days Buffer Overflow ExploitSEH ============================================================= Exploit Title: MediaCoder-0.7.5.4797.exe 0-days Buffer...

MediaCoder 0.7.5.4795 Buffer Overflow

Exploit Title: MediaCoder-0.7.5.4795.exe 0-days Buffer Overflow SEH Date: 02 / 12 / 2010 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4795.exe Version: v0.7.5.4795 Latest Version !! Tested on: Microsoft Windows XP SP2 CVE : N / A The vendor is...

Mediacoder 0.7.5.4797 - '.m3u' Local Buffer Overflow (SEH)

Exploit Title: MediaCoder-0.7.5.4795.exe 0-days Buffer Overflow SEH Date: 02 / 12 / 2010 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4795.exe Version: v0.7.5.4795 Latest Version !! Tested on: Microsoft Windows XP SP2 CVE : N / A The vendor is...

XSRF (CSRF) in Wolf CMS

Vulnerability ID: HTB22681 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinwolfcms.html Product: Wolf CMS Vendor: Wolf CMS team http://www.wolfcms.org/ Vulnerable Version: 0.6.0b and probably prior versions Vendor Notification: 09 November 2010 Vulnerability Type: CSRF Cross-Site Request...

Google Chrome information disclosure vulnerability

Overview Google Chrome contains an information disclosure vulnerability. Google Chrome contains an information disclosure vulnerability caused by the improper handling of XML files. Takayoshi Isayama from Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC...

JDownloader Webinterface - Source Code Disclosure

Exploit Title: JDownloader Webinterface Source Code Disclosure Date: 11/24/10 Author: Sil3ntDre4m Software Link: http://jdownloader.org Version: Latest 0.9.850 Tested on: Windows, Linux JDownloader WebInterface is vulnerable to a source code disclosure exploit to due not properly sanitizing user...

Ichitaro series vulnerable to arbitrary code execution

Overview The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution. This vulnerability differs from JVN01948274, and other issues that were previously published on JVN. Impact When opening a specially crafted file...

Active! mail 6 vulnerable to HTTP header injection

Overview Active! mail 6 from TransWARE Co. contains a HTTP header injection vulnerability. Active! mail 6 from TransWARE Co. is a web-based email software. Active! mail 6 contains a HTTP header injection vulnerability. Taketo Ikeuchi of Hitachi Solutions, Ltd. reported this vulnerability to IPA...

Apsaly may insecurely load executable files

Overview Apsaly may use unsafe methods for determining how to load executables .exe. Apsaly is a text editor that can interact with other applications. Apsaly loads certain executables when opening the folder that contains the file that is being edited, or when a particular sequence of actions ar...

Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server

Overview Oracle iPlanet Web Server formerly Sun Java System Web Server contains a cross-site request forgery vulnerability. Oracle iPlanet Web Server formerly Sun Java System Web Server is a web server. Oracle iPlanet Web Server contains a cross-site request forgery vulnerability. Yoshihiro...

moobbs2 vulnerable to cross-site scripting

Overview moobbs2 contains a cross-site scripting vulnerability. moobbs2 from Moo is a threaded bulletin board software. moobbs contains a cross-site scripting vulnerability. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

moobbs vulnerable to cross-site scripting

Overview moobbs contains a cross-site scripting vulnerability. moobbs from Moo is a bulletin board software. moobbs contains a cross-site scripting vulnerability. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

JVN#24423311: moobbs vulnerable to cross-site scripting

moobbs from Moo is a bulletin board software. moobbs contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the developer. Products...

Windows Live Email DLL Hijacking Exploit

/ Exploit Title: Windows Live Email DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Latest windows live suite Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .eml .nws .rss / include...

KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting

Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability Date: 2010-08-11 Author: @fdiskyou e-mail: rui at deniable.org Software Link: http://www.knowledgetree.com/products/community/download Version: 3.5.2 Notes: Fixed in the last version. Go to search box or search...

BBSGood Forum program a plurality of page there is SQL injection vulnerability-vulnerability warning-the black bar safety net

BBSGOOD is domestic first using the cache technology Forum, BBSGOOD posts and list home can generate a static HTML file. 1. In the file indexedit. asp: sql="select top 1 Admin,UserName,Password from BBSGoodAdmin where UserName='"&Request. Cookiesbbsinfo&"adminuser"&"' " //Article 4 of 8 4 line Se...