Image Store - Arbitrary File Upload

============================================= =================================== ============================================= ====== Image Store Remote file Upload Vulnerability ============================================= ===================================...

Joomla Component com_sar_news SQL Injection vulnerability

Exploit for php platform in category web applications ========================================================= Joomla Component comsarnews SQL Injection vulnerability ========================================================= Exploit Title: Joomla comsarnews SQL Injection vulnerability Date: 02...

MS Research Targets Multimedia Snooping

Researchers from Microsoft have come up a sensor widget concept that provides alerts and lets users control and monitor exactly what other users see from their webcams, microphones, and other live data streams. Read the full article. Dark Reading...

Spaceacre - SQL Injection Cross-Site Scripting HTML Injection

Spaceacre - SQL Injection Cross-Site Scripting HTML Injection ========================================================= Spaceacre SQL/XSS/HTML Injection Vulnerabilities ========================================================= Name: Spaceacre SQL/XSS/HTML Injection Vulnerabilities Vendor:...

Webit Cms (XSS/HTML) Injection Vulnerabilities

Exploit for php platform in category web applications ============================================== Webit Cms XSS/HTML Injection Vulnerabilities ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Spaceacre (SQL/XSS/HTML) Injection Vulnerabilities

Exploit for php platform in category web applications ================================================== Spaceacre SQL/XSS/HTML Injection Vulnerabilities ================================================== Name: Spaceacre SQL/XSS/HTML Injection Vulnerabilities Vendor: http://www.spaceacre.com Date...

Lizzard Active Media (XSS/HTML) Injection Vulnerabilities

Exploit for php platform in category web applications ========================================================= Lizzard Active Media XSS/HTML Injection Vulnerabilities ========================================================= Name: Lizzard Active Media XSS/HTML Injection Vulnerabilities Vendor:...

Spaceacre - SQL Injection / Cross-Site Scripting / HTML Injection

========================================================= Spaceacre SQL/XSS/HTML Injection Vulnerabilities ========================================================= Name: Spaceacre SQL/XSS/HTML Injection Vulnerabilities Vendor: http://www.spaceacre.com Date: 2010-05-26 Author: XroGuE Thanks to:...

BBMedia Design's SQL Injection

========================================================= BBMedia Design's SQL Injection Vulnerability ========================================================= Name: BBMedia Design's SQL Injection Vulnerability Date: 2010-05-23 vendor: http://www.bbmedia.org Author: Ashiyane Digital Security Tea...

Windows Live Messenger 14.0.8117.416 DoS

Exploit for windows platform in category dos / poc ======================================== Windows Live Messenger 14.0.8117.416 DoS ======================================== Software : Windows Live Messenger 14.0.8117.416 Found by : Mr Ha1 / Morad Quraan Date: May 20, 2010 Site :...

Windows Live Messenger Version 2009 DoS

Exploit for windows platform in category dos / poc ======================================= Windows Live Messenger Version 2009 DoS ======================================= Exploit Title: Windows Live Messenger Version 2009 Date: 16/2/2009 Author: Mr Ha1 / Morad Quraan Software Link:...

Tainos Multiple Vulnerabilities

Exploit for php platform in category web applications =============================== Tainos Multiple Vulnerabilities =============================== Name: Tainos Multiple Vulnerabilities Vendor: www.tainos-webdesign.com Date: 2010/05/16 Author: Ashiyane Digital Security Team Discovered: XroGuE...

CVE-2010-1924

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...

Sql injection

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...

CVE-2010-1924

CVE-2010-1924 describes an SQL injection in index.php of the Hi Web Wiesbaden Live Shopping Multi Portal System, exploitable via the artikel parameter to execute arbitrary SQL commands. The affected component is the index.php entry point; root cause is insecure handling of user-supplied input in ...

CVE-2010-1924

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...

CVE-2010-0816

Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; and Windows Mail on Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2,...

CVE-2010-1905

Multiple cross-site scripting XSS vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allow remote attackers to inject arbitrary web script or HTML via crafted input to ASP pages, as demonstrated using the backurl parameter to...

CVE-2010-1913

The default configuration of pluginlicense.ini for the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance, when downloaded from a server operated by Telefonica or possibly other companies, contains an incorrect DNS whitelist that include...

CVE-2010-1912

The SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to bypass intended restrictions on ActiveX execution via "instantiation/free attacks."...