2217 matches found
TFTP Server 1.4 - ST 'RRQ' Remote Buffer Overflow
!/usr/bin/python --------------------------------------------------------------------------- Exploit: TFTP SERVER V1.4 ST RRQ Overflow OS: Windows XP PRO SP3 Author: b33f --------------------------------------------------------------------------- Smashing the stack for fun and practise... This tf...
PHP 5.3.8 - Hashtables Denial of Service
Exploit Title: CVE-2011-4885 PHP Hashtables Denial of Service Exploit Date: 1/1/12 Author: infodox Software Link: php.net Version: 5.3. Tested on: Linux CVE : CVE-2011-4885 Exploit Download -- http://infodox.co.cc/Downloads/phpdos.txt...
DEBIAN-CVE-2011-5025
Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...
DEBIAN-CVE-2011-4170
Cross-site scripting XSS vulnerability in the themeadiumappendmessage function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias aka nickname in a /me event, a different...
CVE-2011-4170
Cross-site scripting XSS vulnerability in the themeadiumappendmessage function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias aka nickname in a /me event, a different...
PT-2011-4876
Name of the Vulnerable Software and Affected Versions Empathy versions 3.2.1 and earlier Description A cross-site scripting XSS issue exists in the theme adium append message function, allowing remote attackers to inject arbitrary web script or HTML via a crafted alias aka nickname in a /me event...
Mobile Malware Showing Up on Desktop PCs
The last couple of years have seen a rise in the volume of malware targeted specifically at various mobile operating systems, including Android, iOS and Symbian. Getting a handle on exactly how much of that mobile malware is actually infecting users has been a bit difficult, but Microsoft...
科讯 6.x - 7.06 SQL 注射漏洞
简要描述： 详细说明： Author:my5t3ry 转载请注明：t00ls.net 漏洞位于注册页面的\User\Reg\RegAjax.asp 中的24 - 46行 和 254 -270 行 代码如下： Class AjaxCheck Private KS Private Sub ClassInitialize Set KS=New PublicCls End Sub Private Sub ClassTerminate Set KS=Nothing End Sub Public Sub Kesion Select Case KS.S"Action" Case...
Remember Me filter not working for FishEye/Crucible
The current implementation of the FishEye filter still require that the Remember Me cookie have the encrypted credentials for the user, what is no longer true as that pose a major security vulnerability. The filter should rely on the JIRA Remember Me funcionality. If the user logged in using the...
Remember Me filter not working for FishEye/Crucible
The current implementation of the FishEye filter still require that the Remember Me cookie have the encrypted credentials for the user, what is no longer true as that pose a major security vulnerability. The filter should rely on the JIRA Remember Me funcionality. If the user logged in using the...
Joomla! 1.5/1.6 - JFilterInput Cross-Site Scripting Bypass
Exploit Title: Joomla! JFilterInput XSS Bypass Date: 1 February 2011 Author: Jeff Channell Software Link: http://www.joomla.org Version: 1.5.22, 1.6.0 Tested on: PHP5, MySQL5 Joomla! 1.5 and 1.6 rely on the JFilterInput class to sanitize user-supplied html. This class attempts to parse any given...
Pub-Me CMS Blind SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================ Pub-Me CMS Blind SQL Injection Vulnerability ============================================ Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions...
Pub-Me CMS Blind SQL Injection
| | | | |.' | | | | | ||| |||| Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions Affected: //unknown, all current affected - devel. homepage & 33 clients web pages Software Link: Not aviable, Demo can be requested by e-mail from vendor Found by:...
Pub-Me CMS - Blind SQL Injection
Pub-Me CMS - Blind SQL Injection | | | | |.' | | | | | ||| |||| Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions Affected: //unknown, all current affected - devel. homepage & 33 clients web pages Software Link: Not aviable, Demo can be requeste...
Pub-Me CMS - Blind SQL Injection
| | | | |.' | | | | | ||| |||| Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions Affected: //unknown, all current affected - devel. homepage & 33 clients web pages Software Link: Not aviable, Demo can be requested by e-mail from vendor Found by:...
MailEnable 'MESMTRPC.exe' SMTP Service Multiple Remote Denial of Service Vulnerabilities
According to its banner, the remote MailEnable is prone to multiple remote denial-of-service vulnerabilities. An attacker can exploit these issue to crash the affected application, denying service to legitimate users. MailEnable 4.25 Standard Edition, Professional Edition, and Enterprise Edition...
CVE-2010-2957: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4984
Multiple cross-site scripting XSS vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Keywords parameter to search.php and 2 SearchIndex parameter to browse.php...