CUPS Sample Engine Cross-Site Scripting Vulnerability

CUPS is a Universal Unix Printing System, a cross-platform printing solution for Unix environments, based on the Internet Printing Protocol, providing most PostScript and raster printer services. A cross-site scripting vulnerability exists in the CUPS sample engine, which allows remote attackers ...

IBM Curam Social Program Management Cross-Site Scripting Vulnerability

IBM Curam Social Program Management is a social program management solution. The solution supports the end-to-end social program delivery process. A cross-site scripting vulnerability exists in IBM Curam SPM, which allows remote attackers to exploit the vulnerability to inject malicious script or...

Microsoft Outlook App for Mac Cross-Site Scripting Vulnerability

Microsoft Office for Mac 2011 is an office suite for the Mac system. An unspecified cross-site scripting vulnerability in Microsoft Office for Mac 2011 allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information o...

Asterisk libcURL HTTP Request Injection (AST-2015-002)

According to its SIP banner, the version of Asterisk running on the remote host is potentially affected by an HTTP request injection vulnerability due to a flaw within the included libcURL library in the 'parseurlandfillconn' function when handling line feeds and carriage returns. A remote...

OpenOffice 1.0.1 - Remote Access Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8794/info OpenOffice provides functionality so that it can be configured to listen on a designated network port for incoming communications. OpenOffice is prone to a remote denial of service vulnerability under certain...

Python 1.5.2 Pickle Unsafe eval() Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5255/info Python is an open source, object oriented programming language. The Python Pickle module is provided to convert object variables into a serialized form pickling, and later recover the data back into an object...

eMule 0.2x Client OP_SERVERIDENT Heap Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8440/info eMule client has been reported prone to a heap overflow vulnerability. The issue presents itself when the client parses malicious data received from the server. This issue may allow an attacker to provide...

Systrace Multiple System Call Wrappers Concurrency Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25258/info Systrace is prone to multiple concurrency vulnerabilities due to its implementation of system call wrappers. This problem can result in a race condition between a user thread and the kernel. Attackers can explo...

Joomla! Kunena组件"[map]" BBCode脚本注入漏洞

Joomla!是一套在国外相当知名的内容管理系统。 由于在创建信息时通过"map" BBCode参数传递的输入在bbcode/bbcode.php中没有被正确过滤，攻击者可以利用漏洞在恶意数据被查看时，在受影响站点上下文的用户浏览器会话中注入并执行任意HTML和脚本代码。 0 Kunena 3.x component for Joomla! Joomla! Kunena 3.0.5版本以修复此漏洞，建议用户下载使用： http://www.kunena.org/blog/135-kunena-3-0-5-released...

Lianja SQL 1.0.0RC5.1 db_netserver Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Lianja SQL 1.0.0RC5.1 dbnetserver Sta...

Novell eDirectory NCP Stack Buffer Overflow (CVE-2012-0432)

A stack buffer overflow exists in Novell eDirectory NetWare Core Protocol NCP stack. The vulnerability is due to lack of bounds checking in the KeyedObjectLogin function. A remote attacker could exploit this vulnerability by sending TCP packets with malicious data...

SA-CONTRIB-2012-143 PRH Search - Cross Site Scripting (XSS)

PRH Search provides an interface to search for association information for Finnish association using the PRH Patentti- ja Rekisterihallitus database. The module fails to sanitize data retrieved from an untrusted third party source, thereby exposing an arbitrary script injection vulnerability XSS...

XSRF vulnerability in the Mail Page plugin

We have identified and fixed a cross-site request forgery XSRF vulnerability which may affect Confluence instances in a public environment. The XSRF vulnerability is exposed in the Confluence Mail Page plugin. Note that the Mail Page plugin is disabled by default. If you do not have this plugin...

Easy RM To MP3 2.7.3.7000 Buffer Overflow

Exploit Title: Easy RM to MP3 2.7.3.700 Local Buffer Overflow .m3u , .pls , .smi , .wpl , .wax , .wvx , .ram Date: 4 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.exploit-db.com/application/10642/ Version: 2.7.3.700 Tested on: Windows XP SP 1 CVE : N / A !/usr/bin/python This exploit...

dotDefender - Cross-Site Scripting Security Bypass

dotDefender - Cross-Site Scripting Security Bypass source: https://www.securityfocus.com/bid/41560/info dotDefender is prone to a security-bypass vulnerability because it fails to restrict malicious data from reaching protected sites. Remote attackers can exploit this issue to bypass security...

FreeBSD : horde-base -- multiple vulnerabilities (ee23aa09-a175-11de-96c0-0011098ad87f)

The Horde team reports : An error within the form library when handling image form fields can be exploited to overwrite arbitrary local files. An error exists within the MIME Viewer library when rendering unknown text parts. This can be exploited to execute arbitrary HTML and script code in a...

IBM DB2 < 9.5 pack 3a Malicious Data Stream Denial of Service Exploit

No description provided by source. Discovered by Dennis Yurichev [email protected] DB2TEST database should be present on target system GUEST account with QQ password shoule be present on target system from sys import from socket import sockobj = socketAFINET, SOCKSTREAM sockobj.connect argv1, 500...

IBM DB2 < 9.5 pack 3a Malicious Data Stream Denial of Service Exploit

Exploit for multiple platform in category dos / poc ===================================================================== IBM DB2 9.5 pack 3a Malicious Data Stream Denial of Service Exploit ===================================================================== Discovered by Dennis Yurichev DB2TEST...

wordpress -- header rss feed script insertion vulnerability

Secunia reports: Input passed via the HTTP "Host" header is not properly sanitised before being used. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site if malicious data is viewed...

Opera Web浏览器HTML注入及跨站脚本漏洞

BUGTRAQ ID: 31842 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.61之前版本中的多个安全漏洞可能允许恶意用户执行脚本注入攻击、绕过某些安全限制或泄露敏感信息。 1 History Search功能没有正确地过滤某些输入，用户在查看恶意数据时可能在用户的浏览器会话中注入任意HTML和脚本代码，导致泄露之前所访问的页面。 2 实现Fast Forward功能中的错误可能允许通过特制的JavaScript URL在受限制的帧中执行任意脚本代码。 3 在预览新闻源期间时阻断脚本存在错误，可能导致泄露所订阅新闻源的内容，或将用户订阅到任意的新闻源。 Oper...