Vulnerabilities in Yandex.Server

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в локальном поисковике Яndex.Server. Уязвимости в параметрах query и within в главном скрипте. XSS: http://site/search/?query=223E3Cscript3Ealertdocument.cookie3C/script3E...

Vulnerability in Google Custom Search Engine

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в локальном поисковике Google Custom Search Engine. Уязвимость в параметре q в главном скрипте. XSS: http://site/search.php?q=3C2Ftitle3E3Cscript3Ealertdocument.cookie3C2Fscript3E О данной уязвимости я писал в рамка...

CVE-2007-3182

Multiple cross-site scripting XSS vulnerabilities in Calendarix 0.7.20070307, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 year and 2 month parameters to calendar.php, and the 3 leftfooter parameter to calfooter.inc.php. NOTE: the ycyear...

CVE-2007-3183

Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters to calendar.php and the 3 search string to calsearch.php...

EUVD-2007-3174

Multiple cross-site scripting XSS vulnerabilities in Calendarix 0.7.20070307, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 year and 2 month parameters to calendar.php, and the 3 leftfooter parameter to calfooter.inc.php. NOTE: the ycyear...

CVE-2007-3182: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Calendarix 0.7.20070307, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 year and 2 month parameters to calendar.php, and the 3 leftfooter parameter to calfooter.inc.php. NOTE: the ycyear...

Sql injection

Multiple SQL injection vulnerabilities in archives.php in Particle Blogger 1.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the month parameter and other unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter...

CVE-2007-2879

Cross-site scripting XSS vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter...

CVE-2007-2879: Undefined Security Weakness

Cross-site scripting XSS vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter...

PHP: Multiple vulnerabilities

Background PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. Description Several vulnerabilities were found in PHP, most of them during the Month Of PHP Bugs MOPB by Stefan Esser. The most severe of these...

CVE-2007-2212: Undefined Security Weakness

Multiple SQL injection vulnerabilities in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 year or 2 month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Mac OS X kernel "fpathconf()" syscall fails to properly handle unknown file types

Overview A vulnerability in the Mac OS X kernel could allow an authenticated local attacker to cause a denial of service. Description The fpathconf system call provides a method for applications to determine the current value of a configurable system limit or option variable associated with a fil...

PT-2007-2302 · Local · Local Calendar System

Name of the Vulnerable Software and Affected Versions: local Calendar System version 1.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the TEMPLATE DIR parameter to files such as showinvoices.php, showmonth.php, showevents.php, retrieveinvoice.php,...

PHP and ASP upload vulnerability explore-exploit warning-the black bar safety net

1 pass exploit the principles just for the form format of the upload of asp and php scripts ncnetcat For the submission packet the dos interface to run under: nc-vv www.. com 8 01.txt -vv: echo 8 0: the www port 1.txt: is your data packet to be transmitted use of more methods, please check this...

CVE-2006-6211: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to a admin/admincore.php, the 2 month parameter to b admin/comments.php or c admin/entries.php, or the 3 page parameter to d admin/logs.php,...

MS Internet Explorer WebViewFolderIcon setSlice() Overflow E

No description provided by source. This module is part of the metasploit framework3 svn co http://metasploit.com/svn/framework3/trunk/ require 'msf/core' module Msf class Exploits::Windows::Browser::WebViewSetSlice Msf::Exploit::Remote include Exploit::Remote::HttpServer::Html def initializeinfo ...

MS Internet Explorer WebViewFolderIcon setSlice() Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== MS Internet Explorer WebViewFolderIcon setSlice Overflow Exploit ================================================================== This module is part of the metasploit...

Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (Metasploit) (1)

Microsoft Internet Explorer - WebViewFolderIcon setSlice Overflow Metasploit 1 This module is part of the metasploit framework3 svn co http://metasploit.com/svn/framework3/trunk/ require 'msf/core' module Msf class Exploits::Windows::Browser::WebViewSetSlice 'Internet Explorer WebViewFolderIcon...

Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (Metasploit) (1)

This module is part of the metasploit framework3 svn co http://metasploit.com/svn/framework3/trunk/ require 'msf/core' module Msf class Exploits::Windows::Browser::WebViewSetSlice 'Internet Explorer WebViewFolderIcon setSlice Overflow', 'Description' = %q This module exploits a flaw in the...