651 matches found
PHP-Barcode 0.3pl1 Remote Code Execution
No description provided by source. PHP-Barcode 0.3pl1 Remote Code Execution The input passed to the code parameter is not sanitized and is used on a popen function. This allows remote command execution and also allows to see environment vars: Windows...
www.eVuln.com : "id" SQL Injection in WikLink
www.eVuln.com advisory: "id" SQL Injection in WikLink Summary: http://evuln.com/vulns/171/summary.html Details: http://evuln.com/vulns/171/description.html -----------Summary----------- eVuln ID: EV0171 Software: WikLink Vendor: n/a Version: 0.1.3 Critical Level: medium Type: SQL Injection Status...
www.eVuln.com : "postid" SQL Injection in Social Share
www.eVuln.com advisory: "postid" SQL Injection in Social Share Summary: http://evuln.com/vulns/166/summary.html Details: http://evuln.com/vulns/166/description.html -----------Summary----------- eVuln ID: EV0166 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level: medium Type: S...
Alguest 1.1c-patched Cross Site Scripting
New eVuln Advisory: Multiple XSS in Alguest Summary: http://evuln.com/vulns/151/summary.html Details: http://evuln.com/vulns/151/description.html -----------Summary----------- eVuln ID: EV0151 Software: Alguest Vendor: n/a Version: 1.1c-patched Critical Level: low Type: Cross Site Scripting Statu...
FreeTicket 1.0.0 SQL Injection
Subject: eVuln.com SQL injections in FreeTicket New eVuln Advisory: SQL injections in FreeTicket Summary: http://evuln.com/vulns/146/summary.html Details: http://evuln.com/vulns/146/description.html -----------Summary----------- eVuln ID: EV0146 Software: FreeTicket Vendor: Mrcgiguy Version: 1.0....
NetBSD 5.0 - Hack GENOCIDE Environment Overflow (PoC)
NetBSD 5.0 - Hack GENOCIDE Environment Overflow PoC !/bin/sh NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.main.c. /usr/games/hack -D use the wizard mode. Only work in wizard mode. It is a basi...
NovaStor NovaNET Multiple Code Execution, Denial of Service, Information Disclosure Vulnerabilities
NovaStor NovaNET is prone to code-execution, denial-of-service, and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
WordPress Password Protection Security Bypass Vulnerability
WordPress is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress";...
iSupport 1.8 XSS / Local File Inclusion
--------------------------------------------- ++ iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...
yTNEF/Evolution TNEF Attachment decoder plugin directory traversal & buffer overflow vulnerabilities
------------------------------------------------------------------------ yTNEF/Evolution TNEF Attachment decoder plugin directory traversal & buffer overflow vulnerabilities ------------------------------------------------------------------------ Yorick Koster, June 2009...
Microsoft Visual Studio和Internet Explorer未明远程代码执行漏洞
Bugraq ID: 35804 CNCAN ID：CNCAN-2009072803 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 Microsoft Internet Explorer是一款流行的WEB浏览器。 Blackhat会议公布了Microsoft Visual Studio和Internet Explorer的未明安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Microsoft Visual Studio 2008 SP1 Microsoft Visual Studio 2008 0...
Beerwin's PhpLinkAdmin <= 1.0 Multiple Vulnerabilities - Active Check
Beerwin SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100058";...
Microsoft Internet Explorer NULL Pointer DoS Vulnerability
Internet Explorer is prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-200812-07 : Mantis: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200812-07 Mantis: Multiple vulnerabilities Multiple issues have been reported in Mantis: EgiX reported that manageprojpage.php does not correctly sanitize the sort parameter before passing it to createfunction in core/utilityapi.p...
typo-sqlxss.txt
====================================================================== Typo Impact: Cross Site Scripting SQL Injection Insecure password hash salt Status: patch not available ------------------------------ Affected software description: ------------------------------ Application: Typo Version: =...
[AJECT] NoticeWare IMAP Email Server 4.6.2 DoS vulnerability
---------------------------------------- Synopsis ---------------------------------------- NoticeWare Email Server NG 4.6.2 is vulnerable to denial-of-service DoS attacks. The IMAP server crashes after receiving several large LOGIN messages. Product: NoticeWare Email Server NG Version: 4.6.3 and...
CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Vulnerabilities
Title: CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Vulnerabilities CA Advisory Date: 2008-04-03 Reported By: Dyon Balding of Secunia Research Impact: A remote attacker can execute arbitrary code or cause a denial of service condition. Summary: CA...
Nukedit 4.9.x Remote Create Admin Exploit
Exploit for unknown platform in category web applications ========================================= Nukedit 4.9.x Remote Create Admin Exploit ========================================= !/usr/bin/perl Title: Nukedit 4.9.x Create Admin Exploit Credit: r3dm0v3 Tehran - Iran Download:...
OneCMS 2.4 Remote SQL Injection / Upload Vulnerabilities
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS Vulnerabilities Vendor: http://www.insanevisions.com Bugs: SQL Injection Authentication bypass , Arbitrary file upload! Vulnerable Version: 2.4 prior versions also may be affected Exploitation: Remo...
Altiris Deployment Solution Directory Traversal
SUMMARY Symantecs Altiris Deployment Solution is vulnerable to an elevation of privilege attack. Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | Yes Exploit available | No AFFECTED PRODUCTS Affected Products Product | Version | Build | Solution...