863 matches found
Metasploit Launches Reward Program For Exploits
The team behind the Metasploit Project is launching its own version of a bug bounty program: cash payouts for working exploits. The group is hoping to get explit code for as many of its top 30 vulnerabilities as possible before the program expires later this summer. Metasploit has put together a...
CVE-2011-1723
Cross-site scripting XSS vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to projects/hg-helloworld/news/. NOTE: some of these details are obtained from third party information...
CVE-2011-1723
Cross-site scripting XSS vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to projects/hg-helloworld/news/. NOTE: some of these details are obtained from third party information...
UBUNTU-CVE-2011-1723
Cross-site scripting XSS vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to projects/hg-helloworld/news/. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to projects/hg-helloworld/news/. NOTE: some of these details are obtained from third party information...
CVE-2011-1723
Cross-site scripting XSS vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to projects/hg-helloworld/news/. NOTE: some of these details are obtained from third party information...
CVE-2011-1723
Cross-site scripting XSS vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to projects/hg-helloworld/news/. NOTE: some of these details are obtained from third party information...
CVE-2011-1723
CVE-2011-1723 : The affected software is Redmine, versions 1.0.1 through 1.1.1. A cross-site scripting (XSS) flaw exists in the view file app/views/layouts/base.rhtml, allowing remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter to the path /projects/hg-helloworld/...
Redmine 1.0.11.1.1 - projectshg-hellowwordnews Cross-Site Scripting
Redmine 1.0.11.1.1 - projectshg-hellowwordnews Cross-Site Scripting source: https://www.securityfocus.com/bid/47193/info Redmine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
Redmine 1.1.1 Cross Site Scripting
Information -------------------- Name : XSS vulnerability in Redmine Software : all Redmine versions from 1.0.1 to 1.1.1 Vendor Homepage : http://www.redmine.org Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur Advisory Reference : NS-11-004 Description...
XSS Vulnerability in Redmine 1.0.1 to 1.1.1
Information -------------------- Name : XSS vulnerability in Redmine Software : all Redmine versions from 1.0.1 to 1.1.1 Vendor Homepage : http://www.redmine.org Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur mesut at mavitunasecurity dot com Advisory Reference...
Redmine 1.0.1/1.1.1 - 'projects/hg-hellowword/news/' Cross-Site Scripting
source: https://www.securityfocus.com/bid/47193/info Redmine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...
FreeBSD Ports: redmine
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: redmine
The remote host is missing an update to the system as announced in the referenced advisory. VID cf96cd8d-48fb-11e0-98a6-0050569b2d21 OpenVAS Vulnerability Test $ Description: Auto generated from VID cf96cd8d-48fb-11e0-98a6-0050569b2d21 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
FreeBSD : redmine -- XSS vulnerability (cf96cd8d-48fb-11e0-98a6-0050569b2d21)
Jean-Philippe Lang reports : This maintenance release for 1.1.x users includes 13 bug fixes since 1.1.1 and a security fix XSS vulnerability affecting all Redmine versions from 1.0.1 to 1.1.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
redmine -- XSS vulnerability
Jean-Philippe Lang reports: This maintenance release for 1.1.x users includes 13 bug fixes since 1.1.1 and a security fix XSS vulnerability affecting all Redmine versions from 1.0.1 to 1.1.1...
AOL Desktop 9.6 - .rtx Local Buffer Overflow
AOL Desktop 9.6 - .rtx Local Buffer Overflow !/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ kudos to sup3r: http://www.exploit-db.com/exploits/16085/ Tested : Windows XP Professional SP3 EN latest updates DATE : 02/02/2011...
AOL Desktop 9.6 - '.rtx' Local Buffer Overflow
!/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ kudos to sup3r: http://www.exploit-db.com/exploits/16085/ Tested : Windows XP Professional SP3 EN latest updates DATE : 02/02/2011 NOTE: If exploit doesn't work turn AOL off...
WM Downloader 3.1.2.2 2010.04.15 - .m3u File Buffer Overflow (DEP Bypass)
WM Downloader 3.1.2.2 2010.04.15 - .m3u File Buffer Overflow DEP Bypass !/usr/bin/env python WM Downloader 3.1.2.2 2010.04.15 .m3u Buffer Overflow + DEP Bypass Author: sickness Download : http://mini-stream.net/wm-downloader/ Tested : Windows XP Professional SP3 EN latest updates with IE8 and IE7...
FreeBSD Ports: redmine
The remote host is missing an update to the system as announced in the referenced advisory. VID 584c506d-0e98-11e0-b59b-0050569b2d21 OpenVAS Vulnerability Test $ Description: Auto generated from VID 584c506d-0e98-11e0-b59b-0050569b2d21 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...