Microsoft Internet Explorer 5.0.1 LoadPicture File Enumeration Weakness

No description provided by source. source: http://www.securityfocus.com/bid/9611/info Microsoft Internet Explorer is prone to an issue that may permit a remote site to enumerate the existence of files on the client system. This may be exploited via abuse of the VBScript LoadPicture method...

Zone Labs Zone Alarm 6.0 Advance Program Control Bypass Weakness

No description provided by source. source: http://www.securityfocus.com/bid/15347/info Zone Labs Zone Alarm is prone to a weakness that permits the bypassing of the Advanced Program Control protection. Reports indicate that applications can create a modal dialog box displaying HTML, which can the...

Choosing a restore proxy for performing a Full VM restore

When doing a Full VM restore with Veeam Backup & Replication, sometimes you will need to choose a proxy to get the restore done faster. An example would be restoring across a WAN where Veeam is local, but the repository is on the remote site...

Mozilla: Web console eval capable of executing chrome-privileged code (MFSA 2012-72)

The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and...

Chevereto nb1.91 Denial Of Service

Exploit for windows platform in category dos / poc ======================================================================================== Vulnerable Software: cheveretonb1.91 Downloaded from: http://code.google.com/p/chevereto/downloads/list...

Dragonfly CMS 9.3.3.0 Cross Site Request Forgery

================================================================================================= Vulnerable Software: Dragonfly CMS v9.3.3.0 Downloaded and tested from: http://dragonflycms.org/Downloads/get=28/ Fileinfo:dragonflycms.org Dragonfly9.3.3.0.zip 2.25 MB 70aea682301253637844d7caa10c3e...

Attackers Using Fake Google Analytics Code to Redirect Users to Black Hole Exploit Kit

Injecting malicious code into the HTML used on legitimate Web sites is a key part of the infection lifecycle for many attack crews, and they often disguise and obfuscate their code to make it more difficult to analyze or so it appears to be legitimate code. The latest instance of this technique h...

Vulnerability in Cisco IOS Embedded Call Processing Solutions - Cisco Systems

Cisco Internetwork Operating System IOS Software release trains 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the Cisco IOS Telephony Service ITS, Cisco CallManager Express CME or Survivable Remote Site Telephony SRST may contain a vulnerability in processing certain malformed control protoc...

joomla -- multiple vulnerabilities

Joomla! reported the following vulnerabilities: If a user entered a URL with a negative query limit or offset, a PHP notice would display revealing information about the system.. The migration script in the Joomla! installer does not check the file type being uploaded. If the installation...

Design/Logic Flaw

Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST is enabled, allows remote attackers to cause a denial of service device reload via a malformed Skinny Client Control Protocol SCCP message, aka Bug ID...

[20100423] - Core - Sessation Fixation

Session id doesn't get modified when user logs in. A remote site may be able to forward a visitor to the Joomla! site and set a specific cookie. If the user then logs in, the remote site can use that cookie to authenticate as that user...

zubrag-upload.txt

//Title - Zubrag Uploader 1.0 Arbitrary Shell Upload Vulnerability //Vendor - zubrag.com/scripts/file-upload-form.php //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. The script attempts to hide the...

NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability

No description provided by source. //Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for upload 2...

NEPT Image Uploader 1.0 - Arbitrary File Upload

NEPT Image Uploader 1.0 - Arbitrary File Upload //Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for...

NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================ NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability ============================================================ //Title - NEPT Image Uploader shell upload //Vendor -...

NEPT Image Uploader 1.0 - Arbitrary File Upload

//Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for upload 2. Select it for upload, and tamperdata t...

Microsoft IE MHTML协议处理器跨域信息泄露漏洞（MS08-048）

BUGTRAQ ID: 30585 CVECAN ID: CVE-2008-1448 Internet Explorer是微软操作系统中默认捆绑的WEB浏览器。 IE的MHTML协议处理器没有正确地解释MHTML URI重新定向。如果以UNC的形式指定了URI的话，则没有正确的应用安全策略： \MACHINENAMEORIP\PATHTORESOURCE 在这种情况下当远程站点试图访问本地资源时，Internet Explorer会无法强制区提升限制；在浏览远程站点的时候Internet Explorer会无法应用正确地安全区权限，允许将属于较小权限区的站点处理为更高权限的区。...

Remote site run as local file via Windows URL shortcut — Mozilla

Mozilla community member Geoff reported that URL shortcut files on Windows for example, saved IE favorites could be interpreted as if they were in the local file context when opened by Firefox, although the referenced remote content would be downloaded and displayed. Scripts loaded from the remot...

Macrovision InstallShield InstallScript One-Click Install ActiveX code exectuion

Control allows to download and execute dynamic library from remote site...

Critical: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 27th February 2008 The erratum text has been updated to include the...