Lucene search
+L

5620 matches found

myhack58
myhack58
•added 2010/12/10 12:00 a.m.•21 views

Network fun online shopping users fashion Edition Build 1 0 1 1 0 1 SQL injection exploit-vulnerability warning-the black bar safety net

listshj. asp page there is the injection, not for authentication, wherein %dim shjiaid shjiaid=request. querystring"id" set rs=server. createobject"adodb. recordset" rs. open "select from shjia where shjiaid=" shjiaid ,conn,1,1% ID is not filtered, and injected into the generated/admin/listshj...

1.1AI score
SaveExploits0
CISA
CISA
•added 2010/11/19 12:00 a.m.•18 views

Apple Releases Safari 5.0.3 and 4.1.3

Apple has released Safari 5.0.3 and 4.1.3 to address multiple vulnerabilities in the Safari and WebKit packages. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review Apple article HT4455...

7.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2010/10/18 12:00 a.m.•33 views

Fedora 14 : rekonq-0.6.1-1.fc14 (2010-15874)

Mem leak fixed in the bars - Bookmarklets support - No more focus stealing on external url calls - Chinese sites right encoding - OpenSearch suggestions localized - Fixed urlbar crash in disconnected mode - AdBlock performance improvements - UrlBar Improvements - Suggestions - History Review -...

4.3CVSS5.4AI score0.02039EPSS
SaveExploits2References3
CISA
CISA
•added 2010/10/12 12:00 a.m.•35 views

Microsoft Releases October Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, .NET Framework, Server Software, Office, and Internet Explorer as part of the Microsoft Security Bulletin Summary for October 2010. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensiti...

7.4AI score
SaveExploits0References2
ThreatPost
ThreatPost
•added 2010/09/28 4:00 p.m.•17 views

Ears Are The New Target in Biometric Security

Researchers in the School of Electronics and Computer Science of the University of Southampton have come up with a means for identifying ears with a success rate of 99.6%. Read the full article. MIT Technology Review...

1.9AI score
SaveExploits0References1
CISA
CISA
•added 2010/09/23 12:00 a.m.•21 views

OpenX Releases Security Update

OpenX has released a security update to address a vulnerability in the 2.8 downloadable version of OpenX. Exploitation of this vulnerability may allow an attacker to compromise the integrity of the server running OpenX. US-CERT encourages users and administrators to review the OpenX "Security...

6.7AI score
SaveExploits0References2
ThreatPost
ThreatPost
•added 2010/09/17 6:13 p.m.•16 views

Bug Count Just One Problem for Facebook Foe Diaspora

Saying that you want to take on the world’s biggest social network is the kind of thing that puts a big target on your back. At least that’s what the ambitious young crew behind Diaspora, an open source alternative to Facebook, found out this week. The Diaspora team pushed out an early as in...

0.2AI score
SaveExploits0References7
CISA
CISA
•added 2010/08/25 12:00 a.m.•26 views

Apple Releases Security Update 2010-005

Apple has released security update 2010-005 to address multiple vulnerabilities affecting the ATS, CFNetwork, ClamAV, CoreGraphics, libsecurity, PHP, and Samba applications. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, cause a...

7.5AI score
SaveExploits0References1
myhack58
myhack58
•added 2010/07/18 12:00 a.m.•31 views

Max CMS2. 0beta (maxcms)SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

This system was internally very popular video-on-demand system, before 1. 5 version vulnerability very much, the 2.0 version in terms of security has improved, but still there are loopholes exist. Look at the code \inc\ajax. asp dim action : action = getForm"action", "get" response. Charset="gbk"...

SaveExploits0
Prion
Prion
•added 2010/07/12 1:27 p.m.•20 views

Cross site scripting

Cross-site scripting XSS vulnerability in 2daybiz Custom T-Shirt Design Script allows remote attackers to inject arbitrary web script or HTML via a review comment...

4.3CVSS6.1AI score0.01708EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2010/07/09 7:00 p.m.•31 views

CVE-2010-2692

Cross-site scripting XSS vulnerability in 2daybiz Custom T-Shirt Design Script allows remote attackers to inject arbitrary web script or HTML via a review comment...

5.6AI score0.01708EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/07/09 12:00 a.m.•10 views

CVE-2010-2692: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in 2daybiz Custom T-Shirt Design Script allows remote attackers to inject arbitrary web script or HTML via a review comment...

4.3CVSS5.9AI score0.01708EPSS
SaveExploits1References2
Prion
Prion
•added 2010/07/02 12:44 p.m.•26 views

Cross site scripting

Cross-site scripting XSS vulnerability in the JExtensions JE Awd Song comawdsong component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the song review field, which is not properly handled in a view action to index.php...

4.3CVSS6.2AI score0.01598EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/07/01 12:00 a.m.•11 views

CVE-2010-2613: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the JExtensions JE Awd Song comawdsong component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the song review field, which is not properly handled in a view action to index.php...

4.3CVSS5.9AI score0.01598EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2010/06/29 12:00 a.m.•45 views

Joomla AWD Song Cross Site Scripting

================================================ Joomla comawdsong persistent xss Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2010/06/25 12:00 a.m.•25 views

2daybiz Custom T-Shirt SQL Injection / Cross Site Scripting

$------------------------------------------------------------------------------------------------------------------- $ 2daybiz custom T-shirt SQL Injection and Cross Site Scripting Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download...

0.3AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2010/04/05 9:01 p.m.•23 views

Feds Admit Not Doing Enough in ID Theft

An internal review has found that the Justice Department has not done enough to fight identity theft, the fastest-growing crime in the country. Justice Department Inspector General Glenn Fine says in a report that the department is falling short in efforts to combat identity theft, and that the...

0.9AI score
SaveExploits0References2
CISA
CISA
•added 2010/03/29 12:00 a.m.•29 views

Apple Releases Security Update 2010-002 and Mac OS X v10.6.3

Apple has released Security Update 2010-002 and Mac OS X v10.6.3 to address multiple vulnerabilities that affect a number of applications. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, cause a denial-of-service condition, bypass security...

7.6AI score
SaveExploits0References1
seebug.org
seebug.org
•added 2010/03/21 12:00 a.m.•40 views

DreamHost_<=_&&_>_2.3_global_Inj3ct0r/Xss/Local_inc_Multiple_Exploit

No description provided by source. + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com + visit : inj3ct0r.com , inj3ct0r.org , inj3ct0r.net Decided to make a review to DreamHost - Billing Panel Site product: dreamcost.com Version: = && 2.3...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/02/18 12:00 a.m.•31 views

Open Source Classifieds 1.1.0 Alpha (OSClassi) - SQL Injection Cross-Site Scripting Arbitrary Admin Change

Open Source Classifieds 1.1.0 Alpha OSClassi - SQL Injection Cross-Site Scripting Arbitrary Admin Change / / / | | \ | |/ | ' \ / | / / / | ' / | \ \ | | | | | | | | | / / | | | \ \ /|/|| || ||,| /,|./|/...

0.4AI score
SaveExploits0
Rows per page
Query Builder