CVE-2010-0923

The CVE-2010-0923 entry concerns KDE KDE SC 4.4.0, specifically the KRunner lock module’s file workspace/krunner/lock/lockdlg.cc. A race condition involving multiple forked processes can let physically proximate attackers bypass the KScreenSaver and access an unattended workstation by pressing th...

CVE-2010-0923: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an unattended workstation by pressing the Enter key at a certain time, related to multiple forked...

South River Technologies WebDrive Service privilege escalation

No description provided by source. South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location:...

WS_FTP FTPD "STAT"command overflow parsing-vulnerability warning-the black bar safety net

The following analysis is based on the WSFTP Server 4.0.1. EVAL 4 7 1 5 6 3 1 4version, only the analysis of the“STAT”command overflow . In fact, WSFTP in processing STAT command, many places are length of the judgment, however, there is a place he has been missed, Well, our chance came.:...

CVE-2009-2163

Cross-site scripting XSS vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remote attackers to inject arbitrary web script or HTML via the scerror parameter...

Thomson mp3PRO Player/Encoder (M3U File) Crash PoC

Exploit for unknown platform in category dos / poc ================================================== Thomson mp3PRO Player/Encoder M3U File Crash PoC ================================================== !/usr/bin/perl Discovered & Written by : Hakxer Sec-geeks.com EgY Coders Team :D program :...

Joomla! Component com_news - SQL Injection

Joomla! Component comnews - SQL Injection ================================================================================================================== = SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM = = S N N N A A K K E S T E A A M M M M = + SSSSS N N N AAAAAA KKK EEEEE SSSSS T...

Tumbleweed SecureTransport 4.6.1 FileTransfer - ActiveX Buffer Overflow

Tumbleweed SecureTransport 4.6.1 FileTransfer - ActiveX Buffer Overflow !-- aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Apr-2008 Software: Tumbleweed Communications - SecureTransport FileTransfer http://www.tumbleweed.com/ Description:...

Unfixed XSS vulnerability at www.sae.org

Security researcher Sc@ry, has submitted on 07/06/2007 a cross-site-scripting XSS vulnerability affecting www.sae.org, which at the time of submission ranked 82542 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is currently...

Unfixed XSS vulnerability at www.search-this.com

Security researcher Sc@ry, has submitted on 07/06/2007 a cross-site-scripting XSS vulnerability affecting www.search-this.com, which at the time of submission ranked 34144 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2007. It is...

Unfixed XSS vulnerability at www.h-net.org

Security researcher Sc@ry, has submitted on 07/06/2007 a cross-site-scripting XSS vulnerability affecting www.h-net.org, which at the time of submission ranked 92460 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2007. It is currently...

Unfixed XSS vulnerability at www3.addall.com

Security researcher Sc@ry, has submitted on 07/06/2007 a cross-site-scripting XSS vulnerability affecting www3.addall.com, which at the time of submission ranked 38909 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2007. It is currently...

Unfixed XSS vulnerability at www.net.com

Security researcher Sc@ry, has submitted on 06/06/2007 a cross-site-scripting XSS vulnerability affecting www.net.com, which at the time of submission ranked 18466 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2007. It is currently...

Unfixed XSS vulnerability at coolkids.com

Security researcher Sc@ry, has submitted on 06/06/2007 a cross-site-scripting XSS vulnerability affecting coolkids.com, which at the time of submission ranked 8852416 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/06/2007. It is currently...

CVE-2007-2428: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitrary PHP code via a URL in the 1 fp or 2 sc parameter...

CVE-2006-6485: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ShopSite 8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the prevlocation parameter in shopper/sc/registration.cgi and other unspecified vectors...

Rapid7 Security Advisory 24

Rapid7 Security Advisory Visit http://www.rapid7.com/ to download NeXpose, SC Magazine Winner of Best Vulnerability Management product. Rapid7 Advisory R7-0024 Caucho Resin Windows Directory Traversal Vulnerability Published: May 16, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0024.htm...