1883 matches found
exponentcms 2.0.5 - Multiple Vulnerabilities
exponentcms 2.0.5 - Multiple Vulnerabilities Information -------------------- Name : XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Software : ExponentCMS 2.0.5 and possibly below. Vendor Homepage : http://www.exponentcms.org Vulnerability Type : Cross-Site Scripting and SQL Injection...
ExponentCMS 2.0.5 Cross Site Scripting / SQL Injection
Information -------------------- Name : XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Software : ExponentCMS 2.0.5 and possibly below. Vendor Homepage : http://www.exponentcms.org Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Onur Yılmaz...
exponentcms 2.0.5 - Multiple Vulnerabilities
Information -------------------- Name : XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Software : ExponentCMS 2.0.5 and possibly below. Vendor Homepage : http://www.exponentcms.org Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Onur Yılmaz...
Fedora 17 : wireshark-1.6.6-2.fc17 (2012-5214)
The following vulnerabilities have been fixed. wnpa-sec-2012-04: The ANSI A dissector could dereference a NULL pointer and crash. Bug 6823 wnpa-sec-2012-06: The pcap and pcap-ng file parsers could crash trying to read ERF data. Bug 6804 wnpa-sec-2012-07: The MP2T dissector could try to allocate t...
MS12-026: Vulnerabilities in Forefront Unified Access Gateway (UAG) Could Allow Information Disclosure (2663860)
The version of Forefront Unified Access Gateway UAG running on the remote host has multiple vulnerabilities : - A spoofing vulnerability that could allow an attacker to redirect a victim to a malicious website. An attacker would have to trick the victim into clicking a specially crafted link in...
Cross-site scripting vulnerability in Invision Power Board version 3.2.3
Information -------------------- Name : Cross-site scripting vulnerability in Invision Power Board version 3.2.3 Software : Invision Power Board version 3.2.3 Vendor Homepage : http://www.invisionpower.com Vulnerability Type : Cross-site scripting Severity : High Researcher : Vasil A. [email protected]...
Joomscan 4.4.2012 Security Scanner - 623 Vulnerabilities Added
Joomscan 4.4.2012 Security Scanner - 623 Vulnerabilities Added Security Team Web-Center just released an updated for Joomscan Security Scanner. The new database Have vulnarbilities 623. Joomla! is probably the most widely-used CMS out there due to its flexibility, user friendlinesss, extensibilit...
lavalife.com Access Detection
Binary data 6410.prm...
Debian DSA-2445-1 : typo3-src - several vulnerabilities
Several remote vulnerabilities have been discovered in the TYPO3 web content management framework : - CVE-2012-1606 Failing to properly HTML-encode user input in several places, the TYPO3 backend is susceptible to Cross-Site Scripting. A valid backend user is required to exploit these...
Invision Power Board 3.2.3 Cross Site Scripting
Name : Cross-site scripting vulnerability in Invision Power Board version 3.2.3 Software : Invision Power Board version 3.2.3 Vendor Homepage : http://www.invisionpower.com Vulnerability Type : Cross-site scripting Researcher : Vasil A. [email protected] Description -------------------- Invision Power...
duplicates NSE Script
Attempts to discover multihomed systems by analysing and comparing information collected by other scripts. The information analyzed currently includes, SSL certificates, SSH host keys, MAC addresses, and Netbios server names. In order for the script to be able to analyze the data it has...
Debian DSA-2427-1 : imagemagick - several vulnerabilities
Two security vulnerabilities related to EXIF processing were discovered in ImageMagick, a suite of programs to manipulate images. - CVE-2012-0247 When parsing a maliciously crafted image with incorrect offset and count in the ResolutionUnit tag in EXIF IFD0, ImageMagick writes two bytes to an...
Facebook Game - Turkiye Texas Poker Detected (deprecated)
Binary data 6437.prm...
FreeBSD : plib -- remote code execution via buffer overflow (ba51c2f7-5b43-11e1-8288-00262d5ed8ee)
Secunia reports : A vulnerability has been discovered in PLIB, which can be exploited by malicious people to compromise an application using the library. The vulnerability is caused due to a boundary error within the 'ulSetError' function src/util/ulError.cxx when creating the error message, whic...
DPScan : Drupal Security Scanner Released
DPScan : Drupal Security Scanner Released The First Security scanner for Drupal CMS has been released by Ali Elouafiq, on his Blog. His team develop a tool that will enumerate at least the modules used by Drupal so we can simulate a White Box audit on our private machines. This small tool is publ...
swDesk Multiple Input Validation Vulnerabilities
swDesk is prone to the following vulnerabilities: 1. An arbitrary file-upload vulnerability. 2. Multiple cross-site scripting vulnerabilities. 3. Multiple PHP code-injection vulnerabilities. An attacker can exploit these issues to execute arbitrary script code in the context of the affected site,...
SQL Injection Vulnerability in Batavi 1.1.2
Information -------------------- Name : SQL Injection Vulnerability in Batavi Software : Batavi 1.1.2 and possibly below. Vendor Homepage : http://www.batavi.org Vulnerability Type : SQL Injection Severity : Critical Researcher : Onur Y?lmaz Advisory Reference : NS-12-003 Description...
Joomscan Security Scanner updated to 611 Joomla vulnerabilities Database
Joomscan Security Scanner updated to 611 Joomla vulnerabilities Database Another huge update coming from Security Team Web-Center that Joomscan Security Scanner is now updated to 611 Joomla vulnerabilities Database. Last update for this tool was in November, 2011 with 550 vulnerabilities in...