RobotStats 1.0 SQL Injection

Title : RobotStats v1.0 robot param SQL Injection Vulnerability Author : ZoRLu / [email protected] / [email protected] Home : http://milw00rm.com / its online Twitter : https://twitter.com/milw00rm or @milw00rm Date : 22.11.2014 Demo : http://alpesoiseaux.free.fr/robotstats/ Download :...

PT-2014-8673

Name of the Vulnerable Software and Affected Versions SAP HANA Web-based Development Workbench affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML, potential...

PT-2014-7111

Name of the Vulnerable Software and Affected Versions Akronymmanager aka SB Folderdownload extension versions 0.5.0 and earlier for TYPO3 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be...

PT-2014-5582

Name of the Vulnerable Software and Affected Versions Nexa Meridian versions prior to 2014 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized access or control of user...

PT-2014-3087

Name of the Vulnerable Software and Affected Versions IBM Algo One versions 4.7.0 through 5.0.0 ACSWeb in Algo Security Access Control Management versions 4.7.0 through 4.9.0 ACSWeb in AlgoWebApps version 5.0.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitra...

Authentication bypass in D-Link routers

Vendor: D-Link Affected Products: -DIR-505L SharePort Mobile Companion HW: A1 / FW: 1.01 -DIR-826L Wireless N600 Cloud Router HW: A1 / FW: 1.02 Vendor Notification: April 8, 2013 Public Disclosure: July 8, 2013 Vulnerability Type: Authentication Bypass CVE Reference: CVE-2013-4772 Solution Status...

PT-2013-2388

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.1, 8.5 through FP3, 8.7 through FP2, and 9.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a malformed URL. This could potentially...

PT-2012-5823

Name of the Vulnerable Software and Affected Versions KENT-WEB ACCESS REPORT versions 4.2 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors related to access-log data. This could potentially lead to unauthorized...

CVE-2012-0320

CVE-2012-0320 affects Movable Type before 4.38, 5.0.x before 5.07, and 5.1.x before 5.13. The vulnerability allows remote attackers to take control of user sessions via the commenting feature and the community script, enabling session hijack. Relevant advisories reference upgrades to fixed releas...

PT-2012-2951

Name of the Vulnerable Software and Affected Versions Hitachi IT Operations Director versions 02-50-01 through 02-50-07 Hitachi IT Operations Director versions 03-00 through 03-00-04 Hitachi IT Operations Director versions prior to 03-00-06 Description A cross-site scripting XSS issue allows remo...

PT-2012-2949

Name of the Vulnerable Software and Affected Versions Hitachi IT Operations Analyzer versions 02-01, 02-51 through 02-51-01, 02-53 through 02-53-02 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could...

PT-2011-1820

Name of the Vulnerable Software and Affected Versions XING Button xing extension for TYPO3 versions prior to 1.0.2 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecifi...

PT-2011-3834

Name of the Vulnerable Software and Affected Versions HP OpenView Performance Insight versions 5.3 through 5.41.002 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to...

PT-2011-1582

Name of the Vulnerable Software and Affected Versions TIBCO Collaborative Information Manager versions prior to 8.1.0 ActiveCatalog versions prior to 1.0.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This cou...

Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Cod...

Oracle Application Server - multiple security vulnerabilities

Application: Oracle Application Server Versions Affected: Oracle Application Server 10.1.2.0.2 Vendor URL: http://oracle.com Bugs: Response Splitting XSS Exploits: YES Reported: 21.01.2009 Vendor response: 23.01.2009 Date of Public Advisory: 22.02.2012 Author: Alexandr Polyakov Description Oracle...

CVE-2007-3920

GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069...

CVE-2007-3920

GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069...

[SA21705] OpenVMS Session Control Password Disclosure Security Issue

---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available:...

CVE-2002-1755

tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC...