2020 matches found
CVE-2010-1128
The Linear Congruential Generator LCG in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to guess values that were intended to be unpredictable, as demonstrated by session cookies generated by using the uniqid function...
PPVChat - Multiple Vulnerabilities
PPVChat - Multiple Vulnerabilities andresg888 Exploit Title : Exotic-Cams --LFI & XSS-- Date : 2010-01-09 Author : andresg888 Vendor : http://www.ppvchat.com/ Contact : andresg8884tgmaildotcom Dork : No DoRk f0R ScRipT KiDDieS Example LFI: http://server/registration/model.php Example XSS: Go to...
PPVChat - Multiple Vulnerabilities
andresg888 Exploit Title : Exotic-Cams --LFI & XSS-- Date : 2010-01-09 Author : andresg888 Vendor : http://www.ppvchat.com/ Contact : andresg8884tgmaildotcom Dork : No DoRk f0R ScRipT KiDDieS Example LFI: http://server/registration/model.php Example XSS: Go to registration/user.php and in "City"...
Joomla yt_color YOOOtheme XSS and Cookie Stealing
No description provided by source. andresg888 Exploit Title : Joomla ytcolor YOOOtheme xss, cookie stealing Date : 2009-12-04 Author : andresg888 Software Link : http://www.yootheme.com/ Contact : andresg8884tgmaildotcom Web: : www.ilegalintrusion.net & www.bl4ck-p0rtal.org Dork : No DoRk f0R...
Serv-U Web Client session cookie handling buffer overflow
Added: 11/08/2009 BID: 36895 OSVDB: 59772 Background Serv-U is an FTP server for Windows platforms. The Serv-U Web Client component provides a browser-based interface to Serv-U. Problem A buffer overflow in the Serv-U Web Client allows remote attackers to execute arbitrary code when overly long...
Serv-U Web Client session cookie handling buffer overflow
Added: 11/08/2009 BID: 36895 OSVDB: 59772 Background Serv-U is an FTP server for Windows platforms. The Serv-U Web Client component provides a browser-based interface to Serv-U. Problem A buffer overflow in the Serv-U Web Client allows remote attackers to execute arbitrary code when overly long...
Serv-U Web Client session cookie handling buffer overflow
Added: 11/08/2009 BID: 36895 OSVDB: 59772 Background Serv-U is an FTP server for Windows platforms. The Serv-U Web Client component provides a browser-based interface to Serv-U. Problem A buffer overflow in the Serv-U Web Client allows remote attackers to execute arbitrary code when overly long...
Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow (1)
Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow 1 -- KC Security PUBLIC ADVISORY -- http://www.rangos.de -- 11-01-2009 RhinoSoft.com Serv-U 9.0.0.5 WebClient Remote Buffer Overflow Background ------------ Serv-U includes a simple, browser-based transfer client perfect for every business...
Serv-u web client 9.0.0.5 buffer overflow
Exploit for unknown platform in category remote exploits ========================================= Serv-u web client 9.0.0.5 buffer overflow ========================================= Title: Serv-u web client 9.0.0.5 buffer overflow CVE-ID: OSVDB-ID: Author: Nikolas Rangos Published: 2009-11-02...
Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow (1)
-- KC Security PUBLIC ADVISORY -- http://www.rangos.de -- 11-01-2009 RhinoSoft.com Serv-U 9.0.0.5 WebClient Remote Buffer Overflow Background ------------ Serv-U includes a simple, browser-based transfer client perfect for every business environment. The Web Client is accessed through a standard...
Google Cross Site Scripting
Universal XSS Vulnerability in all Google Services can compromise your personal information May 8th, 2009 Vulnerability Reported: 04/18/2009 9.33 pm Googles Response: 04/18/2009 10.19 pm Wow! that was super fast for Saturday : Vulnerability Fixed: 05/05/2009 7.05 pm Change Propogated: 05/07/2009...
Update Protection against Oracle Application Server BPEL Module Cross Site Scripting
Oracle Application Server is vulnerable to cross-site scripting due to lack of validation of user supplied data. Oracle Application Server is a multi-platform solution for developing and deploying enterprise applications and web sites. The flaw may be exploited by attackers to execute arbitrary...
Ubuntu Update for php5 vulnerabilities USN-549-1
Ubuntu Update for Linux kernel vulnerabilities USN-549-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5491.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for php5 vulnerabilities USN-549-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
MailMarshal Spam Quarantine Management (SQM) Multiple Component XSS
The remote host is running MailMarshal SMTP, a mail server for Windows. The Spam Quarantine Management web component included with the version of MailMarshal SMTP installed on the remote host is affected by a persistent cross-site scripting vulnerability in its 'delegated spam management' feature...
MailMarshal < 6.4 Spam Quarantine Management XSS
Binary data 4697.prm...
Team SHATTER Security Advisory: Cross-site scripting in Oracle Enterprise Manager (REFRESHCHOICE Parameter)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Cross-site scripting in Oracle Enterprise Manager REFRESHCHOICE Parameter August 4, 2008 Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 10gR1, 10gR2 and 11g 11.1.0.6 Remote exploitable: Ye...
Serene Bach cross-site scripting vulnerability
Overview Serene Bach, a weblog management tool from SerendipityNZ Limited, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Also, session information or credential information kept in a cookie could be leaked. Solution None...
PR08-02: Plone CMS Security Research - the Art of Plowning
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PR08-02: Plone CMS Security Research: the Art of Plowning Product description: Plone is a ready-to-run content management system built on the powerful, and free, Zope application server. Plone is easy to set up, extremely flexible, and provides you wi...
ACROS Security: HTML Injection in BEA WebLogic Server Console (ASPR #2008-03-11-1)
=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2008-03-11-1 ------------------------------------------------------------------------- ASPR 2008-03-11-1: HTML Injection in BEA WebLogic Server Console...
Debian Security Advisory DSA 388-1 (kdebase)
The remote host is missing an update to kdebase announced via advisory DSA 388-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...