2862 matches found
CVE-2009-4339
CVE-2009-4339 describes an SQL injection vulnerability in the TYPO3 Subscription extension mf_subscription 0.2.2, allowing remote attackers to execute arbitrary SQL commands via unknown vectors. The connected documents provide the vulnerability description and CVSS metrics but do not include vend...
CVE-2009-4339
SQL injection vulnerability in the Subscription mfsubscription extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
[security bulletin] HPSBUX02480 SSRT090253 rev.1 - HP-UX Running VRTSweb, Remote Execution of Arbitrary Code, Increase of Privilege
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01943614 Version: 1 HPSBUX02480 SSRT090253 rev.1 - HP-UX Running VRTSweb, Remote Execution of Arbitrary Code, Increase of Privilege NOTICE: The information in this Security Bulletin should be act...
Fortinet Advisory: Fortinet Discovers Vulnerability in Indeo Codec
Fortinet Discovers Vulnerability in Indeo Codec 2009.December.08 Summary: Fortinet's FortiGuard Labs Discovers Memory Corruption Vulnerability in Indeo Codec. Impact: Remote Code Execution. Risk: Critical. Affected Software: For a list of operating system and product versions affected, please see...
McAfee Subscription Manager Stack Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'McAfee...
RHEL 3 : redhat-release (EOL Notice) (RHSA-2009:1526)
This is the 1-year notification of the End Of Life plans for Red Hat Enterprise Linux 3. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 3 will end on October 31, 2010. After this date, Red Hat will discontinue the...
FreeBSD : opera -- multiple vulnerabilities (2fda6bd2-c53c-11de-b157-001999392805)
Opera Team Reports : - Fixed an issue where certain domain names could allow execution of arbitrary code, as reported by Chris Weber of Casaba Security - Fixed an issue where scripts can run on the feed subscription page, as reported by Inferno %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Code Execution Bug Bites Opera Browser
On the same day Mozilla shipped a Firefox update to fix multiple critical vulnerabilities, Opera dropped a major patch to fix three documented flaws, including a memory corruption issue that exposes users to code execution attacks. Here are the raw details: Advisory 1: Specially crafted domain...
Opera < 10.01 Multiple Vulnerabilities
Binary data 5217.prm...
opera -- multiple vulnerabilities
Opera Team Reports: Fixed an issue where certain domain names could allow execution of arbitrary code, as reported by Chris Weber of Casaba Security Fixed an issue where scripts can run on the feed subscription page, as reported by Inferno...
Opera may allow scripts to access feeds
Opera may allow scripts to run on the feed subscription page, thereby gaining access to the feeds object. This can be used for automatic subscription of feeds, or reading other feeds...
X-Cart Email Subscription - email Cross-Site Scripting
X-Cart Email Subscription - email Cross-Site Scripting source: https://www.securityfocus.com/bid/36601/info X-Cart is prone to a cross-site scripting vulnerability in the email subscription component because the application fails to sufficiently sanitize user-supplied input. An attacker may...
X-Cart Email Subscription - 'email' Cross-Site Scripting
source: https://www.securityfocus.com/bid/36601/info X-Cart is prone to a cross-site scripting vulnerability in the email subscription component because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
X-Cart email subscription xss
Exploit for unknown platform in category web applications ============================= X-Cart email subscription xss ============================= X-Cart XSS in email subscription Download: http://www.x-cart.com/ Discovered by: Paulo Santos...
X-Cart email subscription xss
No description provided by source. X-Cart XSS in email subscription Download: http://www.x-cart.com/ Discovered by: Paulo Santos Contact: [email protected] Blog: http://infocampo.wordpress.com http://target/path/customer/home.php?mode=subscribed&email=plaintext/...
X-Cart Email Subscription Cross Site Scripting
X-Cart XSS in email subscription Download: http://www.x-cart.com/ Discovered by: Paulo Santos Contact: [email protected] Blog: http://infocampo.wordpress.com http://target/path/customer/home.php?mode=subscribed&email=...
Joomla com_jinc (newsid) Blind SQL Injection Vulnerability
No description provided by source. --------------------------------------------------------------------------------- joomla component comjinc newsid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group :...
Joomla! Component com_jinc 0.2 - 'newsid' Blind SQL Injection
--------------------------------------------------------------------------------- joomla component comjinc newsid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatiHackTeam Email :...
[SECURITY] Fedora 10 Update: blam-1.8.5-12.fc10
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
GUPnP Message Handling Denial Of Service Vulnerability
This host has installed GUPnP is prone to Denial Of Service Vulnerability OpenVAS Vulnerability Test $Id: secpodgupnpdosvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ GUPnP Message Handling Denial Of Service Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod, http://www.secpod.co...