8633 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "" in 1 the onerror attribute of an IMG element, 2 the onload attribute of an IFRAME element, or 3 redirect users to other sites via the...
CVE-2007-4212
Multiple cross-site scripting XSS vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "" in 1 the onerror attribute of an IMG element, 2 the onload attribute of an IFRAME element, or 3 redirect users to other sites via the...
OpenOffice.org: Two buffer overflows
Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description John Heasman of NGSSoftware has discovered a heap-based buffer overflow when parsing th...
Buffer overflow
Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long value in the title HTML tag, which triggers the overflow when the user adds the page as a bookmark...
Pagetool 1.07 - 'news_id' SQL Injection
pagetool-1.07 Remote SQL Injection download:http://kent.dl.sourceforge.net/sourceforge/pagetool/pagetool-1.07.tar.gz Found by: Katatafish [email protected] Dork: "powered by Pagetool" Thanks: str0ke PoC...
OpenOffice buffer overflow
Ivalid dynamic memory allocation on RTF document prtdata tag parsing...
openoffice.org rtf filter buffer overflow
Heap-based buffer overflow in OpenOffice.org OOo 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length parameter inconsistency, which causes vtable entries to be overwritten...
Internet Explorer CSS Tag Handling Memory Corruption (MS07-033; CVE-2007-1750)
CSS Cascading Style Sheets is a formatting method for Web pages using HTML.A remote code execution vulnerability has been reported in the way Microsoft Internet Explorer handles CSS tags.An attacker could exploit this issue by convincing a user to visit a specially crafted HTML document or open a...
Cross site scripting
Cross-site scripting XSS vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter...
CVE-2007-3135
Cross-site scripting XSS vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter...
MS Internet Explorer Object Tag Exploit (MS03-020)
Exploit for unknown platform in category remote exploits ================================================== MS Internet Explorer Object Tag Exploit MS03-020 ================================================== !/usr/bin/perl Proof of concept exploit on IE 5.x - 6.x by Alumni IE-Object longtype...
Moderate: Red Hat Security Advisory: squirrelmail security update
A new squirrelmail package that fixes security issues is now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. Several HTML...
CJG EXPLORER PRO 3.2 - 'g_pcltar_lib_dir' Remote File Inclusion
S==A==U==D==I CJG EXPLORER PRO v3.2 pcltar.lib.phppcltrace.lib.php Remote File Include Vulnerabilities Found By : Mogatil , [email protected] Script Site : http://www.zascom.com/download/PHP/1868-CEP-PHP.ZIP File : /pcltar.lib.php include$gpcltarlibdir."/pclerror.lib.php"; File : /pcltrace.lib.php...
CVE-2007-2478
Multiple heap-based buffer overflows in the IRC component in Cerulean Studios Trillian Pro before 3.1.5.1 allow remote attackers to corrupt memory and possibly execute arbitrary code via 1 a URL with a long UTF-8 string, which triggers the overflow when the user highlights it, or 2 a font HTML ta...
PT-2007-3716 · Prototype · Prototypejs
Name of the Vulnerable Software and Affected Versions: prototypejs versions prior to 1.5.1 RC3 Description: The issue allows remote attackers to obtain data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript...
PT-2007-3713 · Microsoft · Atlas
Name of the Vulnerable Software and Affected Versions: Microsoft Atlas framework affected versions not specified Description: The issue concerns the exchange of data using JavaScript Object Notation JSON without proper protection, allowing remote attackers to obtain the data. This can be achieved...
PT-2007-3715 · Moo.Fx · Moo.Fx
Name of the Vulnerable Software and Affected Versions: Moo.fx framework affected versions not specified Description: The issue concerns the exchange of data using JavaScript Object Notation JSON without proper protection, allowing remote attackers to obtain the data. This is achieved through a we...
PT-2007-3714 · Mochikit · Mochikit
Name of the Vulnerable Software and Affected Versions: MochiKit framework affected versions not specified Description: The issue allows remote attackers to obtain data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other...
Sina blog XSS vulnerability-vulnerability warning-the black bar safety net
This afternoon just registered a Sina blog. And Baidu space, Sina only allows the editing part of the HTML Tag, the shield a lot of Tag and HTML attribute, the event is intended to prohibit the malicious code. Built a custom panel, find the content allowed in a STYLE tag, then write the following...
burnCMS 0.2 - 'root' Remote File Inclusion
burnCMS = 0.2rootRemote File Include Vulnerablities D.Script: http://www.burnstone.ch/downloads/burnCMS-0.2.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:PathburnCMS/lib/authuser.php?root=Shell Exploit:PathburnCMS/lib/misc.php?root=Shell...