CVE-2009-3858

Cross-site scripting XSS vulnerability in GejoSoft allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI in photos/tags...

CVE-2009-3858

CVE-2009-3858 describes a Cross-site Scripting (XSS) vulnerability in GejoSoft. The issue allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI in the photos/tags component. The NVD entry lists a base score of 4.3 (Medium) with network attack vector, ...

Hijacking Opera's Native Page using malicious RSS payloads

Hijacking Opera's Native Page using malicious RSS payloads ---------------------------------------------------------------------------- --------- For complete post with images, please visit - http://securethoughts.com/2009/10/hijacking-operas-native-page-using-malicio us-rss-payloads/ Well, this...

Information disclosure

The Meta tags aka Nodewords module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2009-3442

The Meta tags aka Nodewords module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2009-3442

The vulnerability CVE-2009-3442 affects the Drupal Meta tags (Nodewords) module prior to 6.x-1.1. The flaw is in how permissions are enforced during assignment of node meta tags, which can allow remote attackers to obtain sensitive information via unspecified vectors. The NVD reports a partial co...

CVE-2009-3442

The Meta tags aka Nodewords module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors...

SA-CONTRIB-2009-060 - Meta tags (Nodewords) - Access bypass

The Meta tags also known as Nodewords module provides meta tags based on node titles. In certain conditions, the node meta tags were not respecting access permissions, potentially exposing content not available otherwise. Versions affected Meta tags for Drupal 6.x before Meta tags 6.x-1.1 Drupal...

Joomla Component TPDugg 1.1 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= Joomla Component TPDugg 1.1 Blind SQL Injection Exploit ======================================================= !/usr/bin/perl...

Buffer overflow

Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 "a" HTML tag; a long src attribute in 2 embed, 3 img, or 4 script tags; 5 a long background attribute in a body tag; and...

CVE-2008-6897

Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 "a" HTML tag; a long src attribute in 2 embed, 3 img, or 4 script tags; 5 a long background attribute in a body tag; and...

CVE-2008-6897

Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 "a" HTML tag; a long src attribute in 2 embed, 3 img, or 4 script tags; 5 a long background attribute in a body tag; and...

CVE-2009-2668

Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16473 allows remote attackers to cause a denial of service CPU consumption via an XML document composed of a long series of start-tags with no corresponding end-tags, a related issue to CVE-2009-1232...

Mozilla Firefox 3.5 (OSX) - Font Tags Remote Buffer Overflow

Mozilla Firefox 3.5 OSX - Font Tags Remote Buffer Overflow !/usr/bin/env python FireFox 3.5 Heap Spray OS X Exploit Modified by: DrIDE Originally Discovered by: Simon Berry-Bryne Pythonized by: David Kennedy ReL1K @ SecureState Thanks to HDM Tested on OS X 10.5.7 from BaseHTTPServer import...

Mozilla Firefox 3.5 (Font tags) Remote Buffer Overflow Exploit (osx)

Exploit for windows platform in category remote exploits ==================================================================== Mozilla Firefox 3.5 Font tags Remote Buffer Overflow Exploit osx ==================================================================== !/usr/bin/env python FireFox 3.5 Heap...

Mozilla Firefox 3.5 (Font tags) Remote Heap Spray Exploit (pl)

No description provided by source. FireFox 3.5 Heap Spray Discovered by: Simon Berry-Bryne Coded in Perl by netsoul, ALTO PARANA - Paraguay Contact: netsoul2 at gmail dot com !/usr/bin/perl -w use strict; use POE::Component::Server::HTTP; POE::Component::Server::HTTP-newPort = my $port = 8080,...

Mozilla Firefox 3.5 - Font tags Remote HeapSpray (2)

Mozilla Firefox 3.5 - Font tags Remote HeapSpray 2 FireFox 3.5 Heap Spray Discovered by: Simon Berry-Bryne Coded in Perl by netsoul, ALTO PARANA - Paraguay Contact: netsoul2 at gmail dot com !/usr/bin/perl -w use strict; use POE::Component::Server::HTTP; POE::Component::Server::HTTP-newPort = my...

Mozilla Firefox 3.5 - 'Font tags' Remote HeapSpray (2)

FireFox 3.5 Heap Spray Discovered by: Simon Berry-Bryne Coded in Perl by netsoul, ALTO PARANA - Paraguay Contact: netsoul2 at gmail dot com !/usr/bin/perl -w use strict; use POE::Component::Server::HTTP; POE::Component::Server::HTTP-newPort = my $port = 8080, ContentHandler = "/" =...

Zortam MP3 Media Studio 9.40 Memory Corruption

!/usr/bin/perl Title: Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulnerabilities Product web page: http://www.zortam.com Desc: Zortam MP3 Studio version 9.40 suffers from a memory corruption attack from two different malicious files. The first method is thru a .mp3 file which has its...

Mozilla Firefox 3.5 - Font tags Remote HeapSpray (1)

Mozilla Firefox 3.5 - Font tags Remote HeapSpray 1 !/usr/bin/env python FireFox 3.5 Heap Spray Exploit Originally discovered by: Simon Berry-Bryne Pythonized by: David Kennedy ReL1K @ SecureState from BaseHTTPServer import HTTPServer from BaseHTTPServer import BaseHTTPRequestHandler import sys...