Mozilla Firefox < 14.0 Multiple Vulnerabilities

Binary data 6519.prm...

Firefox < 14.0 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 14.0 and thus, is potentially affected by the following security issues : - Several memory safety issues exist, some of which could potentially allow arbitrary code execution. CVE-2012-1948, CVE-2012-1949 - An error related to drag and drop can all...

The integrity of the enterprise 2. 0 backend login universal password vulnerability-vulnerability warning-the black bar safety net

Background/ ManageAdmin/ManageLogin. asp The vulnerability can be used universal password login 'or'='or' 'or'='or' Get a webshell directly on in the picture there, you know. Google keywords: inurl:/Product/Product. asp? CateID Actual URL: http://www.hnvalve.com/ManageAdmin/AdminManage.asp...

Mozilla Firefox ESR 10.x < 10.0.3 Multiple Vulnerabilities

Binary data 6350.prm...

LY Network Cart SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Official Website: http://www.1337day.com 0 1 + Support...

Unfixed XSS vulnerability at network-tools.com

Security researcher a3q, has submitted on 02/01/2012 a cross-site-scripting XSS vulnerability affecting network-tools.com, which at the time of submission ranked 3711 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. It is currently...

phpShowtime Directory Traversal

Exploit for php platform in category web applications Title : phpShowtime Directory Travel Author : Red Security TEAM Date : 31/01/2012 Download : http://phpshowtime.kybernetika.de/ Demo : http://phpshowtime.kybernetika.de/demo/ Tested On : CentOS Dork : Copyright ©2005-2011 by Nova CMS. Contact ...

KnowledgeTree 3.7.0.2 Cross Site Scripting

Advisory ID: HTB23065 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinknowledgetreecommunityedition.html Product: KnowledgeTree Commercial and Community Editions Vendor: KnowledgeTree Inc. http://knowledgetree.org Vulnerable Version: 3.7.0.2 and probably prior Tested Version:...

Design/Logic Flaw

Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information time card and attendance via unspecified vectors related to manipulation of a URL...

CVE-2011-2677

Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information time card and attendance via unspecified vectors related to manipulation of a URL...

CVE-2011-2677

Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information time card and attendance via unspecified vectors related to manipulation of a URL...

CVE-2011-2677

Cybozu Office before 8.0.0 is affected by an improper access control vulnerability where remote authenticated users can bypass restrictions and access sensitive information (time card and attendance) by manipulating a URL. Affected product: Cybozu Office (pre-8.0.0). Root cause: insufficient enfo...

Microsoft Lync 4.0.7577.0 Javascript Injection

============================================================================ Foofus.net Security Advisory: foofus-20110610 ============================================================================ Title: Javascript Injection in Microsoft Lync Version: 4.0.7577.0 Vendor: Microsoft Release Date:...

Wordpress plugin Comment Rating Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress plugin Comment Rating more than once in url Date: 14-03-2011 Author: sasa1 mysite: www.dev-chat.com Vendor: http://wealthynetizen.com Download: http://downloads.wordpress.org/plugin/comment-rating.zip Exploit 4 Comment...

CVE-2010-3488

Directory traversal vulnerability in QuickShare 1.0 allows remote attackers to read arbitrary files via a ... triple dot in the URL...

SiteGenius CMS Blind SQL Injection

Exploit Title: SiteGenius CMS Blind SQL Injection Vulnerabilities Date found: 7.2010 Author: MikiSoft Email: [email protected] CMS Software Site/Link: http://www.webtopsolutions.net, http://www.hostingcms.ch/home/index.php?p=143 CMS Info.: SiteGenius 2002 is framework for business excellence...

Directory traversal

Directory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the url parameter. NOTE: the researcher also suggests an analogous PHP remote file inclusion vulnerability, but this may be incorrect...

New Bug Found By Ostoure Sazan Sharif

www.Ostoure.com | | Ostoure Security Research Team | | Title: Accounting Portal authentication Bypass | Vendor: Parsonline - Parsway ISP | Exploitation: Remote with browser ==================== - Description: ==================== The data in the admin folder "DesktopModules" can be accessed via a...

BaBB 2.8 Remote Code Injection Exploit

Exploit for unknown platform in category web applications ====================================== BaBB 2.8 Remote Code Injection Exploit ====================================== !usr/bin/python BaBB 2.8 Full Code Injection Exploit Download :...

Ann can resolution I is male and female it?-- Keep track of the same shape word attack techniques-vulnerability warning-the black bar safety net

An attacker in order to achieve the attack purpose, they in the network link can be described under the foot work: in order to convince the user to click a link, find ways to make these links look a bit of a problem are not, however, as long as the user clicks on to be brought into the...