vCard PRO 3.1 - Cross-Site Scripting

vCard PRO 3.1 - Cross-Site Scripting ======================================================================================== | Title : vCard PRO 3.1 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi -...

vCard PRO 3.1 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ================================================ vCard PRO 3.1 Cross Site Scripting Vulnerability ================================================ ======================================================================================== |...

Cross site scripting

Cross-site scripting XSS vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the addition of the themevcard function to a theme and the use of default content...

CVE-2009-3779

Cross-site scripting XSS vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the addition of the themevcard function to a theme and the use of default content...

CVE-2009-3779

CVE-2009-3779 is a Cross-site scripting (XSS) vulnerability in the Drupal vCard module. The affected lineages are vCard 5.x prior to 5.x-1.4 and 6.x prior to 6.x-1.3, linked to the addition of the theme_vcard function to a theme and the use of default content. The vulnerability allows remote atta...

CVE-2009-3779

Cross-site scripting XSS vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the addition of the themevcard function to a theme and the use of default content...

CVE-2009-3779: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the addition of the themevcard function to a theme and the use of default content...

SA-CONTRIB-2009-079 - vCard - Cross Site Scripting

The vCard module adds a vCard download link to every user's profile. This link makes it easy to add users from a Drupal site to a local address book. When the themevcard function is added to a theme and default content from the vCard module is output, the site will be vulnerable to Cross Site...

Code injection

HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service CPU consumption, SMS consumption, and connectivity loss via a flood of vCards to UDP port 9204...

CVE-2008-6775

The CVE-2008-6775 entry affects HTC Touch Pro and HTC Touch Cruise devices via a vulnerability in processing vCards. A flood of vCards sent to UDP port 9204 can cause CPU and SMS resource consumption, leading to connectivity loss and denial of service. The described impact is a network-based DoS;...

CVE-2008-6775

HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service CPU consumption, SMS consumption, and connectivity loss via a flood of vCards to UDP port 9204...

CVE-2008-6775: Undefined Security Weakness

HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service CPU consumption, SMS consumption, and connectivity loss via a flood of vCards to UDP port 9204...

FreeBSD : roundcube -- webmail script insertion and php code injection (35c0b572-125a-11de-a964-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in RoundCube Webmail, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to conduct script insertion attacks and compromise a vulnerable system. The HTML 'background' attribute within e.g...

DEBIAN-CVE-2009-0587

Multiple integer overflows in Evolution Data Server aka evolution-data-server before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in 1 addressbook/libebook/e-vcard.c in evc or 2 camel/camel-mime-utils.c in libcam...

CVE-2009-0587

Multiple integer overflows in Evolution Data Server aka evolution-data-server before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in 1 addressbook/libebook/e-vcard.c in evc or 2 camel/camel-mime-utils.c in libcam...

HTC Touch vCard over IP Denial of Service Exploit

No description provided by source. ! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without restrictio...

HTC Touch DoS

vCard files are accepted and imported without user intervation...

HTC Touch - vCard over IP Denial of Service

!/usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without restriction, including without limitation the...

HTC Touch vCard over IP Denial of Service PoC Code

Hello, PoC code for testing the MSL-2008-002 vulnerability HTC Touch vCard over IP Denial of Service is now available at: http://poc.mseclab.com/pocs/MSL-2008-002-PoC.py The code provide means for demonstrating the HTC Touch vCard over IP DoS by sending vCards to port UDP/9204 of the target IP...

HTC Touch vCard over IP Denial of Service Exploit

Exploit for hardware platform in category dos / poc ================================================= HTC Touch vCard over IP Denial of Service Exploit ================================================= ! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby...