Design/Logic Flaw

The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the 1 Privileged Context and 2 Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and...

CMScontrol 7.x (index.php id_menu) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== CMScontrol 7.x index.php idmenu SQL Injection Vulnerability ==============================================================...

CMScontrol (Content Management Portal Solutions) Sql Injection

No description provided by source. =Info======================================================================= Software: CMScontrol Content Management Portal Solutions Sql Injection Version: 7. Vulnerability: Remote Sql Injection Google Dork: "index.php?idmenu=" CMScontrol Off. site:...

Microsoft Internet Explorer 'findText()' Unicode Parsing DoS Vulnerability

This host has Internet Explorer installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmsiefindtextdosvulnaug09.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer 'findText' Unicode Parsing DoS Vulnerability Authors: Sharath S Copyright:...

Microsoft Internet Explorer 'findText()' Unicode Parsing DoS Vulnerability

Internet Explorer is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Internet Explorer Buffer Overflow Vulnerability (Jul 2009)

Internet Explorer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell Groupwise Cross Site Scripting

Novell GroupWise Web Access Multiple XSS /============================================\ / SecureState R&D Team - leroy and sasquatch \ / Discovered: 11-24-08, 03-05-09 \ \ Vendor Notified: 01-06-09, 03-05-09 / \ Vendor Publication: 05-21-09 / ============================================/...

Microsoft Internet Explorer Denial of Service Vulnerability (Apr 2009)

Internet Explorer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hot Project v7 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -------------------------AllaH AkbaR------------------------------- Hot Project - Version 7 Auth Bypass Remote Sql Injecion --------------------------------------------------------------------------- Discovered By: HCOCAMAN ALGERIAN HaCkEr Mail: [email protected]...

Hot Project 7.0 - Authentication Bypass

Hot Project 7.0 - Authentication Bypass -------------------------AllaH AkbaR------------------------------- Hot Project - Version 7 Auth Bypass Remote Sql Injecion --------------------------------------------------------------------------- Discovered By: HCOCAMAN ALGERIAN HaCkEr Mail:...

PHP infoBoard 7 - Plus Insecure Cookie Handling

PHP infoBoard 7 - Plus Insecure Cookie Handling + PHP infoBoard V.7 Plus Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "infouser=1; path=/"; document.cookie = "infopass=1; path=/"; milw0rm.com 2008-09-25...

s21sec-42-en.txt

S21Sec Advisory - Title: Cezanne SW Cross-Site Scripting login required ID: S21SEC-042-en Severity: Medium History: 02.Jan.2008 Vulnerability discovered Authors: Juan de la Fuente Costa [email protected] Fco Javier Puerta Rubio [email protected] URL:...

Cezanne 6.5.17 - home.asp?CFTARGET Cross-Site Scripting

Cezanne 6.5.17 - home.asp?CFTARGET Cross-Site Scripting source: https://www.securityfocus.com/bid/28772/info Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Authenticated attackers may leverage these issues to...

PHP-Nuke < 8.0 (sid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================= PHP-Nuke version Tested on 7.9 & 6.0 '; if $argc table prefix\n"; print "ex.: " . $argv0 . " phpnuke.org 7\n"; credits; exit; / few definitions / if empty$argv3 $prefix = 'nuke'; define...

CVE-2007-4760

The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...

DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy

I have details about the DOS issue on my blog with links to the Astaro forums. http://www.hescominsoon.com/archives/773 Version affected: ALL Version 7 systems. This is easily reproducible. Just setup a BT client behind the astaro and do not setup a packetfilter and NAT rule for the BT traffic...

Microsoft Internet Explorer 7 - HTML Denial of Service

Microsoft Internet Explorer 7 - HTML Denial of Service source: https://www.securityfocus.com/bid/23178/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. This issue is triggered when an attacker entices a...

Microsoft Internet Explorer 7 - HTML Denial of Service

source: https://www.securityfocus.com/bid/23178/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. This issue is triggered when an attacker entices a victim user to visit a malicious website. Remote...

Microsoft Internet Explorer 6.07.0 - RemoveChild Denial of Service

Microsoft Internet Explorer 6.07.0 - RemoveChild Denial of Service source: https://www.securityfocus.com/bid/20812/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs when Internet Explorer attempts to execute certain JavaScript code. Successfully...

PHPNuke 7.* Version Downloads Module SQL Injection Exp.

PHPNuke 7. Version Downloads Module SQL Injection Exp. Credit : WiLdBoY Exp. Link : http://root-security.t35.com/PHPNuke-Downloads.pl -- Check out the latest SMS services @ http://www.linuxmail.org This allows you to send and receive SMS through your mailbox. Powered by Outblaze...