Design/Logic Flaw

MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a 1 CPRIGHTSOURCE or 2 bdclientInventive cookie to the default URI under inventivex/managetraining/, related to an "XML injection" issue...

Adobe ColdFusion - Directory Traversal

$Id: coldfusiontraversal.rb 11986 2011-03-16 10:15:54Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

SmarterMail 7.3 and 7.4 Multiple Vulnerabilities

Exploit for php platform in category web applications Vendor: SmarterTools Application: SmarterMail 7.x Bugs: Stored XSS, Reflected XSS, Directory Traversal, File Upload Parameters, OS Execution, XML Injection, LDAP Injection, DoS Patch: The Vendor has released SmarterMail Version 8 at URI...

SmarterMail 7.3/7.4 - Multiple Vulnerabilities

Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: October 28, 2010 Vendor: SmarterTools Application: SmarterMail 7.x Bugs: Stored XSS, Reflected XSS, Directory Traversal, File Upload Parameters, OS Execution, XML Injection, LDAP Injection, DoS Patch: The Vendor has...

F-Secure Policy Manager 'WebReporting' Module XSS And Path Disclosure Vulnerabilities

F-Secure Policy Manager is prone to cross-site scripting XSS and path disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Triologic Media Player 8 - '.m3u' Universal Unicode Local Buffer Overflow (SEH)

Exploit Title: Triologic Media Player 8 .m3u Local Universal Unicode Buffer Overflow SEH Date: August 17, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Software Link: http://download.cnet.com/Triologic-Media-Player/3000-21394-10691520.html Version: 8 Tested on: Windows XP SP3 En...

Business Classified Listing - SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Business Classified Listing SQl Vulnerable Vendor url:http://www.webvolume.co.uk Version:8 Price:n/a Published: 2010-06-15 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW members. Spl Greetz...

Adobe Acrobat and Reader PDF Handling Code Execution Vulnerability - Windows

Adobe Reader/Acrobat is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Internet Explorer Remote Code Execution Vulnerability (979352)

The host is installed with Internet Explorer and is prone to Remote Code Execution vulnerability. This NVT has been replaced by NVT secpodms10-002.nasl OID:1.3.6.1.4.1.25623.1.0.901097. OpenVAS Vulnerability Test $Id: gbmsiedepremotecodeexecvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft...

Design/Logic Flaw

The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the 1 Privileged Context and 2 Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and...

IBM DB2 Multiple Vulnerabilities - Oct09 (Linux)

The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2multvulnlinoct09.nasl 7113 2017-09-13 06:03:30Z cfischer $ IBM DB2 Multiple Vulnerabilities - Oct09 Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Microsoft Internet Explorer 'li' Element DoS Vulnerability (Sep 2009)

Internet Explorer is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Netscape 'select()' Object Denial Of Service Vulnerability (Windows)

This host is installed with Netscape browser and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodnetscapeselectobjdosvulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ Netscape 'selecti' Object Denial Of Service Vulnerability Windows Authors: Sharath S Copyright:...

Microsoft Internet Explorer Buffer Overflow Vulnerability (Jul 2009)

Internet Explorer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM DB2 Multiple Vulnerabilities (Windows)

The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2multdosvulnwin02.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Multiple DOS Vulnerabilities Windows Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

IBM DB2 Multiple Vulnerabilities (Linux)

The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2multdosvulnlin01.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Multiple Vulnerabilities Linux Authors: Antu Sanadi Updated KB Name Antu Sanadi on 2009-12-21 Copyright:...

Novell Groupwise Cross Site Scripting

Novell GroupWise Web Access Multiple XSS /============================================\ / SecureState R&D Team - leroy and sasquatch \ / Discovered: 11-24-08, 03-05-09 \ \ Vendor Notified: 01-06-09, 03-05-09 / \ Vendor Publication: 05-21-09 / ============================================/...

Microsoft Internet Explorer Denial of Service Vulnerability (Apr 2009)

Internet Explorer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[Full-disclosure] [IVIZ-09-001] Adobe Acrobat Reader Memory Corruption Vulnerability

------------------------------------------------------------------------------------------ iViZ Security Advisory 09-001 25/03/2009 ------------------------------------------------------------------------------------------ iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...

ewebquiz-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ وما أوتيتم من العلم الا قليلا -------------------------------صدق الله العظيم------------------------------- Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: eWebquiz v ...