27 matches found
CVE-2026-45128
MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to change a victim administrator's default user list view by embedding a specially crafted URL. The Set as Default control named...
CVE-2026-45128 MyBB: ACP Users View Manager default CSRF
MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to change a victim administrator's default user list view by embedding a specially crafted URL. The Set as Default control named...
CVE-2026-45128
MyBB (open-source forum software) versions prior to 1.8.40 are affected by a CSRF vulnerability in the ACP Users View Manager module. The set_default control in Admin CP → Users & Groups → Users → View Manager processes state-changing actions on GET requests without request forgery protection, im...
EUVD-2026-61050
MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to change a victim administrator's default user list view by embedding a specially crafted URL. The Set as Default control named...
CVE-2026-45128 MyBB: ACP Users View Manager default CSRF
MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to change a victim administrator's default user list view by embedding a specially crafted URL. The Set as Default control named...
CVE-2026-45128: Cross-Site Request Forgery (CSRF)
MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to change a victim administrator's default user list view by embedding a specially crafted URL. The Set as Default control named...
PT-2026-77181
MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to change a victim administrator's default user list view by embedding a specially crafted URL. The Set as Default control named set...
EUVD-2007-2279
Malware in sbrugna...
VMSA-2012-0004 VMware View privilege escalation and cross-site scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2012-0004 Synopsis: VMware View privilege escalation and cross-site scripting Issue date: 2012-03-15 Updated on: 2012-03-15 initial...
CVE-2012-1511
Cross-site scripting XSS vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Cross-site scripting XSS vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2012-1511
Cross-site scripting XSS vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2012-1511
CVE-2012-1511 is a cross-site scripting (XSS) vulnerability in the View Manager Portal of VMware View (pre-4.6.1). The issue arises from insufficient input validation of URLs, enabling remote attackers to inject arbitrary script or HTML via a crafted URL. VMware’s Security Advisory VMSA-2012-0004...
CVE-2012-1511: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
VMware View远程跨站脚本漏洞
BUGTRAQ ID: 39949 CVECAN ID: CVE-2010-1143 VMware View是业界领先的桌面虚拟化解决方案。 VMware View所使用的View Manager组件没有正确地过滤用户提交参数便返回给了用户，如果诱骗用户跟随了恶意URL就会导致反射式跨站脚本攻击。 VMware View 3.1.x 厂商补丁： VMWare ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Firefox layout crashes with evidence of memory corruption
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the layout engin...
Firefox layout crashes with evidence of memory corruption
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the layout engin...
abcview-overflow.txt
/ ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is vulnerable to an unspecified buffer overflow when processing a crafted .TTF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in...