Xerox WorkCentre 5665/5675/5687 Printers Web Interface Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Xerox WorkCentre 5665/5675/5687 Printers Web Interface Vulnerabilities ======================================================================...

RealNetworks RealPlayer ASM RuleBook BOF Vulnerability - Windows

RealPlayer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Chipmunk NewsLetter 2.0 - Multiple Cross-Site Scripting Vulnerabilities

Chipmunk NewsLetter 2.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/40024/info Chipmunk Newsletter is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may...

PT-2010-2124 · Typo3 · Typo3 Helpdesk (Mg Help) Extension

Name of the Vulnerable Software and Affected Versions: TYPO3 Helpdesk mg help extension version 1.1.6 and earlier Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations: For versions 1.1.6 and earlier, update to a version later than 1.1.6 to...

DEBIAN-CVE-2009-4498

The nodeprocesscommand function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request...

Sitecore Staging Module Authentication Bypass

SEC Consult Security Advisory ========================================================================== title: Authentication bypass and file manipulation in Sitecore Staging Module products: Sitecore Staging Module vulnerable version: Sitecore Staging Module = 5.4.0 rev.080625 fixed version:...

Monkey HTTP Daemon 0.9.3 - Denial of Service

Monkey HTTP Daemon 0.9.3 - Denial of Service Monkey HTTP Daemon is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Versions prior to Monkey HTTP Daemon 0.9.3 are vulnerable. !/usr/bin/env...

Flashlight Free Edition SQL Injection and Directory Traversal Vulnerability

The host is running Flashlight Free Edition and is prone to SQL Injection and Directory Traversal Vulnerability. OpenVAS Vulnerability Test $Id: gbflashlightsqlinjndirtravvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Flashlight Free Edition SQL Injection and Directory Traversal Vulnerability...

Polipo 1.0.4 - Remote Memory Corruption (PoC)

Polipo 1.0.4 - Remote Memory Corruption PoC !/usr/bin/perl estranged.pl AKA Polipo 1.0.4 Remote Memory Corruption 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 Hzzp loves you Polipo! No use reporting this issue to Ubuntu Security unless you feel lik...

Xfig and Transfig 3.2.5 - '.fig' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/37193/info Xfig and Transfig are prone to a buffer-overflow vulnerability because they fail to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed...

Joomla! MojoBlog Remote File Inclusion

Joomla Component MojoBlog Multiple Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : November 20, 2009 Software Information + Vendor : http://www.joomlify.com/ + Download : http://www.joomlify.com/files/mojoblog/ + version :...

WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting Authentication Bypass Vulnerabilities (2)

WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting Authentication Bypass Vulnerabilities 2 source: https://www.securityfocus.com/bid/37099/info The FireStats plugin for WordPress is prone to multiple cross-site scripting vulnerabilities and an authentication-bypass vulnerability. An...

Novell eDirectory DoS Vulnerability (Nov 2009)

Novell eDirectory is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wowd Search Client 1.3.0 XSS

Exploit for unknown platform in category web applications ============================ Wowd Search Client 1.3.0 XSS ============================ Wowd search client multiple variable xss Vendor URL: http://www.wowd.com/ Vendor notify:yes exploit available:yes What is Wowd? Wowd is a real-time sear...

Zainu 1.0 - 'searchSongKeyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36701/info Zainu is prone to a cross-site scripting vulnerability in the Contact module because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Sympa 'sympa.pl' Insecure Temporary File Creation Vulnerability

Sympa creates temporary files in an insecure manner. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sympa:sympa"; if description...

PHP Live! 'deptid' Parameter SQL Injection Vulnerability

PHP Live! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Palm WebOS 1.01.1 - Email Arbitrary Script Injection

Palm WebOS 1.01.1 - Email Arbitrary Script Injection source: https://www.securityfocus.com/bid/36592/info Palm WebOS is prone to an arbitrary-script-injection vulnerability because the integrated email application fails to properly sanitize user-supplied input. An attacker can exploit this issue ...

PT-2009-5775 · Pc Security +1 · Pc Security +1

Name of the Vulnerable Software and Affected Versions: TrustPort Antivirus versions prior to 2.8.0.2266 PC Security versions prior to 2.0.0.1291 Description: The issue allows local users to gain privileges by replacing executables with Trojan horse programs due to weak permissions Everyone: Full...

Adobe Flash Patch Guidance Working, Kinda

Mozilla’s move to nudge Firefox users into updating the browser’s Flash Player plug-in has been a phenomenal success with about 10 million users clicking through to the Web page with Adobe’s patch. Mozilla released some brief statistics to track the success of its new program, which serves up a...