2384 matches found
PT-2014-5485 · D Link · D-Link Dap 1150
Name of the Vulnerable Software and Affected Versions: D-Link DAP 1150 version 1.2.94 Description: The issue allows remote attackers to hijack the authentication of administrators for various requests, including enabling or disabling the DMZ in the Firewall/DMZ section via a request to "index.cgi...
PT-2014-4538 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: The issue allows remote authenticated users to read files by sending a crafted URL to the HTTP server, potentially accessing sensitive information suc...
python-django: unexpected code execution using reverse()
The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a "dotted Python path."...
Redmine vulnerable to open redirect
Overview Redmine is a project management software. Redmine contains an open redirect vulnerability due to insufficient checking of the URL parameter. Minoru Sakai of SCSK Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...
libyaml: heap-based buffer overflow when parsing URLs
A heap based buffer overflow exists in the libyaml package such that an attacker by supplying a specially crafted yaml document when parsed by the application might result in remote code execution leading to complete compromise of the system...
CVE-2011-3344
A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting XSS vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions within the user's browser session...
大汉网络又来几处命令执行漏洞
简要描述： RT 详细说明： 存在漏洞的地址： http://demo.hanweb.com/jact/front/frontreg.action http://demo.hanweb.com/jact/front/frontmailstat.action http://demo.hanweb.com/jact/front/frontmailwrite.action 直接谷歌：site:hanweb.com filetype:action 一堆是... 证明： http://demo.hanweb.com/jact/1.txt 漏洞证明：...
Reserve Bank of Australia Hacked by Chinese malware
If hackers want to get into your computer network, they will find a way. You can make it harder but you can't stop them. According to Australian Financial Review report on Monday, the Reserve Bank of Australia RBA was hacked by hackers who infiltrated its networks and allegedly stole information...
DEBIAN-CVE-2011-4612
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc error.log via a crafted URL...
Millions of DSL modems hacked in Brazil, spread banking malware
More than 4.5 million DSL modems have been compromised as part of a sustained hacking campaign in Brazil, with the devices spreading malware and malicious web address redirects. According to the malware analyst at Kaspersky Lab in Brazil, Fabio Assolini. The vulnerability exploited by attackers...
Certain URL constructs can allow arbitrary code execution – Opera Security Advisories
Certain page address URL constructs can cause Opera to allocate the wrong amount of memory for storing the address. When it then attempts to store the address, it will overwrite unrelated memory with attacker-controlled data. This can lead to a crash, which may also execute that data as code...
CVE-2012-1465
Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of service application crash via a long URL in an HTTP request. NOTE: some of these details are obtained from third party information...
plone: A reflected cross site scripting vulnerability
Cross-site scripting XSS vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2011-5079
Open redirect vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."...
URL sanitization vulnerability
curl is vulnerable to a data injection attack for certain protocols through control characters embedded or percent-encoded in URLs. When parsing URLs, libcurl's parser is liberal and only parses as little as possible and lets as much as possible through as long as it can figure out what to do. In...
UBUNTU-CVE-2011-2845
Google Chrome before 15.0.874.102 does not properly handle history data, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors...
VulnCheck KEV: CVE-2007-4816
Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6 rawParse method; o...
DEBIAN-CVE-2011-2524
Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in a URI...
Signaling network of independently developed web site source code 0day vulnerabilities-vulnerability warning-the black bar safety net
Author: script kiddies This website source code Super cow. Anti-implantation to upload very difficult to break. Background system/login. asp is also Into the ewebeditor is also anti-password A lot of big cattle are very difficult to engage the under This source code after a social worker was...