CVE-2016-1918

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1917...

IBM InfoSphere Master Data Management Reference Data Management Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM is a suite of solutions from IBM in the U.S. used to help organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts.Reference Data Management RDM is one of the reference Data Management component. A...

Zinf 2.2.1 - Local Buffer Overflow Exploit

No description provided by source. / -------------------------------Advisory---------------------------------- Luigi Auriemma aluigiaaaattttttautisticiD000torg I don't know why this bug has not been tracked but moreover I don't completely know why it has not been fixed yet in the Windows version ...

Apache HTTPD mod_proxy_balancer Cross Site Scripting (CVE-2012-4558)

A cross site scripting vulnerability exists in Apache HTTP web server modproxybalancer. The vulnerability is due to a lack of input validation in the URI of the modproxybalancer manager interface. A remote attacker can exploit these vulnerabilities by enticing a user to follow a specially crafted...

PT-2012-3975 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 2.1.x through 2.1.5 Moodle versions 2.2.x through 2.2.2 Description: The issue allows remote authenticated users to bypass the moodle/site:readallmessages capability requirement and read arbitrary messages. This is achieved by...

Design/Logic Flaw

The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle instance, which might allow attackers to trick users into visiting arbitrary web sites via...

PYSEC-2011-14

Cross-site scripting XSS vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

comercioplus 5.6 - Multiple Vulnerabilities

comercioplus 5.6 - Multiple Vulnerabilities Exploit Title: Comerciosonline CMS SQLi Google Dork: allintext: " Servicio ofrecido por ComerciosOnLine " Date: 27/01/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software Link:...

HEAT Call Logging 8.01 SQL Injection

= ;otokoyama; = -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a variety of expansion options, so any enterprise can build a tailored solution." -=web=- http://www.frontrange.com/heat.aspx -=attack=- U:' OR HEATPass IS NOT...

CVE-2009-0182

Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line...

CVE-2007-6533

Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message...

RIM BlackBerry 8100 Wireless DoS

Resources exhaustion on activating long web link...

Symantec自动支持助手ActiveX控件缓冲区溢出漏洞

Symantec自动支持助手是很多Symantec产品中所捆绑的ActiveX控件，用于识别Symantec用户产品中的问题。 Symantec自动支持助手ActiveX控件没有正确地验证外部输入，可能导致栈溢出并以运行浏览器用户的权限执行任意指令。 成功的攻击要求攻击者能够伪装成为可信任的Web站点并诱骗用户点击恶意的链接。 Symantec Norton AntiVirus 2006 Symantec Norton AntiVirus 2005 Symantec Norton Internet Security 2006 Symantec Norton Internet Securi...

acroread -- buffer overflow vulnerability

An Adobe Security Advisory reports: A vulnerability within Adobe Reader has been identified. Under certain circumstances, remote exploitation of a buffer overflow in Adobe Reader could allow an attacker to execute arbitrary code. If exploited, it could allow the execution of arbitrary code under...

PT-2005-1401 · Infinite · Infinite Mobile Delivery Webmail

Name of the Vulnerable Software and Affected Versions: Infinite Mobile Delivery Webmail version 2.6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the URL. This could potentially lead to unauthorized actions on the web application...

Spaiz-Nuke/PHP-nuke multiple bugs

SQL injection during authentication, SQL injection in web-link module, SQL injection in download module, access with encrypted password...

PT-1997-1119 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer affected versions not specified Description: The issue allows for remote command execution in Microsoft Internet Explorer, utilizing .lnk and .url files. Recommendations: At the moment, there is no information abou...