CVE-2009-1840

Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web...

AdPeeps 8.5d1 XSS and HTML Injection Vulnerabilities

Exploit for unknown platform in category web applications ==================================================== AdPeeps 8.5d1 XSS and HTML Injection Vulnerabilities ==================================================== AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected:...

Path traversal

The aspathprepend function in rdeattr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers to cause a denial of service application crash via an Autonomous System AS advertisement containing a long AS path...

CVE-2009-0780

The CVE-2009-0780 entry concerns OpenBSD’s bgpd (versions 4.3 and 4.4). The aspath_prepend function in rde_attr.c is exposed to remote attackers who can trigger a denial of service (application crash) by sending an Autonomous System path that is overly long. The connected sources (NVD entry with ...

SA-CONTRIB-2009-007 - Advertisement Cross-site scripting

The Advertisement module displays and tracks advertisements on Drupal websites. Unsanitized text is displayed in several places, allowing users with "administer advertisements" permissions to execute arbitrary code. Users with "administer advertisements" permissions have the ability to configure...

phpads 2.0 - Multiple Vulnerabilities

phpads 2.0 - Multiple Vulnerabilities Vendor: http://blondish.net Versions: PHPAds 2.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=8 ---- First, we need to acquire administrative access. We point our browser...

phpads 2.0 - Multiple Vulnerabilities

Vendor: http://blondish.net Versions: PHPAds 2.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=8 ---- First, we need to acquire administrative access. We point our browser at...

PHPAds 2.0 Multiple Remote Vulnerabilities

No description provided by source. Vendor: http://blondish.net Versions: PHPAds 2.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=8 ---- First, we need to acquire administrative access. We point our browser at...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 Category name field under Advertisement Packages, the 2 Reason field under Credit/Debit Users, and the 3 FAQ question an...

CVE-2008-3782

Multiple cross-site scripting XSS vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 Category name field under Advertisement Packages, the 2 Reason field under Credit/Debit Users, and the 3 FAQ question an...

PT-2006-6838 · Enthrallweb · Enthrallweb Eclassifieds

Name of the Vulnerable Software and Affected Versions: Enthrallweb eClassifieds affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in several parameters, including AD ID, cat id,...

Cisco IOS VTP VLAN Buffer Overflow Vulnerability

Cisco IOS contains a vulnerability that could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability exists due to improper input validation by the VTP feature of Cisco IOS. An authenticated, remote attacker could exploit this vulnerability by submitting a malicious...

Free Community Detection

Free Community is installed on the remote host. This is an adware program that monitors web traffic, and replaces banner advertisements with advertisements of its choosing. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12014; scriptversion"1.15";...

ADManager 1.1 - Content Manipulation

ADManager 1.1 - Content Manipulation source: https://www.securityfocus.com/bid/4615/info Admanager is banner advertisement management software. It is written in PHP and will run on most Unix and Linux variants, in addition to Microsoft Windows operating systems. Access to the 'add.php3' script do...

ADManager 1.1 - Content Manipulation

source: https://www.securityfocus.com/bid/4615/info Admanager is banner advertisement management software. It is written in PHP and will run on most Unix and Linux variants, in addition to Microsoft Windows operating systems. Access to the 'add.php3' script does not require authentication. It is...

CVE-2000-0568

Sybergen Secure Desktop 2.1 is affected by CVE-2000-0568 due to improper protection against ICMP Type 9 false router advertisements, allowing remote attackers to modify default routes. The available sources document the product and impact but do not provide specific exploit code, affected version...

Buffer overflows in Skyline/SpinBox client

There are some buffer overflows in SpinBox/1.1 from the spinserver.conf. SpinBox is an SSI/cgi-tool used by advertisement companies, made by Skyline. Since this is closed source software, I can't post the sources. The buffer overflows are mostly in the query string strcat and strcpy instead of...