[DSECRG-09-022] Adobe Coldfusion 8 Multiple Linked XSS Vulnerabilies

http://www.dsecrg.com/pages/vul/show.php?id=122 Digital Security Research Group DSecRG Advisory DSECRG-09-022 Application: Adobe Coldfusion 8 Versions Affected: Adobe Coldfusion 8 Vendor URL: http://adobe.com Bugs: Multiple Linked XSS,XSRF Exploits: YES Reported: 12.01.2009 Vendor response:...

Cross-Site Scripting vulnerability in extension Modern Guestbook / Commenting System (ve_guestbook)

It has been discovered that the extension Modern Guestbook / Commenting system veguestbook is vulnerable to Cross-Site Scripting. Release Date: June 16, 2009 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.7.1 and...

SAP Netweaver wsnavigator — XSS Security Vulnerability

Application: SAP Netweaver Versions Affected: Version 6.4-7.0 Vendor URL: Bugs: XSS Exploits: YES Reported: 26.05.2009 Vendor response: 27.05.2009 Date of Public Advisory: 13.07.2010 Author: Alexander Polyakov Description SAP Netweaver system has linked XSS security vulnerability in wsnavigator...

Digital Security Research Group [DSecRG] Advisory #DSECRG-09-001

Digital Security Research Group DSecRG Advisory DSECRG-09-001 Application: Oracle Application Server SOA Versions Affected: Oracle Application Server SOA version 10.1.3.1.0 Vendor URL: http://www.oracle.com Bugs: XSS Exploits: YES Reported: 10.01.2008 Vendor response: 11.01.2008 Date of Public...

Oracle Application Server Cross Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-001 Application: Oracle Application Server SOA Versions Affected: Oracle Application Server SOA version 10.1.3.1.0 Vendor URL: http://www.oracle.com Bugs: XSS Exploits: YES Reported: 10.01.2008 Vendor response: 11.01.2008 Date of Public...

Alexander Sotirov the inverse out of the MS08-0 6 7 the problem a function of the pseudo-code-vulnerability warning-the black bar safety net

Author: tombkeeper This Biu vulnerability assigned to a small four. Small four said, Do not worry, someone will refer to this famous, and can be slightly and so on. Sure enough, lunch came up, someone put PoC out. Yesterday evening, the“Father of China PT”and asked if I wanted to write ms08-0 6 7...

[Full-disclosure] Oracle - SQL Injection in package SDO_UTIL [DB05]

Oracle - SQL Injection in package SDOUTIL DB05 Systems Affected 10g Rel. 1, 10g Rel. 2 Severity High Risk Category SQL Injection Vendor URL http://www.oracle.com/ Author Alexander Kornbrust Advisory 16 April 2008 V 1.00 Advisory URL...

Mozilla Foundation Security Advisory 2008-17

Mozilla Foundation Security Advisory 2008-17 Title: Privacy issue with SSL Client Authentication Impact: Low Announced: March 25, 2008 Reporter: Peter Brodersen and Alexander Klink Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.13 SeaMonkey 1.1.9 Description Peter Brodersen and Alexander...

Oracle Security: SQL Injection in package DBMS_PRVTAQIS

SQL Injection in package DBMSPRVTAQIS This advisory http://www.red-database-security.com/advisory/oraclesqlinjectiondbmsprvtaqis.html Name SQL Injection in package DBMSPRVTAQIS DB02 Systems Oracle 9i Rel.1 - 10g Rel. 1 Severity High Risk Category SQL Injection Author Alexander Kornbrust ak at...

Microsoft Windows - Animated Cursor .ani Universal Generator

Microsoft Windows - Animated Cursor .ani Universal Generator -------------------------------------------------------------------------------- Info: .ANI RIFF Cursors 2007 universal exploit generator Tested on MS Internet Explorer 6.x-7.x, Windows XP SP2, Windows Vista Author: Yag Kohha 10xnGr33tz...

dproxy.pm.txt

MetaSploit exploit for remote buffer overflow issue in dproxy Written in 2007 by Alexander Klink c 2007 Cynops GmbH released under the same license as MSF Artistic, GPL dual-licensed $Revision: 1.1 $ package Msf::Exploit::dproxy; use strict; use base 'Msf::Exploit'; use Msf::Socket::Udp; use...

dproxy 0.5 - Remote Buffer Overflow (Metasploit)

MetaSploit exploit for remote buffer overflow issue in dproxy Written in 2007 by Alexander Klink c 2007 Cynops GmbH released under the same license as MSF Artistic, GPL dual-licensed $Revision: 1.1 $ package Msf::Exploit::dproxy; use strict; use base 'Msf::Exploit'; use Msf::Socket::Udp; use...

dproxy 0.5 - Remote Buffer Overflow (Metasploit)

dproxy 0.5 - Remote Buffer Overflow Metasploit MetaSploit exploit for remote buffer overflow issue in dproxy Written in 2007 by Alexander Klink c 2007 Cynops GmbH released under the same license as MSF Artistic, GPL dual-licensed $Revision: 1.1 $ package Msf::Exploit::dproxy; use strict; use base...

Modify Data via Inline Views

Name Modify Data via Inline Views 8107967 DB09 Systems Affected Oracle 9i - 10g Rel. 2 Severity High Risk Category Unauthorized Access Vendor URL http://www.oracle.com/ Author Alexander Kornbrust ak at red-database-security.com Advisory 18 October 2006 V 1.00 Advisory...

CVE-2006-4103

PHP remote file inclusion vulnerability in article-raw.php in Jason Alexander phNNTP 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the filenewsportal parameter...

CVE-2006-4103

CVE-2006-4103 describes a PHP remote file inclusion in Jason Alexander’s phNNTP up to version 1.3, where the parameter file_newsportal accepts a URL leading to arbitrary PHP code execution via article-raw.php. The underlying issue is improper inclusion of user-controlled URLs, allowing an attacke...

BXCP <= 0.2.9.9 (tid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== BXCP = 0.2.9.9 tid Remote SQL Injection Exploit ================================================== ? errorreportingEERROR; function xssinit if !extensionloaded'phpcurl' if !dl'curl.so' and...

webSPELL 4.01 - 'title_op' SQL Injection

x128.net oo website : www.x128.net"; function xssexploit $xsstarget = $SERVER'argv'1 . "/index.php"; $xsshttpget = "?site=search&action=search";...

crypt_blowfish 1.0

Hi, This is to announce the first mature version of cryptblowfish and the minor security fix that this version adds. cryptblowfish is a public domain implementation of a modern password hashing algorithm based on the Blowfish block cipher, provided via the crypt3 and a reentrant interface. It is...

GLSA-200509-04 : phpLDAPadmin: Authentication bypass

The remote host is affected by the vulnerability described in GLSA-200509-04 phpLDAPadmin: Authentication bypass Alexander Gerasiov discovered a flaw in login.php preventing the application from validating whether anonymous bind has been disabled in the target LDAP server configuration. Impact :...