BlogHoster v2.2 Post Comment Html Injection

HeLiOsZ - Dark End Team - Internet Security Team BlogHoster v2.2 Post Comment Html Injection IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.blogsplosion.com Exploit: - To exploit this issue you must put your...

CivicSpace Version 0.8.5 HTML injection

HeLiOsZ - Dark End Team - Internet Security Team CivicSpace Version 0.8.5 HTML injection IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: www.civicspacelabs.org Exploit: - To exploit this issue you must only put your...

Archangel Weblog 0.90.02 and prior Multiple HTML injections

HeLiOsZ - Dark End Team - Internet Security Team Archangel Weblog 0.90.02 and prior Multiple HTML injections IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.archangelmgt.com/ Exploit: - To exploit this issue yo...

blur6ex 0.3 Comment title HTML inyection vuln.

HeLiOsZ - Dark End Team - Internet Security Team blur6ex 0.3 Comment title HTML inyection vuln. IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.blursoft.com Exploit: - To exploit this vuln you simply need an...

simplog 0.9.3 and prior XSS

HeLiOsZ - Dark End Team - Internet Security Team simplog 0.9.3 and prior XSS IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.simplog.org/ Exploit: - The vuln is in the search section,it don't validate the imput...

CVE-2005-2530

CVE-2005-2530 is an unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X that allows an untrusted applet to gain privileges via Mac OS X specific extensions. Affected component: Java for Mac OS X 1.3.1 (and possibly 1.4.2 per Nessus plugin reference). Impact: elevated privile...

CVE-2005-2530

Unspecified vulnerability in Java 1.3.1 before 1.3.116 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions."...

PT-2006-4420 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 7.0 Beta Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a web page containing multiple empty APPLET start tags. A third party has dispute...

Multiple OpenOffice security vulnerabilities

BASIC macro auto launch without user intercation, Java applet sandbox protection bypass, XML parsing buffer overflow...

Sun Java Applet - Font.createFont Remote Denial of Service

source: https://www.securityfocus.com/bid/17981/info Sun Java is prone to a remote denial-of-service vulnerability because the application fails to properly handle certain Java applets. Successfully exploiting this issue will cause the application to create a temporary file that will grow in an...

Sun Java Applet - Font.createFont Remote Denial of Service

Sun Java Applet - Font.createFont Remote Denial of Service source: https://www.securityfocus.com/bid/17981/info Sun Java is prone to a remote denial-of-service vulnerability because the application fails to properly handle certain Java applets. Successfully exploiting this issue will cause the...

JDK java applet disk space DoS

It's possible to consume all available disk space with temporary file...

GLSA-200602-07 : Sun JDK/JRE: Applet privilege escalation

The remote host is affected by the vulnerability described in GLSA-200602-07 Sun JDK/JRE: Applet privilege escalation Applets executed using JRE or JDK can use 'reflection' APIs functions to elevate its privileges beyond the sandbox restrictions. Adam Gowdiak discovered five vulnerabilities that...

Sun Java Reflection API security bypass vulnerabilities

Overview Multiple vulnerabilities in the Sun Java Reflection API may allow an untrusted Java applet to bypass security restrictions and execute arbitrary code. Description The Sun Java Reflection API allows Java classes to determine information about other Java classes, such as public methods...

GLSA-200601-10 : Sun and Blackdown Java: Applet privilege escalation

The remote host is affected by the vulnerability described in GLSA-200601-10 Sun and Blackdown Java: Applet privilege escalation Adam Gowdiak discovered multiple vulnerabilities in the Java Runtime Environment's Reflection APIs that may allow untrusted applets to elevate privileges. Impact : A...

CVE-2005-4866

Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminato...

CVE-2005-2530

Unspecified vulnerability in Java 1.3.1 before 1.3.116 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions."...

CVE-2005-4197

tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is executed with extra privileges in a cryptographically signed Java Applet...

JVN#15972537 Fujitsu Java Runtime Environment reflection API vulnerability

Impact If a user downloads and executes a specially crafted applet, a remote attacker could access local files with the elevated privileges or execute arbitrary code with the privilege of the user running the applet. Solution Products Affected For more information, refer to the vendor's website...

Sun Java Runtime Environment "reflection" API privilege elevation vulnerabilities

Overview Multiple vulnerabilities in the Sun Java Reflection API may allow an untrusted Java applet to bypass security restrictions and execute arbitrary code. Description The Sun Java Reflection API allows Java classes to determine information about other Java classes, such as public methods...