RealNetworks RealPlayer RV30 Sample Arbitrary Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

Polycom Products Directory Traversal and Command Injection Vulnerabilities

Multiple Polycom products are prone to a directory-traversal vulnerability and a command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory- traversal sequences '../' to retrieve arbitrary file...

Call for Paper - DEF CON Rajasthan March 2012 Meet

Call for Paper - DEF CON Rajasthan March 2012 Meet DEF CON Rajasthan - March 2012 Jaipur Meet, Call For Papers is now officially Open and will close on March 10, 2012. DEF CON Rajasthan DC91141 is a DEF CON Registered group of people interested in exploring technology and it implications in...

Security feature bypass

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET...

VertrigoServ 'ext' Parameter Cross Site Scripting Vulnerability

This host is running VertrigoServ and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbvertrigoservextparamxssvuln.nasl 5792 2017-03-30 13:18:14Z cfi $ VertrigoServ 'ext' Parameter Cross Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2012...

Marinet CMS - gallery.php?id SQL Injection

Marinet CMS - gallery.php?id SQL Injection source: https://www.securityfocus.com/bid/51336/info Marinet CMS is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

Pligg CMS 1.1.2 - status SQL Injection

Pligg CMS 1.1.2 - status SQL Injection source: https://www.securityfocus.com/bid/51273/info Pligg CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

phpBB MyPage Plugin 'id' Parameter SQL Injection Vulnerability

This host is running phpBB MyPage plugin and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodphpbbmypagepluginsqlinjvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ phpBB MyPage Plugin 'id' Parameter SQL Injection Vulnerability Authors: Rachana Shetty Copyright: Copyrig...

osCSS2 '_ID' parameter Directory Traversal Vulnerability

This host is running osCSS2 and is to prone directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodoscssidparamdirtravvuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ osCSS2 'ID' parameter Directory Traversal Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

Digital Attic Foundation CMS - 'id' SQL Injection

source: https://www.securityfocus.com/bid/50735/info Digital Attic Foundation CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

PreProjects Pre Studio Business Cards Designer 'page.php' SQL Injection Vulnerability

Pre Studio Business Cards Designer is prone to an SQL-injection vulnerability because the application fails to properly sanitize user- supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit...

APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability

The host is running APC PowerChute Network Shutdown and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodapcpcnsappletxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability Authors:...

dotProject 'index.php' SQL Injection Vulnerability

The host is running dotProject and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddotprojectsqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ dotProject 'index.php' SQL Injection Vulnerability. Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

Card sharj 1.0 - Multiple SQL Injections

Card sharj 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/49677/info Card sharj is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allo...

WAVSEP 1.0.3 – Web Application Vulnerability Scanner Evaluation Project

WAVSEP 1.0.3 – Web Application Vulnerability Scanner Evaluation Project A vulnerable web application designed to help assessing the features, quality and accuracy of web application vulnerability scanners. This evaluation platform contains a collection of unique vulnerable web pages that can be...

MyAuth3 Gateway 'pass' Parameter SQL Injection Vulnerability

This host is running MyAuth3 Gateway and is prone SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbmyauth3gatewayblindsqlinjvuln.nasl 5793 2017-03-30 13:40:15Z cfi $ MyAuth3 Gateway 'pass' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbo...

20 Famous websites vulnerable to Cross Site Scripting (XSS) Attack

20 Famous websites vulnerable to Cross Site Scripting XSS Attack Most of the biggest and Famous sites are found to be Vulnerable to XSS attack . Cross-site scripting XSS is a type of computer security vulnerability typically found in web applications which allow code injection by malicious web...

S9Y Serendipity 1.5.1 - research_display.php SQL Injection

S9Y Serendipity 1.5.1 - researchdisplay.php SQL Injection source: https://www.securityfocus.com/bid/49395/info Serendipity is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Code Widgets DataBound Collapsible Menu - 'main.asp' SQL Injection

source: https://www.securityfocus.com/bid/49209/info Code Widgets DataBound Collapsible Menu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

AzeoTech DAQFactory Denial of Service Vulnerability

This host is installed with AzeoTech DAQFactory and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbazeotechdaqfactorydosvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ AzeoTech DAQFactory Denial of Service Vulnerability Authors: Madhuri D Copyright: Copyright c 2011...