Facebook for iPhone - Persistent Cross-Site Scripting Denial of Service

Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App page: http://www.facebook.com/apps/application.php?id=6628568379...

PacketFence Network Access Controller Cross Site Scripting

Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Free and Open Source network access control NAC system...

oBlog - Persistent Cross-Site Scripting Cross-Site Request Forgery Admin Brute Force

oBlog - Persistent Cross-Site Scripting Cross-Site Request Forgery Admin Brute Force ------------------------------------------------------------------------------------------------- Application: oBlog Version: the only one there is : Download: http://www.dootzky.com/images/projects/oBlog.zip...

Changetrack Local Privilege Escalation Vulnerability

This host has Changetrack installed and is prone to Local Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodchangetrackprivescalationvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Changetrack Local Privilege Escalation Vulnerability Authors: Sharath S Copyright: Copyright c...

NetRisk Security Bypass Vulnerability

This host is installed with NetRisk and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbnetrisksecbypassvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ NetRisk Security Bypass Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Nokia MultiMedia Player 1.1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/36215/info Nokia Multimedia Player is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected application to stop responding, denying service to legitimate users. This issue affects Nokia Multimedia Play...

Nokia MultiMedia Player 1.1 - Remote Denial of Service

Nokia MultiMedia Player 1.1 - Remote Denial of Service source: https://www.securityfocus.com/bid/36215/info Nokia Multimedia Player is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected application to stop responding, denying service to...

Tukanas Classifieds 1.0 - index.php SQL Injection

Tukanas Classifieds 1.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/43337/info Tukanas Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Mozilla Firefox SOCKS5 Proxy Server DoS Vulnerability Aug-09 (Linux)

This host is installed with Mozilla Firefox and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxsocks5proxydosvulnaug09lin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox SOCKS5 Proxy Server DoS Vulnerability Aug-09 Linux Authors: Sharath S Copyright:...

Clipbucket 1.7.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/43383/info ClipBucket is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

CVE-2009-2157

Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via 1 the origmsg parameter to account-inbox.php; the categ parameter to 2 delreq.php and 3 admin-delreq.php; 4 the choice parameter to index.php; 5 the id...

Microsoft Active Directory LDAP Remote Code Execution Vulnerability (969805)

This host is missing a critical security update according to Microsoft Bulletin MS09-018. OpenVAS Vulnerability Test $Id: secpodms09-018.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Active Directory LDAP Remote Code Execution Vulnerability 969805 Authors: Nikita MR Updated to include Active...

MRCGIGUY Ultimate Profit Portal 1.0.1 - Insecure Cookie Handling

MRCGIGUY Ultimate Profit Portal 1.0.1 - Insecure Cookie Handling --------------------------------------------------------------- --------------------------------------------------------------- Ultimate Profit Portal Version 1.0.1 Insecure Cookie Handling Vulnerability...

Mozilla Firefox DoS Vulnerability May-09 (Linux)

The host is installed with Mozilla Firefox browser and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxdosvulnmay09lin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox DoS Vulnerability May-09 Linux Authors: Sharath S Copyright: Copyright c 2009...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

eLitius 1.0 (manage-admin.php) Add Admin/Change Password Exploit

Exploit for unknown platform in category web applications ================================================================ eLitius 1.0 manage-admin.php Add Admin/Change Password Exploit ================================================================ Powered by eLitius Version 1.0 Change Password...

Opera Web Browser Multiple Vulnerabilities (Linux)

The host is installed with Opera Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultvulnmar09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Web Browser Multiple Vulnerabilities Linux Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

RedHat Update for icu RHSA-2008:0090-01

Check for the Version of icu OpenVAS Vulnerability Test RedHat Update for icu RHSA-2008:0090-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RitsBlog 0.4.2 (Authentication Bypass) SQL Injection Vulnerability / XSS Persistent Vulnerability

Salvatore "drosophila" Fresta + Application: RitsBlog + Version: 0.4.2 + Website: http://sourceforge.net/projects/ritsblog/ + Bugs: A SQL Injection B XSS Persistent + Exploitation: Remote + Date: 02 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta +...

Wesnoth 1.x - PythonAI Remote Code Execution

Wesnoth 1.x - PythonAI Remote Code Execution source: https://www.securityfocus.com/bid/33971/info Wesnoth is prone to a remote code-execution vulnerability caused by a design error. Attackers can exploit this issue to execute arbitrary Python code in the context of the user running the vulnerable...