7919 matches found
CVE-2007-0667
The redirect function in Form.pm for 1 LedgerSMB before 1.1.5 and 2 SQL-Ledger allows remote authenticated users to execute arbitrary code via redirects, related to callbacks, a different issue than CVE-2006-5872...
Apple multiple applications format string vulnerabilities
Format string vulnerabilities in multiple client applications...
BO-BLOG vulnerability to submit 1 sentence horse tool[html]-vulnerability warning-the black bar safety net
Belongs to type:Web Apps The following proceduresmethodsmay carry offensive,for security research and teaching purposes. At your own risk! Code ! DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" HTMLHEADTITLEThe Csript For The "? php eval$POSTcmd?& gt;" /TITLE META...
CVE-2006-6556: Undefined Security Weakness
The eyeHome function in apps/eyeHome.eyeapp/aplic.php in EyeOS before 0.9.3-3 allows remote attackers to upload and execute arbitrary code via dangerous file extensions that are not all lowercase, which bypasses a cleansing operation...
Web Apps- Rad Upload Version 3.02 Remote File Include Vulnerability
^ Rad Upload Version 3.02 Remote File Include Vulnerability ^ Source: http://www.radinks.com/downloads/raduploadlite.zip ^ Vulnerable C0de On Line 39 In upload.php : ifisset$savepath && $savepath!="" ^ EXploit http://victim/directory/upload.php?savepath=sh3ll? ^ Found3d By: Arham ^ Gr33tz To --...
CVE-2006-0704: Undefined Security Weakness
iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain sensitive information via a URL that calls a non-existent .aspx script in the integrator/apps directory, which results in an error message that displays the installation path, we...
PT-2005-5499 · Apache · Jakarta Tomcat +1
Name of the Vulnerable Software and Affected Versions: Jakarta Tomcat versions 5.5.6 and earlier Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the example web applications for Jakarta Tomcat. These vulnerabilities allow remote attackers to inject arbitrary w...
Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, mbsendmail message headers modification, etc...
GLSA-200507-22 : sandbox: Insecure temporary file handling
The remote host is affected by the vulnerability described in GLSA-200507-22 sandbox: Insecure temporary file handling The Gentoo Linux Security Audit Team discovered that the sandbox utility was vulnerable to multiple TOCTOU Time of Check, Time of Use file creation race conditions. Impact : Loca...
sandbox: Insecure temporary file handling
Background sandbox is a Gentoo Linux utility used by the Portage package management system. Description The Gentoo Linux Security Audit Team discovered that the sandbox utility was vulnerable to multiple TOCTOU Time of Check, Time of Use file creation race conditions. Impact Local users may be ab...
PT-2002-1697 · Pingtel · Pingtel Xpressa
Name of the Vulnerable Software and Affected Versions: Pingtel xpressa SIP-based voice-over-IP phone versions 1.2.5 through 1.2.7.4 Description: The issue allows remote attackers to install Trojan horse applications via DNS spoofing because the phone downloads applications from a web site but...
Update for Microsoft Office Web Apps (KB2510648)
Update for Microsoft Office Web Apps KB2510648...
Update for Microsoft Office Web Apps Server 2013 (KB2810007)
Update for Microsoft Office Web Apps Server 2013 KB2810007...
Update for Microsoft Office Web Apps Server 2013 (KB2956101)
Update for Microsoft Office Web Apps Server 2013 KB2956101...
Update for Microsoft Office Web Apps Server 2013 (KB2956101) farm-deployment
Update for Microsoft Office Web Apps Server 2013 KB2956101 farm-deployment...
Update for Microsoft Office Web Apps Server 2013 (KB2880990)
Update for Microsoft Office Web Apps Server 2013 KB2880990...
Update for Microsoft Office Web Apps Server 2013 (KB2760445)
Update for Microsoft Office Web Apps Server 2013 KB2760445...
Security Update for Microsoft Office Web Apps Server 2013 (KB5002149)
A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Office Web Apps Server 2013 (KB5002214) farm-deployment
A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...