SAP BusinessObjects Business Intelligence Stored Cross-Site Scripting Vulnerability

SAP BusinessObjects Business Intelligence is a reporting and analytics business intelligence BI platform for enterprise users. A stored cross-site scripting vulnerability exists in SAP BusinessObjects Business Intelligence versions prior to 4.2. The vulnerability stems from the product's inabilit...

CVE-2018-20166

A file-upload vulnerability exists in Rukovoditel 2.3.1. index.php?module=configuration/save allows the user to upload a background image, and mishandles extension checking. It accepts uploads of PHP content if the first few characters match GIF data, and the filename ends in ".php" with mixed...

Rukovoditel Project Management CRM 2.3.1 Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Rukovoditel Project Management/CRM 2.3.1 - Authenticated Remote Code Execution', 'Description' = %q This module...

WordPress 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities

WordPress 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wordpress 3.3.1 Multiple CSRF Vulnerabilities Date : 19-03-20...

Google Chrome 10.0.648.205 Stack Overflow

!/usr/bin/ruby +Exploit Title: Google Chrome 10.0.648.205 Stack Overflow Vulnerability +Date: 17\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.google.com/chrome +Version: 10.0.648.205 +Teste On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A About: This is a bug of the Stack Overflow that...

Blue corporate web site management system English fan version V1. 0 vulnerability-vulnerability warning-the black bar safety net

Blue corporate web site management system English fan version V1. 0 vulnerability this program- - how to look like the w78 program Background image- - even the search word search out of Also the same - but the file names are different. - - Nothing- -ewebeditor 5.5 upload vulnerability form...

DEBIAN-CVE-2010-4183

Multiple cross-site scripting XSS vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted 1 background-image, 2 background, or 3 font-family Cascading Style Sheets CSS property, a different...

DEBIAN-CVE-2005-0686

Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background...

mlterm (multilignual termional emulator) integer overflow

Integer overflow on background image processing...

mlterm: Integer overflow vulnerability

Background mlterm is a multi-lingual terminal emulator. Description mlterm is vulnerable to an integer overflow that can be triggered by specifying a large image file as a background. This only effects users that have compiled mlterm with the 'gtk' USE flag, which enables gdk-pixbuf support. Impa...

aol4.0.DoS.txt

Date: Sat, 10 Oct 1998 19:31:59 PDT From: HIGH TIMES To: [email protected] ---------------------------------------------------------------------- The A-TEAM Presents... Date: 10/10/98 Advisory: 01 Author: JOHN BISSELL ---------------------------------------------------------------------- There...