CVE-2013-3922

Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in a GET request...

CVE-2013-3922

The CVE-2013-3922 entry relates to Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier, vulnerable to a directory traversal via an encoded ..%2f (dot dot slash) in a GET request, allowing remote attackers to read arbitrary files. Connected sources corroborate the same description across ...

CVE-2013-3922: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in a GET request...

Brother Bear SQL Injection

---------------------------------------------------------------- Brother Bear SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : Brother Bear SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software...

WHOISCART (Auth Bypass) Information Disclosure Vulnerability

No description provided by source. +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ ...

Unfixed XSS vulnerability at www.bigbearmountainresorts.com

Security researcher mckt, has submitted on 08/07/2008 a cross-site-scripting XSS vulnerability affecting www.bigbearmountainresorts.com, which at the time of submission ranked 603191 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. I...

CVE-2008-2507

Cross-site scripting XSS vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the CalendarName parameter in a ShowIt action...

CVE-2008-2507

CVE-2008-2507 concerns a cross-site scripting (XSS) vulnerability in Brown Bear Software Calcium 3.10 and 4.0.4 (Calcium40.pl). The issue arises in the ShowIt action where user-supplied input in the CalendarName parameter can be manipulated to inject arbitrary web script or HTML. The available do...

Calcium web calendar: Reflected XSS

Vendor: Brown Bear Software Vendor web page: http://brownbearsw.com/ Product: Calcium web calendar Product web page: http://brownbearsw.com/calcium/WhatIsIt.html Vendor's Product Description: Calcium is a Web Calendar application. It will run on nearly any machine with a web server that can run...

brownbear-xss.txt

Vendor: Brown Bear Software Vendor web page: http://brownbearsw.com/ Product: Calcium web calendar Product web page: http://brownbearsw.com/calcium/WhatIsIt.html Vendor's Product Description: Calcium is a Web Calendar application. It will run on nearly any machine with a web server that can run...

Unfixed XSS vulnerability at search.bigbearlake.bbv.mlxchange.com

Security researcher Norehem, has submitted on 10/08/2007 a cross-site-scripting XSS vulnerability affecting search.bigbearlake.bbv.mlxchange.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/200...

Old-fashioned fruit machines to dig division techniques-vulnerability warning-the black bar safety net

The first pressure pounds, no matter front there is no people lose money BAR binary 3 7 watermelon bells papaya orange Apple Pressure note amount: 0 0 0 0 2 1 2 8 This pressure of the object is the washing machine, make it into a certain mode, the beginning of such pressure, will not lose many...

CVE-2006-0924

Affected product : Brown Bear iCal 3.10. Vulnerability : Cross-site scripting (XSS) via the Calendar Text field when adding a new event. Impact : remote attackers can inject arbitrary web script or HTML. Root cause : insufficient sanitization/input handling in the Calendar Text field. Exploitatio...

CVE-2006-0924: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script or HTML via the Calendar Text field when a new event is added. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)

Exploit for unknown platform in category dos / poc ====================================================================== MS Windows Metafile mtNoObjects Denial of Service Exploit MS05-053 ====================================================================== / Author: Winny Thomas Pune, INDIA Th...