Lucene search
+L

4079 matches found

Packet Storm
Packet Storm
•added 2011/08/16 12:00 a.m.•45 views

Code Widgets Web-based Alpha Tabbed Address Book SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 inj3ct0r 1337 Day Team 1 0 0...

0.7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2011/07/28 4:43 a.m.•14 views

THN Review : Ghost in the Wires - Kevin Mitnick

THN Review : Ghost in the Wires - Kevin Mitnick First of all Thanks to Mr. Kevin Mitnick for sending Review Copy of his latest book & Auto-Biography "Ghost in the Wires - My Adventures As The World's Most Wanted Hacker". I take about a week to read this amazing book and Finally The Hacker News...

6.4AI score
SaveExploits0
NVD
NVD
•added 2011/07/21 11:55 p.m.•31 views

CVE-2011-0217

Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields...

4.3CVSS5.6AI score0.00968EPSS
SaveExploits1References2
Prion
Prion
•added 2011/07/21 11:55 p.m.•22 views

Design/Logic Flaw

Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields...

4.3CVSS6.3AI score0.00968EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2011/07/21 11:00 p.m.•72 views

CVE-2011-0217

Apple Safari

4.3CVSS7.5AI score0.00968EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2011/07/21 11:00 p.m.•37 views

CVE-2011-0217

Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields...

7.7AI score0.00968EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/07/21 12:00 a.m.•5 views

CVE-2011-0217: Exposure of Sensitive Information to an Unauthorized Actor

Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields...

4.3CVSS6AI score0.00968EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2011/07/21 12:00 a.m.•5 views

PT-2011-2196

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.6 Description The issue allows remote attackers to obtain Address Book information via a crafted form. This occurs because Apple Safari provides AutoFill information to scripts that execute before HTML form...

4.3CVSS0.00968EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2011/07/05 12:00 a.m.•28 views

Cybozu Office Address Book and User List Cross-Site Scripting Vulnerabilities

This host is running Cybozu Office and is prone to cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcybozuofficexssvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Cybozu Office Address Book and User List Cross-Site Scripting Vulnerabilities Authors: Sooraj KS Copyright:...

4.3CVSS6.3AI score0.01263EPSS
SaveExploits0References3
NVD
NVD
•added 2011/06/29 5:55 p.m.•35 views

CVE-2011-1335

Cross-site scripting XSS vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."...

4.3CVSS5.6AI score0.01263EPSS
SaveExploits0References7
Prion
Prion
•added 2011/06/29 5:55 p.m.•33 views

Cross site scripting

Cross-site scripting XSS vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."...

4.3CVSS6.1AI score0.01263EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2011/06/29 5:00 p.m.•49 views

CVE-2011-1335

Cross-site scripting XSS vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."...

5.6AI score0.01263EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/06/29 12:00 a.m.•9 views

CVE-2011-1335: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."...

4.3CVSS6AI score0.01263EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2011/06/29 12:00 a.m.•6 views

PT-2011-3066

Name of the Vulnerable Software and Affected Versions Cybozu Office versions prior to 8.1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions." Recommendations For versions...

4.3CVSS0.01263EPSS
SaveExploits0References8
The Hacker News
The Hacker News
•added 2011/06/25 5:51 a.m.•10 views

TeaMp0isoN leak Former British PM Tony Blair Data

TeaMp0isoN leak Former British PM Tony Blair Data Twitter Become the best place for Hackers to Leak data now and the best part is that , Twitter will never block you for such actions. After Lulzsec, Anonymous .. now Pakistani Hackers Group "TeaMp0isoN" is back with some New leaks. Last time they...

6.8AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/06/24 10:23 a.m.•19 views

Cybozu Office vulnerable to cross-site scripting

Overview Cybozu Office contains a cross-site scripting vulnerability. Cybozu Office is a groupware. Cybozu Office contains a cross-site scripting vulnerability due to issues contained in the address book and user list functions. NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC...

4.3CVSS6AI score0.01263EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/06/24 12:00 a.m.•51 views

JVN#55508059: Cybozu Office vulnerable to cross-site scripting

Cybozu Office is a groupware. Cybozu Office contains a cross-site scripting vulnerability due to issues contained in the address book and user list functions. Impact An arbitrary script may be executed on the web browser of an user who is logged on. Solution Update the software Update to the late...

4.3CVSS5.8AI score0.01263EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2011/06/20 12:00 a.m.•25 views

Joomla Minitek FAQ Book 'id' Parameter SQL Injection Vulnerability

This host is running Joomla Minitek FAQ Book component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlaminiteksqlinjvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ Joomla Minitek FAQ Book 'id' Parameter SQL Injection Vulnerability Authors: Madhuri D Copyright:...

0.3AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2011/06/20 12:00 a.m.•17 views

Joomla Minitek FAQ Book < 1.4 SQLi Vulnerability - Active Check

Joomla Minitek FAQ Book component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.5AI score
SaveExploits0References3
exploitpack
exploitpack
•added 2011/06/13 12:00 a.m.•23 views

Joomla! Component Minitek FAQ Book 1.3 - id SQL Injection

Joomla! Component Minitek FAQ Book 1.3 - id SQL Injection source: https://www.securityfocus.com/bid/48223/info Joomla Minitek FAQ Book is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

0.1AI score
SaveExploits0
Rows per page
Query Builder