99 matches found
WordPress AdPlugg Plugin <= 1.1.33 - Stored Cross Site Scripting
Because of this vulnerability, attackers can hijack other users session, take control of another administrator's browser or install malware on their computer. Solution Upgrade the plugin...
Online Ad Networks Leverages to Launch Javascript Attacks
LAS VEGAS – Researchers have figured out how to leverage the reach of online advertising networks to distribute javascript of their choosing, creating the equivalent of a botnet of ad impressions capable of crashing underlying webservers or distributing malware on a massive scale for pennies on t...
FW: =| Security Advisory - TP-LINK TL-WR841N XSS (Cross Site Scripting) |=
=| Security Advisory - TP-LINK TL-WR841N XSS Cross Site Scripting |= Issue: TL-WR841N 300Mbps Wireless N Router by "TP-LINK" Firmware Version: 3.13.9 Build 120201 Rel.54965n and Below Discovered Date: 17/11/2012 Author: Matan Azugi [email protected] Product Vendor:...
Microsoft .NET Framework / Silverlight类继承限制漏洞(MS11-078)
CVE ID: CVE-2011-1508 .NET Framework是用于Windows的新托管代码编程模型，用于构建具有视觉上引人注目的用户体验的应用程序，实现跨技术边界的无缝通信，并且能支持各种业务流程。Silverlight 是一种新的 Web 呈现技术，能在各种平台上运行。 Microsoft .NET Framework和Microsoft Silverlight在类继承的实现上存在安全漏洞，恶意用户可通过特制的网页利用此漏洞控制用户系统。要成功利用，需要浏览器可以运行XBAPs或Silverlight应用程序。 Microsoft .NET Framework 4.x...
Iskratel SI2000 Callisto 821+ - Cross-Site Request Forgery HTML Injection
Iskratel SI2000 Callisto 821+ - Cross-Site Request Forgery HTML Injection source: https://www.securityfocus.com/bid/48711/info The Iskratel SI2000 Callisto 821+ is prone to a cross-site request-forgery vulnerability and multiple HTML-injection vulnerabilities. An attacker can exploit the cross-si...
AContent 1.0 - Cross-Site Scripting / HTML Injection
source: https://www.securityfocus.com/bid/43238/info AContent is prone to multiple cross-site scripting vulnerabilities and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...
Rumba XML 2.4 - index.php Multiple HTML Injection Vulnerabilities
Rumba XML 2.4 - index.php Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/42914/info Rumba XML is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated...
ArtGK CMS - Cross-Site Scripting / HTML Injection
source: https://www.securityfocus.com/bid/42923/info ArtGK CMS is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...
PHPAuthent 0.2.1 - useradd.php Multiple HTML Injection Vulnerabilities
PHPAuthent 0.2.1 - useradd.php Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/38908/info phpAuthent is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HT...
Hijacking Opera's Native Page using malicious RSS payloads
Hijacking Opera's Native Page using malicious RSS payloads ---------------------------------------------------------------------------- --------- For complete post with images, please visit - http://securethoughts.com/2009/10/hijacking-operas-native-page-using-malicio us-rss-payloads/ Well, this...
IBM Tivoli Identity Manager 5.0.5 - User Profile HTML Injection
IBM Tivoli Identity Manager 5.0.5 - User Profile HTML Injection source: https://www.securityfocus.com/bid/36293/info IBM Tivoli Identity Manager is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically...
Many Sites Using Flash Cookies to Silently Track Users
A huge number of Web sites are employing a little-known tracking mechanism to gather information on visitors and are failing to disclose the practice in their privacy policies, according to a new paper from a group of university researchers. The technique employs cookies generated by the Adobe...
lt-thumb-overflow.txt
2007/05/19 ---------------------------------------------------------------------------------------------------- LeadTools Thumbnail Browser Control lttmb14E.ocx v. 14.5.0.44 Remote Stack-Based Buffer Overflow url: http://www.leadtools.com/ peice: eheheh, take a look at thier site : author: shinna...
LeadTools Thumbnail Browser Control - lttmb14E.ocx Remote Buffer Overflow
LeadTools Thumbnail Browser Control - lttmb14E.ocx Remote Buffer Overflow 2007/05/19 ---------------------------------------------------------------------------------------------------- LeadTools Thumbnail Browser Control lttmb14E.ocx v. 14.5.0.44 Remote Stack-Based Buffer Overflow url:...
LeadTools Thumbnail Browser Control (lttmb14E.ocx) Remote BoF Exploit
Exploit for unknown platform in category remote exploits ===================================================================== LeadTools Thumbnail Browser Control lttmb14E.ocx Remote BoF Exploit ===================================================================== 2007/05/19...
CVE-2007-1190
Unspecified vulnerability in the EmbeddedWB Web Browser ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Information disclosure
Unspecified vulnerability in the EmbeddedWB Web Browser ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
MS Windows Media Player Plugin Overflow Exploit (MS06-006)(3)
No description provided by source. !/usr/bin/perl wmp-profiteer.pl Exploiting 'Non-Critical' Media Player Vulnerabilities for Fun and Profit By Matthew Murphy [email protected] It's come to my attention that the HTML versions of the exploit posted on several sites have become mangled. Notables...
Microsoft Windows Media Player - Plugin Overflow (MS06-006) (3)
Microsoft Windows Media Player - Plugin Overflow MS06-006 3 !/usr/bin/perl wmp-profiteer.pl Exploiting 'Non-Critical' Media Player Vulnerabilities for Fun and Profit By Matthew Murphy [email protected] It's come to my attention that the HTML versions of the exploit posted on several sites have...