Multiple Web Browser Vulnerabilities in Nokia Symbian OS 3rd Edition

Exploit for unknown platform in category dos / poc ==================================================================== Multiple Web Browser Vulnerabilities in Nokia Symbian OS 3rd Edition ==================================================================== My name is Nishant Das Patnaik, an...

Apple Safari 4.0.4 / Firefox 3.5.7 / SeaMonkey 2.0.1 - Remote Denial of Service

function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...

ShopEx Single 4.5.1 - errinfo Cross-Site Scripting

ShopEx Single 4.5.1 - errinfo Cross-Site Scripting source: https://www.securityfocus.com/bid/39941/info ShopEx Single is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code...

The Web Won't Be Safe, Let Alone Secure, Unless We Break It

There are several security issues affecting all major Web browsers that have remained unaddressed for years probably because the bad guys haven’t leveraged them aggressively enough, but the potential is there. The problem is that the only known ways to fix these issues adequately is to “break the...

Discuz! 6.0 - 'tid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37982/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

SAP NetWeaver ExchangeProfile — XSS

Application: SAP NetWeaver Versions Affected:SAP NetWeaver SLD ExchangeProfile application 6.40-7.30 Vendor URL: Bugs: XSS Exploits: YES Reported: 25.01.2010 Vendor response: 25.01.2010 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexandr Polyakov...

THELIA 1.4.2.1Multiple Cross-Site Scripting Vulnerabilities

THELIA 1.4.2.1Multiple Cross Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/37855/info THELIA is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage...

Easysitenetwork Jokes Complete Website - searchingred Cross-Site Scripting

Easysitenetwork Jokes Complete Website - searchingred Cross-Site Scripting source: https://www.securityfocus.com/bid/37852/info EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacke...

Internet Explorer CVE-2010-0249 'srcElement()' Remote Code Execution Vulnerability

Description Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the browser. Successful exploits will compromise the application and possibly the computer. Failed attacks will cause...

Technology for Solutions 1.0 - id Cross-Site Scripting

Technology for Solutions 1.0 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/37811/info Technology for Solutions is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Docmint 1.0/2.1 - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37721/info Docmint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Active Calendar 1.2 - '$_SERVER['PHP_SELF']' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37709/info Active Calendar is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

@lex Guestbook 5.0 - Multiple Cross-Site Scripting Vulnerabilities

@lex Guestbook 5.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37706/info @lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

Sniggabo CMS 2.21 - search.php Cross-Site Scripting

Sniggabo CMS 2.21 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40534/info Sniggabo CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

lxr -- multiple XSS vulnerabilities

Dan Rosenberg reports: There are several cross-site scripting vulnerabilities in LXR. These vulnerabilities could allow an attacker to execute scripts in a user's browser, steal cookies associated with vulnerable domains, redirect the user to malicious websites, etc...

SAP NetWeaver performanceProvierRoot - XSS

Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs: Information disclose Exploits: YES Reported: 01.04.2010 Vendor response: 08.04.2010 Date of Public Advisory: 17.06.2011 CVSS: 5.0 Author:Dmitriy Chastuhin Description SAP NetWeaver...

Google Chrome 4.0.249.30 DoS PoC

Exploit for unknown platform in category dos / poc ================================ Google Chrome 4.0.249.30 DoS PoC ================================ Title: Google Chrome 4.0.249.30 DoS PoC CVE-ID: OSVDB-ID: Published: 2010-01-03 Verified: yes view source print? !/usr/bin/perl google chrome...

VirtuaSystems VirtuaNews Pro 1.0.4 - admin.php Cross-Site Scripting

VirtuaSystems VirtuaNews Pro 1.0.4 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37568/info VirtuaNews Pro is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

Joomla! Component MS Comment 0.8.0b - Security Bypass Cross-Site Scripting

Joomla! Component MS Comment 0.8.0b - Security Bypass Cross-Site Scripting source: https://www.securityfocus.com/bid/38250/info The MS Comment component for Joomla! is prone to a security-bypass vulnerability because it fails to properly sanitize user-supplied input. The component is also prone t...

LiveZilla 3.1.8.3 - Multiple Cross-Site Scripting Vulnerabilities

LiveZilla 3.1.8.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41271/info LiveZilla is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...