3462 matches found
DEBIAN-CVE-2012-2415
Heap-based buffer overflow in chanskinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 allows remote authenticated users to cause a denial of service or possibly have unspecified other impact via a series of...
PT-2012-4026
Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.6.2.x through 1.6.2.23 Asterisk Open Source versions 1.8.x through 1.8.11.0 Asterisk Open Source versions 10.x through 10.3.0 Description The issue is related to a heap-based buffer overflow in the chan skinny.c...
Ubuntu: Security Advisory (USN-1400-5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Link Up Gold CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: Link Up Gold CSRF Author: Jonturk75 Category:: webapps Demo : http://demo.scripts-gate.com/LinkUpGold/administration Greetz: Inj3ct0r Exploit DataBase 1337day.com 0day.today 2018-04-14...
PHP Form & Survey Creator CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: PHP Form & Survey Creator CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/php-form-survey-creator/29396/ Category:: webapps Demo : http://web.alumnionline.org/phpScripts/PHPFormCreator/admin/...
Ad Manager Pro Cross Site Request Forgery
Exploit Title: Ad Manager Pro CSRF Vuln add admin Author: Jonturk75 Vendor of Software Link: http://www.scripts.com/viewscript/php-text-ad-management/20881/ Category:: webapps Demo site: http://www.scripts-demo.com/admanagerpro/administration/index.php...
NWork Download Now Button Is Available But Nothing Happens?
Challenge When clicking the "Download Now" Button, you are redirected to another Veeam page or stay at the Download page. OR Cause This is due to the "Download Now" Button, by default, creates a new tab and popups the .zip file that is trying to be downloaded. Solution There are 2 solutions for...
ACPI scripts privilege escalation
invalid power button events processing, invalid umsk handling...
Acpid 1:2.0.10-1ubuntu2 Privilege Boundary Crossing Vulnerability
Exploit for linux platform in category local exploits Exploit Title: Acpid Privilege Boundary Crossing Vulnerability Google Dork: Date: 23-11-2011 Author: otr Software Link: https://launchpad.net/ubuntu/+source/acpid Version: 1:2.0.10-1ubuntu2 Tested on: Ubuntu 11.10, Ubuntu 11.04 CVE :...
Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : acpid vulnerabilities (USN-1296-1)
Oliver-Tobias Ripka discovered that an ACPI script incorrectly handled power button events. A local attacker could use this to execute arbitrary code, and possibly escalate privileges. CVE-2011-2777 Helmut Grohne and Michael Biebl discovered that ACPI scripts were executed with a permissive file...
Ubuntu Update for acpid USN-1296-1
Ubuntu Update for Linux kernel vulnerabilities USN-1296-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12961.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for acpid USN-1296-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...
USN-1296-1: acpid vulnerabilities
Oliver-Tobias Ripka discovered that an ACPI script incorrectly handled power button events. A local attacker could use this to execute arbitrary code, and possibly escalate privileges. CVE-2011-2777 Helmut Grohne and Michael Biebl discovered that ACPI scripts were executed with a permissive file...
CVE-2010-4885
Cross-site scripting XSS vulnerability in the XING Button xing extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the XING Button xing extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the "official twitter tweet button for your page" tweetbutton extension before 1.0.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-4885
Cross-site scripting XSS vulnerability in the XING Button xing extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-4885
CVE-2010-4885 affects the TYPO3 extension XING Button (xing) , specifically versions before 1.0.2 . The vulnerability is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact is the potential execution of unauthorized scripts in the contex...
PT-2011-1820
Name of the Vulnerable Software and Affected Versions XING Button xing extension for TYPO3 versions prior to 1.0.2 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecifi...
CVE-2010-4885: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the XING Button xing extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
