7405 matches found
CVE-2014-5317
Cross-site scripting XSS vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Links+ 2.10 and earlier, and 365 Links2+ 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-1417
Multiple cross-site scripting XSS vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow remote authenticated users to inject arbitrary web script or HTML via the user field to cgi-bin/ConfigManApp.com...
Fedora 19 : php-5.5.16-1.fc19 (2014-9679)
21 Aug 2014, PHP 5.5.16 Core : - Fixed bug 67693 incorrect push to the empty array Tjerk - Fixed bug 67717 segfault in dnsgetrecord. CVE-2014-3597 Remi COM : - Fixed missing type checks in comeventsink Yussuf Khalil, Stas. Fileinfo : - Fixed bug 67705 extensive backtracking in rule regular...
indosatm2.com XSS vulnerability
Open Bug Bounty ID: OBB-48751 Description| Value ---|--- Affected Website:| indosatm2.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...
jk.818.com XSS vulnerability
Open Bug Bounty ID: OBB-48158 Description| Value ---|--- Affected Website:| jk.818.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
dwflags.server345.com XSS vulnerability
Open Bug Bounty ID: OBB-47502 Description| Value ---|--- Affected Website:| dwflags.server345.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
ca800.com XSS vulnerability
Open Bug Bounty ID: OBB-47112 Description| Value ---|--- Affected Website:| ca800.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
ads.st701.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-47103 Description| Value ---|--- Affected Website:| ads.st701.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
Microsoft Visual Studio .NET msdds.dll Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14594/info Microsoft Visual Studio .NET is prone to a vulnerability that could allow remote arbitrary code execution. This is due to a buffer overflow that is exposed during COM object instantiation. The list of vulnerabl...
Joomla Component mosDirectory 2.3.2 - Remote File Inclusion Vuln
No description provided by source. --==+=================== Electronic Security Team www.Yee7.com =================+==-- --==+ Joomla Component mosDirectory 2.3.2 Remote File Inclusion +==-- --==+=============================================================================+==-- Software: Joomla...
Symantec Security Check Virus Detection COM Object Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10069/info Symantec Virus Detection is a web based service that detects viruses and trojan horses. It is a freely available service that can be run via Microsoft Internet Explorer, Netscape Communicator or Apple Safari we...
Microsoft Windows XP/2000/NT 4 RPC Service Denial of Service Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled. This...
MW6 Technologies MaxiCode ActiveX (Data param) - Buffer Overflow
No description provided by source. !-- =========================================================================== Problem: The Data parameter is subject to a buffer overflow DEFINITELY leading to arbitrary code execution. COM Object - 2355C601-37D1-42B4-BEB1-03C773298DC8 MW6MaxiCode Class File...
XM Easy Personal FTP Server 5.6.0 - Remote Denial of Service Exploit
No description provided by source. print -------------------------------------------------------------- print XM Easy Personal FTP Server 5.6.0 Remote Denial of Service print url: http://www.dxm2008.com/ print author: shinnai print mail: shinnaiatautisticidotorg print site: http://www.shinnai.net...
Microsoft Windows NT 4.0 DCOM Server Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registry key...
File Uploader 1.1 index.php config[root_ordner] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/25253/info File Uploader is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application...
WireShark < 0.99.6 MMS Remote Denial of Service Exploit
No description provided by source. include winsock2.h include stdio.h pragma commentlib, ws232 char http = POST / HTTP/1.0\r\n Content-Type: application/vnd.wap.mms-message\r\n; char hoststr = Host: %s:%d\r\n; char contentlenstr = Content-Length: %d\r\n\r\n; unsigned char mms =...
MW6 Technologies Aztec ActiveX (Data param) - Buffer Overflow
No description provided by source. !-- =========================================================================== Problem: The Data parameter is subject to a buffer overflow DEFINITELY leading to arbitrary code execution. COM Object - F359732D-D020-40ED-83FF-F381EFE36B54 MW6Aztec Class File...
Softwin BitDefender AvxScanOnlineCtrl COM Object Remote File Upload And Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10174/info Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by a file upload and execution vulnerability. This issue is due to a design error that allows a remote user to specify a file to be uploaded a...
Microsoft Internet Explorer 6.0 IMSKDIC.DLL Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19521/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs because the application fails to load a DLL library when instantiated as an ActiveX control. An attacker may exploit...