604 matches found
Directory Traversal vulnerability in IPCheck Monitor Server
Directory Traversal vulnerability in IPCheck Monitor Server -------------------------------------- Overview A directory traversal vulnerability has been identified in IPCheck Server Monitor Free/Trial/Professional, which may be exploited by potential attackers to retrieve files from the underlyin...
Netscape/K-Meleon/Flock JavaScript navigator Vulnerability
Description: The newest versions of Netscape, K-Meleon and Flock browsers are affected to JavaScript navigator vulnerability described in http://browserfun.blogspot.com/2006/07/mobb-28-mozilla-navigator-object.html and Mozilla Foundation Security Advisory 2006-45. When method used in a web page...
Cross Site Scripting Vulnerability in Zoho Virtual Office
Hello, We have discovered a vunerability in Zoho Virtual Office. Malformed HTML message could lead to XSS Attack. It can cause a cookie theft leading to session hijacking. PoC: Simply creating HTML message including Javascript code could lead the browser's frame into evil script on attacker's...
NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure
// Script Web -------- www.npds.org versions --- NPDS = 5.10 Solutions -- None official Note ------- Vendor has been contacted // Local Inclusion http://.../header.php?DefaultTheme=../apache/logs/error.log00...
[KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection
KAPDA::47 - myNewsletter 1.1.2 SQLInjection SQLInjection ------- KAPDA New advisory Vulnerable products : myNewsletter = 1.1.2 Vendor: http://www.aspburst.com/index.asp Risk: Medium Vulnerability: SQLInjection Date : -------------------- Found : 2006/06/05 Vendor Contacted : 2006/06/06 Release Da...
Advisory: F@cile Interactive Web <= 0.8x Multiple Remote Vulnerabilities.
--Security Report-- Advisory: F@cile Interactive Web = 0.8x Multiple Remote Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 05:57 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Facile...
Mozilla Firefox <= 1.5.0.2 (js320.dll/xpcom_core.dll) Denial of Service PoC
No description provided by source. !-- --------------------------------------------------- Software: Firefox Web Browser Tested: Linux, Windows clients' version 1.5.0.2 Result: Firefox Remote Code Execution and Denial of Service - Vendor contacted, no patch yet. Problem: A handling issue exists i...
Mozilla Firefox <= 1.5.0.2 (js320.dll/xpcom_core.dll) Denial of Service PoC
Exploit for multiple platform in category dos / poc =========================================================================== Mozilla Firefox var textarea = document.getElementsByName"xOtherInfo"; textarea=textarea.item0; var htmlarea = document.createElement"div"; htmlarea.className =...
Mozilla Firefox 1.5.0.2 - js320.dllxpcom_core.dll Denial of Service (PoC)
Mozilla Firefox 1.5.0.2 - js320.dllxpcomcore.dll Denial of Service PoC...
[Full-disclosure] Advisory: My Gaming Ladder Combo System <= 7.0 Remote File Inclusion Vulnerability.
--Security Report-- Advisory: My Gaming Ladder Combo System = 7.0 Remote File Inclusion Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 22/04/06 13:37 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MyGamingLadder...
Vulnerabilities in SPIP
k k kkkk k kkkk k k kkkkkk kkkkkk kkkk k k k k k k k k k k k k k k kk k k k k kk k k k k kk kkkkk k kkkkk kk kk kkkkkk k k k k k k kk k k k k k k k kk k k k k k k k k k k k k kkkk k kkkk k k kk k k kkkk k kk k k k ------------------------------------------------------------------------------ =-...
[eVuln] newsletter - sourceworkshop SQL Injection Vulnerability
New eVuln Advisory: newsletter - sourceworkshop SQL Injection Vulnerability http://evuln.com/vulns/107/summary.html --------------------Summary---------------- eVuln ID: EV0107 CVE: CVE-2006-1533 Software: newsletter Sowtware's Web Site: http://www.sourceworkshop.com/ Versions: 1.0 Critical Level...
[Full-disclosure] RevilloC mail server USER command heap overflow
1-title: Revilloc mail server "USER" command heap overflow Product: Revilloc MailServer and Proxy v 1.21 http://www.revilloC.com The mail server is a central point for emails coming in and going out from home or office The service will work with any standard email client that supports POP3 and...
RevilloC MailServer 1.21 (USER) Remote Buffer Overflow Exploit PoC
Exploit for unknown platform in category remote exploits ================================================================== RevilloC MailServer 1.21 USER Remote Buffer Overflow Exploit PoC ================================================================== !/usr/bin/perl -w revilloC mail server Po...
RevilloC MailServer 1.21 - USER Remote Buffer Overflow
RevilloC MailServer 1.21 - USER Remote Buffer Overflow !/usr/bin/perl -w revilloC mail server PoC exploit for xp sp1 Discovered securma massine from MorX Security Research Team http://www.morx.org. RevilloC is a MailServer and Proxy v 1.21 http://www.revilloC.com The mail server is a central poin...
EJ3-XSS.txt
Advisory: EJ3 TOPo Cross Site Scripting Vulnerability - Author: Yunus Emre Yilmaz || Yns [email protected] - Application: EJ3 TOPo http://ej3soft.ej3.net - Affected Version : v2.2.178 maybe older versions.. - Risk : Critical Details : If an attacker access /code/incheader.php directly ,...
EJ3 TOPo - Cross Site Scripting Vulnerability
Advisory: EJ3 TOPo Cross Site Scripting Vulnerability - Author: Yunus Emre Yilmaz || Yns [email protected] - Application: EJ3 TOPo http://ej3soft.ej3.net - Affected Version : v2.2.178 maybe older versions.. - Risk : Critical – Details : If an attacker access /code/incheader.php directly ,...
phpRPC Library Remote Code Execution
GulfTech Security Research February 26, 2006 Vendor : Robert Hoffman URL : http://sourceforge.net/projects/phprpc/ Version : phpRPC = 0.7 Risk : Remote Code Execution Description: phpRPC is meant to be an easy to use xmlrpc library. phpRPC is greatly simplified with the use of database/rpc-protoc...
Advisory: MyPHPNuke <= 1.8.8 multiple XSS vulnerabilities
--Security Report-- Advisory: MyPHPNuke = 1.8.8 multiple XSS vulnerabilities --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 24/02/06 05:56 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MPN www.myphpnuke.com Version: 1.8.8 and...
dotProject-2.0.1.txt
dotproject Date: Feb. 14 2006 Vendor: dotproject.net contacted Description: dotProject is a volunteer supported Project Management application. Details: The 'protection.php' script does not properly validate user-supplied input in the 'siteurl' parameter. Some user-supplied input is not checked...