604 matches found
Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability
------------------------------------------------------------------------ ------------------- Mafia Moblog pathtotemplate Remote File Inclusion ------------------------------------------------------------------------ ------------------- Author : Sh3ll Date : 2006/04/30 HomePage : http://www.sh3ll....
Netscape/K-Meleon/Flock JavaScript navigator Vulnerability
Description: The newest versions of Netscape, K-Meleon and Flock browsers are affected to JavaScript navigator vulnerability described in http://browserfun.blogspot.com/2006/07/mobb-28-mozilla-navigator-object.html and Mozilla Foundation Security Advisory 2006-45. When method used in a web page...
Cross Site Scripting Vulnerability in Zoho Virtual Office
Hello, We have discovered a vunerability in Zoho Virtual Office. Malformed HTML message could lead to XSS Attack. It can cause a cookie theft leading to session hijacking. PoC: Simply creating HTML message including Javascript code could lead the browser's frame into evil script on attacker's...
NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure
// Script Web -------- www.npds.org versions --- NPDS = 5.10 Solutions -- None official Note ------- Vendor has been contacted // Local Inclusion http://.../header.php?DefaultTheme=../apache/logs/error.log00...
[KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection
KAPDA::47 - myNewsletter 1.1.2 SQLInjection SQLInjection ------- KAPDA New advisory Vulnerable products : myNewsletter = 1.1.2 Vendor: http://www.aspburst.com/index.asp Risk: Medium Vulnerability: SQLInjection Date : -------------------- Found : 2006/06/05 Vendor Contacted : 2006/06/06 Release Da...
Advisory: F@cile Interactive Web <= 0.8x Multiple Remote Vulnerabilities.
--Security Report-- Advisory: F@cile Interactive Web = 0.8x Multiple Remote Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 05:57 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Facile...
Mozilla Firefox <= 1.5.0.2 (js320.dll/xpcom_core.dll) Denial of Service PoC
Exploit for multiple platform in category dos / poc =========================================================================== Mozilla Firefox var textarea = document.getElementsByName"xOtherInfo"; textarea=textarea.item0; var htmlarea = document.createElement"div"; htmlarea.className =...
Mozilla Firefox 1.5.0.2 - js320.dllxpcom_core.dll Denial of Service (PoC)
Mozilla Firefox 1.5.0.2 - js320.dllxpcomcore.dll Denial of Service PoC...
Mozilla Firefox <= 1.5.0.2 (js320.dll/xpcom_core.dll) Denial of Service PoC
No description provided by source. !-- --------------------------------------------------- Software: Firefox Web Browser Tested: Linux, Windows clients' version 1.5.0.2 Result: Firefox Remote Code Execution and Denial of Service - Vendor contacted, no patch yet. Problem: A handling issue exists i...
[Full-disclosure] Advisory: My Gaming Ladder Combo System <= 7.0 Remote File Inclusion Vulnerability.
--Security Report-- Advisory: My Gaming Ladder Combo System = 7.0 Remote File Inclusion Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 22/04/06 13:37 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MyGamingLadder...
Vulnerabilities in SPIP
k k kkkk k kkkk k k kkkkkk kkkkkk kkkk k k k k k k k k k k k k k k kk k k k k kk k k k k kk kkkkk k kkkkk kk kk kkkkkk k k k k k k kk k k k k k k k kk k k k k k k k k k k k k kkkk k kkkk k k kk k k kkkk k kk k k k ------------------------------------------------------------------------------ =-...
[eVuln] newsletter - sourceworkshop SQL Injection Vulnerability
New eVuln Advisory: newsletter - sourceworkshop SQL Injection Vulnerability http://evuln.com/vulns/107/summary.html --------------------Summary---------------- eVuln ID: EV0107 CVE: CVE-2006-1533 Software: newsletter Sowtware's Web Site: http://www.sourceworkshop.com/ Versions: 1.0 Critical Level...
[Full-disclosure] RevilloC mail server USER command heap overflow
1-title: Revilloc mail server "USER" command heap overflow Product: Revilloc MailServer and Proxy v 1.21 http://www.revilloC.com The mail server is a central point for emails coming in and going out from home or office The service will work with any standard email client that supports POP3 and...
RevilloC MailServer 1.21 - USER Remote Buffer Overflow
RevilloC MailServer 1.21 - USER Remote Buffer Overflow !/usr/bin/perl -w revilloC mail server PoC exploit for xp sp1 Discovered securma massine from MorX Security Research Team http://www.morx.org. RevilloC is a MailServer and Proxy v 1.21 http://www.revilloC.com The mail server is a central poin...
RevilloC MailServer 1.21 (USER) Remote Buffer Overflow Exploit PoC
Exploit for unknown platform in category remote exploits ================================================================== RevilloC MailServer 1.21 USER Remote Buffer Overflow Exploit PoC ================================================================== !/usr/bin/perl -w revilloC mail server Po...
EJ3-XSS.txt
Advisory: EJ3 TOPo Cross Site Scripting Vulnerability - Author: Yunus Emre Yilmaz || Yns [email protected] - Application: EJ3 TOPo http://ej3soft.ej3.net - Affected Version : v2.2.178 maybe older versions.. - Risk : Critical Details : If an attacker access /code/incheader.php directly ,...
EJ3 TOPo - Cross Site Scripting Vulnerability
Advisory: EJ3 TOPo Cross Site Scripting Vulnerability - Author: Yunus Emre Yilmaz || Yns [email protected] - Application: EJ3 TOPo http://ej3soft.ej3.net - Affected Version : v2.2.178 maybe older versions.. - Risk : Critical – Details : If an attacker access /code/incheader.php directly ,...
phpRPC Library Remote Code Execution
GulfTech Security Research February 26, 2006 Vendor : Robert Hoffman URL : http://sourceforge.net/projects/phprpc/ Version : phpRPC = 0.7 Risk : Remote Code Execution Description: phpRPC is meant to be an easy to use xmlrpc library. phpRPC is greatly simplified with the use of database/rpc-protoc...
Advisory: MyPHPNuke <= 1.8.8 multiple XSS vulnerabilities
--Security Report-- Advisory: MyPHPNuke = 1.8.8 multiple XSS vulnerabilities --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 24/02/06 05:56 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MPN www.myphpnuke.com Version: 1.8.8 and...
dotProject-2.0.1.txt
dotproject Date: Feb. 14 2006 Vendor: dotproject.net contacted Description: dotProject is a volunteer supported Project Management application. Details: The 'protection.php' script does not properly validate user-supplied input in the 'siteurl' parameter. Some user-supplied input is not checked...