Joomla NijnaMonials Component (com_ninjamonials) Blind SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comninjamonials BSqli Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://ninjaforge.com/ Author :...

Orbit Downloader - URL Unicode Conversion Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Multi-Format Shellcode Encoding Tool - Beta 2.0 (w32)

No description provided by source. / ,sSSSis ,sSSSs, Beta v2.0 w32. iS dP dY ,SP Encodes binary data to/from a variety of formats. .SP dSS ,sS Copyright C 2003-2005 by Berend-Jan Wever dS' Sb ,sY [email protected] .SP dSSP' sSSSSSSP http://spaces.msn.com/members/berendjanwever iS: This...

PostgreSQL <= 8.3.6 Conversion Encoding Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34090/info PostgreSQL is prone to a remote denial-of-service vulnerability. Exploiting this issue may allow attackers to terminate connections to the PostgreSQL server, denying service to legitimate users. test= CREATE...

Microsoft Windows Media Player 11 - AVI File Colorspace Conversion Remote Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38790/info Microsoft Windows Media Player is prone to a remote memory-corruption vulnerability when handling specially crafted AVI files. An attacker can exploit this issue by enticing an unsuspecting user to open a...

Browser address bar characters into a small feature

No description provided by source. Securitylab.ir Application Info: Name: Internet Explorer Version: 8.0 Other tested browsers that also automatically convert \ to /: - Firefox v3.6 - Google Chrome 4.0.249.78 36714 Vulnerability: IE address bar characters into a small feature My IE 8 on the addre...

Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12626/info It is reported that Mono is prone to various cross-site scripting attacks. These issues result from insufficient sanitization of user-supplied data and arise when Mono converts Unicode characters ranging from...

UCenter Home 2.0 - SQL Injection Vulnerability

No description provided by source. --==UCenter Home 2.0 -0day Remote SQL Injection Vulnerability==-- / Author : KnocKout / Greatz : DaiMon,BARCOD3,RiskY and iranian hackers / Contact: [email protected] / Cyber-Warrior.org/CWKnocKout --==--==--==--==--==--==--==--==--==--== Script : UCenter Home...

ABC2MTEX 1.6.1 Process ABC Key Field Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12018/info abc2mtex is prone to a buffer overflow vulnerability. This issue is exposed when the program is used to convert ABC music notation files to MTEX format. In particular, the issue is due to insufficient bounds...

Memory corruption

The pushascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service memory corruption and daemon crash via an attempt to read a Unicode pathname without specifying use of Unicode, leading to a...

CVE-2014-3493

The pushascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service memory corruption and daemon crash via an attempt to read a Unicode pathname without specifying use of Unicode, leading to a...

[SECURITY] [DSA 2934-1] python-django security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2934-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 19, 2014 http://www.debian.org/security/faq -...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0430-1)

java-160-openjdk aka IcedTea was updated to 1.12.4 bnc807487 - S8007014, CVE-2013-0809: Improve image handling - S8007675, CVE-2013-1493: Improve color conversion %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSU...

openSUSE Security Update : postgresql (openSUSE-SU-2012:0480-1)

Security and bugfix release 9.1.3 : - Require execute permission on the trigger function for 'CREATE TRIGGER' CVE-2012-0866, bnc749299. - Remove arbitrary limitation on length of common name in SSL certificates CVE-2012-0867, bnc749301. - Convert newlines to spaces in names written in pgdump...

miniupnpc buffer overflow

Signed to unsigned conversion leads to buffer overflow...

CVE-2014-4017

Cross-site scripting XSS vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php...

CVE-2014-4017

CVE-2014-4017 is a cross-site scripting (XSS) vulnerability in the WordPress plugin Conversion Ninja . The flaw allows remote attackers to inject arbitrary script or HTML by supplying a crafted value to the id parameter of lp/index.php . Multiple connected sources confirm this is an XSS issue in ...

WordPress Conversion Ninja Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "id" parameter to lp/index.php. Solution Update the plugin...

CVE-2014-4017: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php...