Code injection

HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to cau...

Mandriva Update for ffmpeg MDVSA-2011:060 (ffmpeg)

Check for the Version of ffmpeg OpenVAS Vulnerability Test Mandriva Update for ffmpeg MDVSA-2011:060 ffmpeg Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CVE-2010-1785

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; accesses uninitialized memory during processing of the 1 :first-letter and 2 :first-line pseudo-elements in an SVG text element, which allows remote...

Mandriva Update for openoffice.org MDVSA-2010:091 (openoffice.org)

Check for the Version of openoffice.org OpenVAS Vulnerability Test Mandriva Update for openoffice.org MDVSA-2010:091 openoffice.org Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

DEBIAN-CVE-2009-3604

The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted P...

MP3 Collector 2.3 (m3u File) Local Crash PoC

Exploit for unknown platform in category dos / poc ============================================ MP3 Collector 2.3 m3u File Local Crash PoC ============================================ !/usr/bin/perl MP3 Collector 2.3 m3u File Local Crash PoC By : zAx Application Homepage : http://collectorz.com...

Mandrake Security Advisory MDVSA-2009:162 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory MDVSA-2009:162. OpenVAS Vulnerability Test $Id: mdksa2009162.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:162 java-1.6.0-openjdk Authors: Thomas Reinke Copyright:...

tomcat XML parser information disclosure

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the 1 web.xml, 2 context.xml, or 3 tld files of arbitrary web applications via a crafted...

F-Secure Product(s) Integer Overflow Vulnerability (Linux)

This host is installed with F-Secure Products and is prone to Integer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbfsecureprdtsintoverflowvulnlin.nasl 6516 2017-07-04 12:20:47Z cfischer $ F-Secure Products Integer Overflow Vulnerability Linux Authors: Sharath S Copyright: Copyright c...

Impropper sanitisation of attachment filenames allows header injection

An attacker can craft a specific attachment filename, or rename the file once it has been uploaded to introduce arbitrary headers into the response stream...

CVE-2009-0741

SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter...

Sql injection

SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter...

CVE-2009-0741

SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter...

CVE-2009-0741

An active CVE entry (CVE-2009-0741) describes an SQL injection vulnerability in Craft Silicon Banking@Home 2.1 and earlier. The affected component is Login.asp, and the vulnerability is exploitable via the LoginName parameter to allow remote attackers to execute arbitrary SQL commands. This is th...

Craft Silicon Banking@Home SQL Injection

Craft Silicon Banking@Home SQL Injection Author: Francesco Bianchino Email: f.bianchino at gmail.com Title: Craft Silicon Banking@Home SQL Injection Product: Banking@Home - Net Banking Versions Vulnerable: 2.1 and below Vendor: Craft Silicon www.craftsilicon.com Summary Banking@Home is an home...

PHP-Ring Webring System 0.9.1 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ==================================================================== PHP-Ring Webring System 0.9.1 Insecure Cookie Handling Vulnerability ==================================================================== ------- DESCRIPTION: PHP-Ring...

phpWebNews 0.2 MySQL Edition (SQL) Insecure Cookie Handling Vuln

No description provided by source. ...:::::phpwebnews-mysql 0.2 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx :my master hadihadi tnx to:MR.nosrati,black.shadowes,MR.hesy &...

Galatolo Web Manager 1.3a - Insecure Cookie Handling

...:::::Galatolo Web Manager 1.3a Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my...

Maian Weblog 4.0 - Insecure Cookie Handling

Maian Weblog 4.0 - Insecure Cookie Handling -+================================================================================+- -+ Maian Weblog = v4.0 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By:...

KnowledgeQuest 2.5 Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By t0pP8uz...