[SECURITY] Fedora 14 Update: phpMyAdmin-3.4.3.1-1.fc14

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

PHP Finance v1.0 - Multiple Web Vulnerabilities

Document Title: =============== PHP Finance v1.0 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-16 Vulnerability Laboratory ID VL-ID: ==================================== 103 Product & Service Introduction: =============================== PHPFinance is a web based financial...

Cross-Site Scripting vulnerabilities in Icinga

Advisory: Cross-Site Scripting vulnerabilities in Icinga Advisory ID: SSCHADV2011-001 Author: Stefan Schurtz Affected Software: Successfully tested on: icinga-1.3.0 / icinga-1.2.1 Vendor URL: http://www.icinga.org Vendor Status: fixed csv export link to make it XSS save IE 1275 CVE-ID: -...

Icinga 1.3.0 / 1.2.1 Cross Site Scripting

Advisory: Cross-Site Scripting vulnerabilities in Icinga Advisory ID: SSCHADV2011-001 Author: Stefan Schurtz Affected Software: Successfully tested on: icinga-1.3.0 / icinga-1.2.1 Vendor URL: http://www.icinga.org Vendor Status: fixed csv export link to make it XSS save IE 1275 CVE-ID: -...

CVE-2010-4740

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message...

Stack overflow

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message...

Multi Gather Generic Operating System Environment Settings

This module prints out the operating system environment variables. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Gather Generic Operating System Environment Settings', 'Description' = %...

BACnet OPC Client - Local Buffer Overflow (Metasploit) (2)

$Id: bacnetcsv.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

BACnet OPC Client Buffer Overflow

$Id: bacnetcsv.rb 10990 2010-11-11 20:09:15Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

BACnet OPC Client Buffer Overflow

This module exploits a stack buffer overflow in SCADA Engine BACnet OPC Client v1.0.24. When the BACnet OPC Client parses a specially crafted csv file, arbitrary code may be executed. This module requires Metasploit: https://metasploit.com/download Current source:...

Asterisk Trixbox CE Cross Site Scripting

The asterisk phonebook module found in trixbox CE is vulnerable to an xss which can be triggered by importing a contact from a csv file like this: "/alertdocument.cookie;";123123123;12313 FATAL ERROR url is $ip/admin/config.php?type=tool&display=phonebook So an import of a csv file which may...

Joomla TimeTrack Component v1.2.4 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications ======================================================================== Joomla TimeTrack Component v1.2.4 Multiple SQL Injection Vulnerabilities ======================================================================== Name TimeTrack Vendor...

Debian DSA-2092-1 : lxr-cvs - missing input sanitizing

Dan Rosenberg discovered that in lxr-cvs, a code-indexing tool with a web frontend, not enough sanitation of user input is performed; an attacker can take advantage of this and pass script code in order to perform cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Science Fair In A Box SQL Injection / Cross Site Scripting

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Science Fair In A Box SQLi & XSS Vulnerability Version:2.0.6 Price:Free Vendor url:http://www.sfiab.ca/ Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue™®, S1ayer,d3c0d3r and to all ICW members Science Fair In...

Joomla! Component DW Graph - Local File Inclusion

Joomla! Component DW Graph - Local File Inclusion --------------------------------------------------------------------------------- Joomla Component DW Graph Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group :...

Joomla Component com_dwgraphs Local File Inclusion

Exploit for php platform in category web applications ================================================== Joomla Component comdwgraphs Local File Inclusion ================================================== Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : email protected Date : 31 March...

Joomla! Component DW Graph - Local File Inclusion

--------------------------------------------------------------------------------- Joomla Component DW Graph Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : [email protected] Date : ...

Joomla Component DW Graph Local File Inclusion

No description provided by source. --------------------------------------------------------------------------------- Joomla Component DW Graph Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email &...

OpenOffice NULL pointer dereference

NULL pointer dereference on CSV and SLK files parsing...

Hellcode Research: OpenOffice File Parsing Null Pointer Vulnerability

Release Date: 2010-01-14 Product: OpenOffice Tested Vulnerable Versions: 3.1.1 and 3.1.0 Vulnerability: Null Pointer Description: Hellcode Research discovered a null pointer vulnerability in Openoffice for Windows. Opening a malformed ".csv" file with Openoffice, causes a crash on "soffice.bin"...