29 matches found
The vulnerability of the Firefox browser’s WebRTC extension, which allows a perpetrator to compromise data integrity
The vulnerability of the Firefox browser’s WebRTC extension is related to a display-related error in the origin domain. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...
"This page can't be displayed" When Trying to Create a Connector
When attempting to create your first Connector in Citrix App Layering, the new browser tab is created but does not load the Connector Configuration page. Instead you see this error:...
cumin: DoS via displayed link names containing non-ASCII characters
It was found that if Cumin were asked to display a link name containing non-ASCII characters, the request would terminate with an error. If data containing non-ASCII characters were added to the database such as via Cumin or Wallaby, requests to load said data would terminate and the requested pa...
cumin: DoS via displayed link names containing non-ASCII characters
It was found that if Cumin were asked to display a link name containing non-ASCII characters, the request would terminate with an error. If data containing non-ASCII characters were added to the database such as via Cumin or Wallaby, requests to load said data would terminate and the requested pa...
Opera Multiple Vulnerabilities - June12 (Linux)
The host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnjune12lin.nasl 5931 2017-04-11 09:02:04Z teissa $ Opera Multiple Vulnerabilities - June12 Linux Authors: Sooraj KS Copyright: Copyright c 2012 Greenbone Networks GmbH,...
Поиск уязвимостей в веб приложениях
В этой статье я собрал интересные на мой взгляд ошибки в php скриптах. Но для начала, описание некоторых параметров PHP-интерпретатора: Цитата: registerglobals = ON - все переменные регистрируются как глобальные; magicquotesgpc = ON - в массивах POST, GET, COOKIE экранируются кавычки и опасные...
MAXDEV CMS Multiple vulnerabilities
Full Path disclosure --------------------- This hole is caused by direct access to file includes/legacy.php not protected PoC : http://site.co.id/maxdev/includes/legacy.php Fix : Turn off display error in php.ini can fix this security issue Blind sql inject ----------------- This hole is caused b...
Multiple vulnerability in jupiter CMS
Author : KaDaL-X email : [email protected] site : http://kandangjamur.net/ Multiple vulnerability in jupiter CMS Vendor : http://www.highstrike.net/ version 1.1.5 Vulnerability code found in file modules/online.php PoC: XSS...