Yahoo! Messenger v11 - Bypass & Persistent Vulnerability

Document Title: =============== Yahoo! Messenger v11 - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1279 Video: https://www.youtube.com/watch?v=kDdg6O5vGCY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1136 Release Dat...

Ximian Evolution 1.x - MIME image/* Content-Type Data Inclusion Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7119/info Ximian Evolution does not properly validate MIME image/ Content-Type fields. If an email message contains an image/ Content-Type, any type of data can be embedded where the image information is expected. This ca...

GNOME Evolution 2.2.3/2.3.x Inline XML File Attachment Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16408/info GNOME Evolution email client is prone to a denial-of-service vulnerability when processing messages containing inline XML file attachments with excessively long strings. perl -e 'printf Ax40000'...

Ximian Evolution 1.x UUEncoding Parsing Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7117/info The Evolution mail client supports uuencoded content and decodes it automatically when a message is initially parsed. A memory corruption error is present in the parsing component that can result in the client...

Hacker Evolution Game: untold Mod Editor 2.00.001 - Buffer Overflow (PoC)

No description provided by source. !/usr/bin/perl Title : Hacker Evolution: untold Mod Editor buffer overflow Date : June 19, 2010 Author : gunslinger [email protected] Web : http://devilzc0de.com Blog : http://gunslingerc0de.wordpress.com Software Link :...

TuMusika Evolution 1.6 Index.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23452/info TuMusika Evolution is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code i...

Phoenix Evolution CMS modules/pageedit/index.php pageid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20212/info Phoenix Evolution CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

Phoenix Evolution CMS index.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20212/info Phoenix Evolution CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

Ximian Evolution 1.x UUEncoding Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7118/info A vulnerability has been discovered in the Ximian Evolution Mail User Agent MUA. The problem occurs when the mailer attempts to process a maliciously encoded e-mail message. When attempting to decode the message...

Gnome Evolution 2.x GnuPG Arbitrary Content Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22760/info Evolution is prone to a vulnerability that may allow an attacker to add arbitrary content into a message without the end user knowing. An attacker may be able to exploit this issue to add arbitrary content into...

News Evolution 1.0/2.0 Include Undefined Variable Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6260/info News Evolution is a freely available, open source news software package. It is written in PHP, and designed for use on Unix and Linux operating systems. The problem occurs in the affnews.php file. By loading thi...

GNOME Evolution 2.22.2 'html_engine_get_view_width()' Denial Of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29961/info GNOME Evolution is prone to a denial-of-service vulnerability when handling email messages that contain specially crafted HTML. Successful attacks will crash the application. Evolution 2.22.2 is vulnerable; oth...

TlAds 1.0 - Remote Insecure Cookie Handling Vulnerability

No description provided by source. TlAds v 1 = Insecure Cookie Handling Found By : x0r - Evolution Team Download: http://www.easy-script.com/scripts-dl/tlads-1.zip Exploit: javascript:document.cookie = tlAdslogin=admin; path=/ Stupid Admin ! P0wned :P Grazie Al Mio Amore...Ti Amo Da Morire...

PayPal GoToMaxx PDFMailer - Local Overflow Vulnerability

Document Title: =============== PayPal GoToMaxx PDFMailer - Local Overflow Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1274 http://www.vulnerability-lab.com/getcontent.php?id=940 Video: https://www.youtube.com/watch?v=IXhwfZV6x0M Release Date:...

PayPal GoToMaxx PDFMailer - Local Overflow Vulnerability

Document Title: =============== PayPal GoToMaxx PDFMailer - Local Overflow Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1274 http://www.vulnerability-lab.com/getcontent.php?id=940 Video: https://www.youtube.com/watch?v=IXhwfZV6x0M Release Date:...

Important Update to AjaxSearch Exploit in Evo 1.0.13 (and prior)

Last week we announced an exploit found in AjaxSearch that could allow a Remote Code Execution in MODX Evolution. We originally suggested the removal of the index-ajax.php file was a sufficient method to protect your site from vulnerability. It has come to our attention that this was not correct...

MODX Evolution 1.0.13 (and prior) AjaxSearch Vulnerability

Product: MODX Evolution Risk: Very High Severity: Critical Versions: =1.0.13 Vulnerabilty Type: Remote Code Execution Report Date: 2014-May-29 Fixed Date: 2014-June-5 Description The AjaxSearch component distributed with all versions of MODX Evolution and 0.9.x contains a vulnerability that allow...

CVE-2010-5109

Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service crash via a crafted TNEF file, which triggers a buffer overflow...

Ubuntu Update for indicator-datetime USN-2186-1

Check for the Version of indicator-datetime OpenVAS Vulnerability Test $Id: gbubuntuUSN21861.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for indicator-datetime USN-2186-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2014-1223 - Cross-site Scripting in Telligent Evolution

Vulnerability title: Cross-site Scripting in Telligent Evolution CVE: CVE-2014-1223 Vendor: Telligent Product: Evolution Affected version: 7.5.0.32466 Fixed version: 7.6.7.36651 Reported by: Jerzy Kramarz Details: It is possible for an attacker to inject JavaScript by manipulating the 'msg'...