9565 matches found
Fedora 10 : drupal-views-6.x.2.6-1.fc10 (2009-6389)
Advisory ID: DRUPAL-SA-CONTRIB-2009-037 0 Project: Views Versions: 6.x-2.x Date: 2009-June-10 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Cross Site Scripting XSS, Access Bypass -------- DESCRIPTION -------------------------------------------------------- - The...
Cheap corporate network V1. 0 vulnerability analysis-vulnerability warning-the black bar safety net
QQ:7 9 5 8 6 0 0 products. the asp part of the code % pages=1 0 leixing=lcasetrimrequest"id" select case leixing case "big" anclassid=request"anid" set rs=server. createobject"adodb. recordset" rs. open "select from sort1 where anclassid="&anclassid,conn,1,1 if rs. bof and rs. eof then response...
TELUS Security Labs VR - Microsoft Office Excel Malformed Records Stack Buffer Overflow
Microsoft Office Excel Malformed Records Stack Buffer Overflow TSL ID : FSC20090609-01 Reference: http://telussecuritylabs.com/threats/show/FSC20090609-01 1. Affected Software Microsoft Office Excel 2000 Microsoft Office Excel 2002 Reference: http://office.microsoft.com/en-us/excel/default.aspx 2...
DX Studio Player < 3.0.29.1 Firefox plug-in Command Injection Vuln
Exploit for windows platform in category remote exploits ================================================================== DX Studio Player 3.0.29.1 Firefox plug-in Command Injection Vuln ================================================================== -----BEGIN PGP SIGNED MESSAGE----- Hash:...
Core Security Technologies Advisory 2008.0826
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Internet Explorer Security Zone restrictions bypass 1. Advisory Information Title: Internet Explorer Security Zone restrictions bypass Advisory ID: CORE-2008-0826...
CORE-2009-0420 - Apple CUPS IPP_TAG_UNSUPPORTED Handling null pointer Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Apple CUPS IPPTAGUNSUPPORTED Handling null pointer Vulnerability 1. Advisory Information Title: Apple CUPS IPPTAGUNSUPPORTED Handling null pointer Vulnerability...
Core Security Technologies Advisory 2009.0420
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Apple CUPS IPPTAGUNSUPPORTED Handling null pointer Vulnerability 1. Advisory Information Title: Apple CUPS IPPTAGUNSUPPORTED Handling null pointer Vulnerability...
Microsoft IIS ISAPI Heap Overflow (MS02-018; CVE-2002-0079)
The Microsoft Internet Information Server ASP Active Server Pages ISAPI filter is prone to remote exploitable heap buffer overflow vulnerability. A heap buffer overflow in the "chunked encoding transfer mechanism" in Microsoft IIS Internet Information Server and Active Server Pages allows attacke...
SEC Consult SA-20090525-3 :: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability
SEC Consult Security Advisory 20090525-3 ========================================================================== title: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability program: SonicWALL Global VPN Client vulnerable version: Global VPN Client = 4.0.0.835 possibly other...
ZaoCMS Remote File Upload
|| || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: ZaoCMS PhpCommander - Arbitrary File Upload =INFO: http://zaocms.com/ =BUY: http://zaocms.com/ =DORK: -- @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@-File-Upload-PoC-@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Go to:...
Secunia Research: Microsoft PowerPoint Atom Parsing Buffer Overflows
====================================================================== Secunia Research 12/05/2009 - Microsoft PowerPoint Atom Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...
Norton Ghost Support Module Denial Of Service
----------------------------------------------------------------------------------------- Norton Ghost Support module for EasySetup wizard Remote DoS/Arbitrary code execution? url: http://www.symantec.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ File:...
FreeBSD : pound remotely exploitable vulnerability (fb521119-9bc4-11d8-9366-0020ed76ef5a)
An unknown remotely exploitable vulnerability was disclosed. Robert Segall writes : a security vulnerability was brought to my attention many thanks to Akira Higuchi. Everyone running any previous version should upgrade to 1.6 immediately - the vulnerability may allow a remote exploit. No exploit...
FreeBSD : xv -- exploitable buffer overflows (fffacc93-16cb-11d9-bc4a-000c41e2cdad)
In a Bugtraq posting, infamous41mdathotpop.com reported : there are at least 5 exploitable buffer and heap overflows in the image handling code. this allows someone to craft a malicious image, trick a user into viewing the file in xv, and upon viewing that image execute arbitrary code under...
Phorum < 5.2.10 Cross-Site Scripting/Request Forgery
=cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL:...
Oracle plugs critical database server holes
Oracle has released the first Critical Patch Update for 2009 to provide fixes for at least address 43 vulnerabilities across several database server products. The mega update oracle.com, released on the same day Microsoft released its own security patches, plugs at least 16 holes in the company’s...
net2ftp <= 0.97 Cross-Site Scripting/Request Forgery Vulnerabilities
No description provided by source. =cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =net2ftp = 0.97 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: net2ftp = 0.97 Cross-Site Scripting/Request Forgery Advisory ID:...
net2ftp <= 0.97 Cross-Site Scripting/Request Forgery Vulnerabilities
Exploit for linux platform in category remote exploits ==================================================================== net2ftp = 0.97 Cross-Site Scripting/Request Forgery Vulnerabilities ==================================================================== / / / / // / / // / o / / .-/ =net2f...
net2ftp 0.97 - Cross-Site Scripting Request Forgery
net2ftp 0.97 - Cross-Site Scripting Request Forgery =cicatriz ==advisories= / / / / // / / // / o / / .-/ =net2ftp = 0.97 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: net2ftp = 0.97 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-0804...
Amaya 11.1 XHTML Parser Buffer Overflow
=cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =Amaya 11.1 XHTML Parser Buffer Overflow==/= == =Advisory & Vulnerability Information=== Title: Amaya 11.1 XHTML Parser Buffer Overflow Advisory ID: VUDO-2009-0104 Advisory URL:...