acroread/flash-plugin: critical vulnerablility (APSA10-05, APSB10-26)

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll aka AuthPlayLib.bundle or libauthplay.so.0.0.0 in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or caus...

Front Accounting 2.3RC2 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications ============================================================== Front Accounting 2.3RC2 Multiple SQL Injection Vulnerabilities ============================================================== Affected Applications: Front Accounting v2.3RC2; other...

Front Accounting 2.3RC2 - Multiple SQL Injections

Front Accounting 2.3RC2 - Multiple SQL Injections Advisory Name: Multiple SQL Injections in Front Accounting Internal Cybsec Advisory Id: 2010-1003-Multiple SQL Injections in Front Accounting Vulnerability Class: SQL Injection Affected Applications: Front Accounting v2.3RC2; other versions may al...

Front Accounting 2.3RC2 - Multiple SQL Injections

Advisory Name: Multiple SQL Injections in Front Accounting Internal Cybsec Advisory Id: 2010-1003-Multiple SQL Injections in Front Accounting Vulnerability Class: SQL Injection Affected Applications: Front Accounting v2.3RC2; other versions may also be affected. Affected Platforms: Any running...

CVE-2010-4270

Directory traversal vulnerability in the nBill comnetinvoice component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.210 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors related to 1...

Joomla JQuarks4s 1.0.0 Blind SQL Injection

JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name JQuarks4s Vendor http://www.iptechinside.com/labs/projects/listfiles/jquarks-for-surveys Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail d...

CVE-2010-3962

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets CSS token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption...

Flash Player < 9.0.289 / 10.1.102.64 Multiple Vulnerabilities (APSB10-26)

Binary data 5699.prm...

Paypal.com Cross Site Scripting

https://www.paypal.com | HTTP Header Injection | Cross Site Scripting XSS | CAPEC-34 | CWE-79 Hoyt LLC - October 28, 2010 http://cloudscan.blogspot.com | http://cloudscan.me https://www.paypal.com | HTTP Header Injection | Cross Site Scripting XSS Tested on IE8, Chrome, Firefox. The affected URL'...

Audacity &lt;= 1.3 Beta Multiple Local Vulnerabilities

Audacity = 1.3 Beta Multiple Local Vulnerabilities Name Audacity Vendor http://audacity.sourceforge.net Versions Affected = 1.3 Beta Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-29 X. INDEX I. ABOUT THE...

Firefox < 3.5.15 Buffer Overflow

The installed version of Firefox is earlier than 3.5.15. Such versions are potentially affected by a heap-based buffer overflow vulnerability. The combination of DOM insertions and the handling of the JavaScript function 'document.write' exposes an error that can lead to a heap-based buffer...

Firefox 3.6 < 3.6.12 Buffer Overflow

The installed version of Firefox 3.6 is earlier than 3.6.12. Such versions are potentially affected by a heap-based buffer overflow vulnerability. The combination of DOM insertions and the handling of the JavaScript function 'document.write' exposes an error that can lead to a heap-based buffer...

SeaMonkey < 2.0.10 Buffer Overflow

The installed version of SeaMonkey is earlier than 2.0.10. Such versions are potentially affected by a heap-based buffer overflow vulnerability. The combination of DOM insertions and the handling of the JavaScript function 'document.write' exposes an error that can lead to a heap-based buffer...

CVE-2010-3856

creationtimestamp| type| source ---|---|--- 2010-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15304 2011-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18105 2018-02-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44025 2018-05-29...

EasyFTP version 1.7.0.11 and version 1.7.0.2 Crash PoC

Exploit for windows platform in category dos / poc ====================================================== EasyFTP version 1.7.0.11 and version 1.7.0.2 Crash PoC ====================================================== sub banner print q PoC EasyFTP 1.7.0.X Crash Author: Inj3cti0n P4ck3t e-mail:...

CVE-2010-3847

creationtimestamp| type| source ---|---|--- 2010-10-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15274 2010-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15304 2018-02-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44025 2018-02-12...

Daemon Tools Lite 4.30.4.0027 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =================================================== Daemon Tools Lite 4.30.4.0027 DLL Hijacking Exploit =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /...

Code injection

Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers...

Flash: crash or potential arbitrary code execution (APSB10-22)

Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary...

Joomla TimeTrack 1.2.4 SQL Injection

TimeTrack 1.2.4 Joomla Component Multiple SQL Injection Vulnerabilities Name TimeTrack Vendor http://www.itrn.de Versions Affected 1.2.4 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-09-22 X. INDEX I. ABOUT THE...