[DSECRG-09-022] Adobe Coldfusion 8 Multiple Linked XSS Vulnerabilies

http://www.dsecrg.com/pages/vul/show.php?id=122 Digital Security Research Group DSecRG Advisory DSECRG-09-022 Application: Adobe Coldfusion 8 Versions Affected: Adobe Coldfusion 8 Vendor URL: http://adobe.com Bugs: Multiple Linked XSS,XSRF Exploits: YES Reported: 12.01.2009 Vendor response:...

Adobe Coldfusion 8 XSS / XSRF

http://www.dsecrg.com/pages/vul/show.php?id=122 Digital Security Research Group DSecRG Advisory DSECRG-09-022 Application: Adobe Coldfusion 8 Versions Affected: Adobe Coldfusion 8 Vendor URL: http://adobe.com Bugs: Multiple Linked XSS,XSRF Exploits: YES Reported: 12.01.2009 Vendor response:...

CVE-2009-1872

creationtimestamp| type| source ---|---|--- 2009-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33169 2009-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33167 2009-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33170 2009-08-17...

CVE-2009-3182

creationtimestamp| type| source ---|---|--- 2009-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9425 2009-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9433...

CVE-2009-3428

creationtimestamp| type| source ---|---|--- 2009-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9418 2009-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9412 2009-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9420...

CVE-2009-4547

creationtimestamp| type| source ---|---|--- 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33157 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33155 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33158...

Logoshows BBS 2.0 Disclosure / Handling

Logoshows BBS 2.0 DD ZoRLu yildirimordulari.com - z0rlu.blogspot.com - turkguvenligi.info ref: http://www.milw0rm.com/exploits/9389 vuln: http://www.logoshows.com/bbs/database/globepersonnel.mdb Logoshows BBS 2.0 ICH yildirimordulari.com - z0rlu.blogspot.com - turkguvenligi.info ref:...

CVE-2009-4548

creationtimestamp| type| source ---|---|--- 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34495 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34499 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34497 2009-08-10...

IsolSoft Support Center 2.5 - Local File Inclusion Remote File Inclusion Cross-Site Scripting

IsolSoft Support Center 2.5 - Local File Inclusion Remote File Inclusion Cross-Site Scripting / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || IsolSoft Support Center 2.5 RFI/LFI/XSS...

PhotoPost PHP 3.3.1 - cat Cross-Site Scripting SQL Injection

PhotoPost PHP 3.3.1 - cat Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/35996/info PhotoPost PHP is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

CVE-2009-4983

creationtimestamp| type| source ---|---|--- 2009-08-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34643 2009-08-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34644 2009-08-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34645...

Mac OS X 10.5.x < 10.5.8 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.8. Mac OS X 10.5.8 contains security fixes for the following products : - bzip2 - CFNetwork - ColorSync - CoreTypes - Dock - Image RAW - ImageIO - Kernel - launchd - Login Window - MobileMe - Networking - XQuery C Tenab...

CVE-2009-3148

creationtimestamp| type| source ---|---|--- 2009-08-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9325...

PHP <= 5.2.10 Interruptions and Calltime Arbitrary Code Execution Vulnerability

PHP is prone to a vulnerability that an attacker could exploit to execute arbitrary code with the privileges of the user running the affected application. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC

No description provided by source. / ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC "Based on: http://www.securityfocus.com/data/vulnerabilities/exploits/35848.txt by kingcope - this is basically a rewrite of the above, lame i know, but fun enough for the zone argument you can try...

LinksCaffePRO 4.5 SQL Injection / XSS

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

BIND Dynamic Update DoS

BIND Dynamic Update DoS CVE: CVE-2009-0696 CERT: VU725188 Posting date: 2009-07-28 Program Impacted: BIND Versions affected: BIND 9 all versions Severity: High Exploitable: remotely Summary: BIND denial of service server crash caused by receipt of a specific remote dynamic update message...

Netscape 'select()' Object Denial Of Service Vulnerability - Linux

Netscape browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP Scripts Now Hangman - 'index.php?n' SQL Injection

source: https://www.securityfocus.com/bid/43513/info TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data,...

openSUSE Security Update : mozilla-xulrunner190 (mozilla-xulrunner190-832)

Firefox version upgrade to 3.0.9 to fix various security bugs. CVE-2009-1302,CVE-2009-1303,CVE-2009-1304,CVE-2009-1305,CVE -2009-1306,CVE-2009-1307,CVE-2009-1308,CVE-2009-1309,CVE-200 9-1310,CVE-2009-1311,CVE-2009-1312,CVE-2009-0652 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...