7218 matches found
XBL scripts ran even when Javascript disabled — Mozilla
Scripts in XBL controls from web content continued to be run even when Javascript was disabled. By itself this causes no harm, but it could be combined with most script-based exploits to attack people running vulnerable versions who thought disabling javascript would protect them...
hostingCreate.txt
-= KeHieuHoc HCE GROUP =- Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : Multiple Unauthenticated information disclose Risk : high Vulnerable Versions: All version...
ZH2005-14SA.txt
ZH2005-14SA Phishing problems on MSN Date: July 1th 2005 Author:Giovanni Delvecchio email: [email protected] Overview ======= Multiple phishing problems exist on support.msn.com, permitting to a possible attacker to conduct phishing attack against a user. Details ===== 1Input passed to the "r...
Novell ZENworks Multiple Remote Pre-Authentication Overflows
The remote host is running Novell ZENworks Desktop or Server Management, a remote desktop management software. The remote version of this software is affected by multiple heap and stack overflow vulnerabilities which may be exploited by an attacker to to execute arbitrary code on the remote host...
MS05-027: Vulnerability in SMB Could Allow Remote Code Execution (896422) (uncredentialed check)
The remote version of Windows contains a flaw in the Server Message Block SMB implementation that may allow an attacker to execute arbitrary code on the remote host. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...
citypostXSS.txt
sNKenjoi's Security Advisory: XSS Vunerabilities in Multiple CityPost Software Security Advisory: XSS Vunerabilities in Multiple CityPost Software Severity: Medium Title: XSS Vunerabilities in Simple PHP Upload, Simple Image Editor and Automated Link Exchange Vendor: Allen Kim Vendor Website:...
PortalAppXSS.txt
http://www.snkenjoi.com/secadv/secadv8.txt sNKenjoi's Security Advisory: XSS Vunerabilities in PortalApp v3.3 Security Advisory: XSS Vunerabilities in PortalApp v3.3 Severity: Medium Title: XSS Vunerabilities in PortalApp v3.3 Vendor: Iatek Vendor Website: http://www.portalapp.com/ Proof of Conce...
Serendipity < 0.80 RC7 Multiple Vulnerabilities
Binary data 2920.prm...
JGS-Portal 3.0.13.0.2 - jgs_portal_sponsor.php?id SQL Injection
JGS-Portal 3.0.13.0.2 - jgsportalsponsor.php?id SQL Injection source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_themengraf.php?year' SQL Injection
source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of the SQL injection issues could...
[HSC Security Group] MaxWebPortal - Multiple SQL injection/XSS
Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: Maxwebportal 1.3.5 and prior Risk: High MaxWebPortal is probably the most spread ASP based web portal script. I've found multiple XSS and Sql injection that could easily lead to password strealing or porta...
Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities
Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a victim's browser, allowing the attacker to steal cookie-based credentials a...
dc_metacart_sqling.txt
Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: MetaCart2 for PayFlow Multiple S...
[ GLSA 200504-25 ] Rootkit Hunter: Insecure temporary file creation
Gentoo Linux Security Advisory GLSA 200504-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits.
everything is now patched in CVS-current, including the ISIS bug infinite loop DOS bugs in tcpdump: ISIS isisprint infinite loop DOS. BGP RTROUTINGINFO infinite loop DOS. LDP ldpprint infinite loop DOS. the ISIS bug is in 3.8.x/3.9.1/CVS. did not check below 3.8.x the BGP and LDP bugs seem to be...
Multiple Sql injection and XSS in CartWIZ ASP Cart
Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple Sql injection and XSS i...
Multiple Sql injection vulnerabilities in BK Forum v.4
Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple Sql injection...
Multiple Sql injection and XSS in Asp Nuke 0.80 (Working exploits included)
Severity: High Title: Multiple Sql injection and XSS in Asp Nuke 0.80 Working exploits included Date: 22/04/2005 Vendor: Asp Nuke Vendor Website: http://www.aspnuke.com/ Summary: There are, multiple sql injection and xss in asp nuke 0.80. Proof of Concept Exploits:...
PayProCart30.txt
This is a multi-part message in MIME format. ------=NextPart000000601C5395C.BF487B20 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/...
Http Response Splitting Vulnerability In PHP-NUKE 7.6 and below
Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Http Response Splitting...