2131 matches found
CVE-2006-4940
login/forgotpassword.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information e-mail addresses and Moodle account names via a find action...
Privilege escalation using addSelectionListener — Mozilla
Web content could access the nsISelectionPrivate interface of the Selection object and use it to add a SelectionListener. The listener would be called when the user did a "Find" on the page or a "select all", and as intended this shouldn't cause any problems. But as with escaping the PAC sandbox ...
CVE-2006-2279: Undefined Security Weakness
Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via 1 the Find parameter in a search.php, and the 2 LID and 3 Rate parameters in b misc.php...
Cross site scripting
Cross-site scripting XSS vulnerability in anyboard.cgi in Netbula Anyboard 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tK parameter in a find command...
CVE-2006-0247: Undefined Security Weakness
Cross-site scripting XSS vulnerability in anyboard.cgi in Netbula Anyboard 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tK parameter in a find command...
CVE-2006-0191
Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service null dereference via unspecified vectors involving the use of the find command on the "/proc" filesystem. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to...
Design/Logic Flaw
Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service null dereference via unspecified vectors involving the use of the find command on the "/proc" filesystem. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to...
CVE-2006-0191
Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service null dereference via unspecified vectors involving the use of the find command on the "/proc" filesystem. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to...
CVE-2006-0191: Undefined Security Weakness
Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service null dereference via unspecified vectors involving the use of the find command on the "/proc" filesystem. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to...
[SA18420] Sun Solaris "/proc" Filesystem Searching Denial of Service Vulnerability
TITLE: Sun Solaris "/proc" Filesystem Searching Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18420 VERIFY ADVISORY: http://secunia.com/advisories/18420/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: Sun Solaris 10 http://secunia.com/product/4813/ DESCRIPTION: ...
CVE-2005-4292
CVE-2005-4292 affects CommerceSQL 1.0 and earlier. Vulnerable due to cross-site scripting via unspecified search module parameters, possibly the keywords parameter in Quick Find, enabling remote injection of arbitrary script/HTML. No remediation details or exploit status provided in the connected...
CVE-2005-4292
Cross-site scripting XSS vulnerability in CommerceSQL 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keywords parameter in the Quick Find feature...
CVE-2005-4292: Undefined Security Weakness
Cross-site scripting XSS vulnerability in CommerceSQL 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keywords parameter in the Quick Find feature...
CVE-2004-2603: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the Search module in UberTec Help Center Live HCL allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php...
BSD Command Shell, Find Tag Stager
Spawn a command shell staged. Use an established connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework FindTag ------- BSD find tag stager. module MetasploitModule CachedSize = 40 include Msf::Payload::Stager def...
VNC Server (Reflective Injection), Find Tag Ordinal Stager
Inject a VNC Dll via a reflective loader staged. Use an established connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 92 include Msf::Payload::Stager include...
Windows Meterpreter (Reflective Injection), Find Tag Ordinal Stager
Inject the Meterpreter server DLL via the Reflective Dll Injection payload staged. Requires Windows XP SP2 or newer. Use an established connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModul...
Windows Meterpreter (skape/jt Injection), Find Tag Ordinal Stager
Inject the meterpreter server DLL staged. Use an established connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 92 include Msf::Payload::Stager include Msf::Payload::Window...
Reflective DLL Injection, Find Tag Ordinal Stager
Inject a DLL via a reflective loader. Use an established connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 92 include Msf::Payload::Stager include Msf::Payload::Windows de...
Linux Mettle x86, Find Tag Stager
Inject the mettle server payload staged. Use an established connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework FindTag ------- Linux find tag stager. module MetasploitModule CachedSize = 37 include...