6231 matches found
PT-2009-2819 · Tenable +1 · Nessus Attack Scripting Language Library +1
Name of the Vulnerable Software and Affected Versions: Nessus Attack Scripting Language library aka libnasl version 2.2.11 Description: The issue concerns a potential problem in the Nessus Attack Scripting Language library where the return value from the OpenSSL DSA do verify function is not...
PT-2009-1143
Name of the Vulnerable Software and Affected Versions MD5 affected versions not specified Description The MD5 Message-Digest Algorithm lacks collision resistance, making it easier for attackers to conduct spoofing attacks. This issue has been demonstrated through attacks on the use of MD5 in the...
PT-2008-5543 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 7 Description: A remote code execution issue exists due to the way Internet Explorer accesses a deleted object, allowing attackers to execute arbitrary code via a crafted HTML document that triggers memory...
Debian DSA-1602-1 : pcre3 - buffer overflow
Tavis Ormandy discovered that PCRE, the Perl-Compatible Regular Expression library, may encounter a heap overflow condition when compiling certain regular expressions involving in-pattern options and branches, potentially leading to arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network...
LibTiff 3.x - Double-Free Memory Corruption
LibTiff 3.x - Double-Free Memory Corruption source: https://www.securityfocus.com/bid/17733/info Applications using the LibTIFF library are prone to a double-free vulnerability; a fix is available. Attackers may be able to exploit this issue to cause denial-of-service conditions in affected...
PT-2008-2858 · D Link · D-Link Di-524
Name of the Vulnerable Software and Affected Versions: D-Link DI-524 router affected versions not specified Description: The issue is related to multiple buffer overflows in the web interface of the router. These buffer overflows can be triggered by a remote attacker sending a long username or an...
candypress-multi.txt
WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: CandyPress eCommerce suite Vendor: http://www.candypress.com/ Bugs: SQL Injection + XSS + Path Disclosure in CandyPress Vulnerable Version: 4.1.1.26 Exploit: Available Fix Available: Yes!, Update to 4.1.1.27...
[CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure)
WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: CandyPress eCommerce suite Vendor: http://www.candypress.com/ Bugs: SQL Injection + XSS + Path Disclosure in CandyPress Vulnerable Version: 4.1.1.26 Exploit: Available Fix Available: Yes!, Update to 4.1.1.27...
CandyPress eCommerce suite 4.1.1.26 - Multiple Vulnerabilities
WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: CandyPress eCommerce suite Vendor: http://www.candypress.com/ Bugs: SQL Injection + XSS + Path Disclosure in CandyPress Vulnerable Version: 4.1.1.26 Exploit: Available Fix Available: Yes!, Update to 4.1.1.27...
Bloofox 0.3 (SQL/FD) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ==================================================== Bloofox 0.3 SQL/FD Multiple Remote Vulnerabilities ==================================================== WwW.BugReport.ir AmnPardaz Security Research Team Title:Bloofox CMS Vulnerabilitie...
MODx CMS 0.9.6.1 Multiple Remote Vulnerabilities
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com Bugs: Source code disclosure, local file inclusion Vulnerable Version: 0.9.6.1 prior versions also may be affected Exploitation: Remote with browser...
MODx CMS 0.9.6.1 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================ MODx CMS 0.9.6.1 Multiple Remote Vulnerabilities ================================================ AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com...
modxcms-lfi.txt
WwW.BugReport.ir AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com Bugs: Source code disclosure, local file inclusion Vulnerable Version: 0.9.6.1 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! - Description: quote...
PT-2007-6354 · Oracle +1 · Jdk +3
Name of the Vulnerable Software and Affected Versions: sun jdk affected versions not specified sun jre affected versions not specified sun sdk affected versions not specified Description: Potential security vulnerabilities have been identified in Java Runtime Environment JRE and Java Developer Ki...
NetClassifieds - SQL Injection Cross-Site Scripting Full Path
NetClassifieds - SQL Injection Cross-Site Scripting Full Path Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix...
NetClassifieds - SQL Injection / Cross-Site Scripting / Full Path
Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...
maran-xss.txt
Application: Maran Blog Web Site: http://www.maran.pamil-visions.com/maranblog.php Versions: no Version numbers could be found. Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: Yes Advisory File:http://www.secvsn.com/content/Advisories/sr-060607-maran.html...
Maran Blog XSS vulnerability
Application: Maran Blog Web Site: http://www.maran.pamil-visions.com/maranblog.php Versions: no Version numbers could be found. Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: Yes Advisory File:http://www.secvsn.com/content/Advisories/sr-060607-maran.html...
atomphotoblog-xss.txt
Application: Atom Photoblog Web Site: http://atomphotoblog.ilenvo.de/ Versions: 1.0.9 and below Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: Yes Advisory File: http://www.secvsn.com/content/Advisories/sr-060607-atomphotoblog.html...
PT-2007-3745 · Unknown · Seir Anphin
Name of the Vulnerable Software and Affected Versions: Seir Anphin affected versions not specified Description: A directory traversal issue in modules/file.php allows remote attackers to obtain sensitive information via a .. dot dot in the afilepath parameter. Note that a third party has disputed...