Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion

=================================================================================================================== o Joomla Component Gadget Factory Local File Inclusion Vulnerability Software : comgadgetfactory version 1.0.0 Vendor : http://www.thefactory.ro/ Author : AntiSecurity NoGe Vrs-hCk...

Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion

Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion =================================================================================================================== o Joomla Component Gadget Factory Local File Inclusion Vulnerability Software : comgadgetfactory version 1.0.0 Vendor :...

Mozilla Code *sighs*

Mozilla Code sighs I reported a memory corruption vulnerability in Mozilla Codesighs, a "set of tools to help you determine the code and data size of shared libraries and executables. Once you can measure the code and data size, then you can measure drifts in size as code changes occur". Mozilla...

Microsoft Windows Vista Feed Headlines Gadget Code Execution (MS07-048; CVE-2007-3033)

Gadgets are mini applications with a variety of possible uses. They can connect to web services to deliver business data, weather information, news updates, traffic maps, Internet radio streams, and even slide shows of on-line photo albums. Windows Vista is shipped with a set of gadgets, includin...

CVE-2008-7037

The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...

Sql injection

The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...

CVE-2008-7037

The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...

CVE-2008-7037

The CVE-2008-7037 entry affects the ITN News Gadget (ITN Hub Gadget) 1.06 for Windows Vista and possibly earlier versions up to 1.23. Affected component: the gadget’s short_title response, where an attacker-controlled remote server or MITM can inject script to execute arbitrary commands on the us...

Microsoft Windows Vista Weather Gadget vulnerability

Overview The Windows Vista Weather gadget contains a vulnerability that may allow and attacker to execute code. Description From Microsoft Security Bulletin MS07-048:Gadgets are mini-applications designed to provide the user with information or utilities. Windows Vista treats gadgets similar to t...

Microsoft Windows Vista Contacts Gadget vulnerability

Overview The Windows Vista Contacts gadget contains a vulnerability that may allow an attacker to execute code. Description From Microsoft Security Bulletin MS07-048:Gadgets are mini-applications designed to provide the user with information or utilities. Windows Vista treats gadgets similar to t...

Microsoft Security Bulletin MS07-048 - Important Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution (938123)

Microsoft Security Bulletin MS07-048 - Important Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution 938123 Published: August 14, 2007 Version: 1.0 General Information Executive Summary This important security update resolves two privately reported vulnerabilities in addition to...

Design/Logic Flaw

Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...

CVE-2007-3032

Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...

CVE-2007-3032

Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...

CVE-2007-3032

CVE-2007-3032 is a Windows Vista vulnerability in the Contacts Gadget that could allow remote code execution when a user imports specially crafted contact data. The issue, described across multiple sources, arises from insufficient validation of imported contact information, enabling code executi...

Hacker chickens concealed the whereabouts of the Let account stealth-vulnerability warning-the black bar safety net

Analyzing a hack whether excellent, not a single look at his of the invasion means, whether smart, more important is to see he won't be hiding their whereabouts. I believe we have mastered a variety of invasion means that the hands control the broiler also everywhere is. However, your stealth...

Debian DSA-1097-1 : kernel-source-2.4.27 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0038 'Solar Designer' discovered that arithmet...

Debian DSA-1103-1 : kernel-source-2.6.8 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3359 Franz Filz discovered that some socket...

CVE-2006-5228

Multiple SQL injection vulnerabilities in the Google Gadget login.php gadget/login.php in Rob Hensley ackerTodo 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uplogin, 2 uppass, or 3 upnumtasks parameters...

CVE-2006-5228

CVE-2006-5228 refers to multiple SQL injection vulnerabilities in the Google Gadget login.php (gadget/login.php) for Rob Hensley appckerTodo 4.2 and earlier. The vulnerable component is the login script (up_login, up_pass, up_num_tasks parameters) that allows remote attackers to execute arbitrary...