981 matches found
'Let's Do Security That Matters'
NEW YORK–A small group of influential security researchers and executives are putting together a grass-roots movement to encourage more research on the emerging breed of connected and potentially vulnerable devices such as pacemakers, insulin pumps and others and help educate users about the...
CVE-2013-5118 - XSS Good for Enterprise iOS
Hello, Last month I identified a XSS vulnerability in the Good for Enterprise iOS application. The vulnerable versions are v2.2.2.1611 and earlier Proof of Concept: HTML Email including the following payload will execute Javascript statements when the victim open the email using the vulnerable...
CVE-2013-5118
Cross-site scripting XSS vulnerability in the Good for Enterprise app before 2.2.4.1659 for iOS allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail message...
Cross site scripting
Cross-site scripting XSS vulnerability in the Good for Enterprise app before 2.2.4.1659 for iOS allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail message...
CVE-2013-5118
The CVE-2013-5118 entry describes a Cross-site Scripting (XSS) vulnerability in the Good for Enterprise iOS app. Affected versions are up to 2.2.4.1659 with the issue triggered by HTML email messages that can inject arbitrary script/HTML. The root cause is an HTML email handling flaw in Good for ...
CVE-2013-5118
Cross-site scripting XSS vulnerability in the Good for Enterprise app before 2.2.4.1659 for iOS allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail message...
Good for Enterprise 2.2.2.1611 - Cross-Site Scripting
Good for Enterprise 2.2.2.1611 - Cross-Site Scripting The vulnerable versions are v2.2.2.1611 and earlier Proof of Concept: HTML Email including the following payload will execute Javascript statements when the victim open the email using the vulnerable version. Payload: alert'XSS Here'...
Good For Enterprise 2.2.2.1611 Cross Site Scripting
Hello, Last month I identified a XSS vulnerability in the Good for Enterprise iOS application. The vulnerable versions are v2.2.2.1611 and earlier Proof of Concept: HTML Email including the following payload will execute Javascript statements when the victim open the email using the vulnerable...
Oracle Linux 5 : gstreamer-plugins-good (ELSA-2009-1123)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1123 advisory. 0.10.9-1.el5.2 - CVE-2009-1932: Integer overflow in PNG decoder. Tenable has extracted the preceding description block directly from the Oracle Linux security...
PHP Ticket System Beta 1 - Cross-Site Request Forgery
PHP Ticket System Beta 1 - Cross-Site Request Forgery 1. 2. 3. + Exploit Title : php ticket system csrf 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = BETA 1 8. + Tested on : windows/internet explorer 9. + Details:...
AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery
Exploit Title : AfterLogic WebMail Lite PHP CSRF 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = 7.0.1 8. + Tested on : windows/internet explorer 9. + Details: Reset admin password via CSRF 10. + Vendor:...
Scientific Linux Security Update : gstreamer-plugins-good on SL5.x i386/x86_64
Multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov file that would cause an application using GStreamer to crash or, potentially, execute arbitrary...
Scientific Linux Security Update : gstreamer-plugins-good on SL5.x i386/x86_64
Multiple integer overflow flaws, that could lead to a buffer overflow, were found in the GStreamer Good Plug-ins PNG decoding handler. An attacker could create a specially crafted PNG file that would cause an application using the GStreamer Good Plug-ins library to crash or, potentially, execute...
CentOS Update for gstreamer-plugins-good CESA-2009:1123 centos5 i386
Check for the Version of gstreamer-plugins-good OpenVAS Vulnerability Test CentOS Update for gstreamer-plugins-good CESA-2009:1123 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
CentOS Update for gstreamer-plugins-good CESA-2009:1123 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Ecommercemax Solutions Digital good seller Sql Injection Vulnerablity
Exploit for asp platform in category web applications ===================================================================== Ecommercemax Solutions Digital good seller Sql Injection Vulnerablity =====================================================================...
ProFTPd 1.3.3c - Compromised Source Backdoor Remote Code Execution
== ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC the main distribution server of the ProFTPD project was compromised. The attackers most likely used an unpatched security issue in the FTP daemon to gain access to the server and used their privileges to replace...
CVE-2009-4683
Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action. NOTE: some of these details are obtained from third party information...