2905 matches found
Microsoft .NET Framework Pointer Verification Remote Code Execution Vulnerability
Description The .NET Framework is prone to a remote code-execution vulnerability because it fails to properly verify .NET applications before running them. Successful exploits may allow an attacker to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks will...
CVE-2009-3647
Cross-site scripting XSS vulnerability in emaullinks.php in YABSoft Mega File Hosting Script aka MFH or MFHS 1.2 allows remote attackers to inject arbitrary web script or HTML via the moudi parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
Cross site scripting
Cross-site scripting XSS vulnerability in emaullinks.php in YABSoft Mega File Hosting Script aka MFH or MFHS 1.2 allows remote attackers to inject arbitrary web script or HTML via the moudi parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2009-3647
Cross-site scripting XSS vulnerability in emaullinks.php in YABSoft Mega File Hosting Script aka MFH or MFHS 1.2 allows remote attackers to inject arbitrary web script or HTML via the moudi parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2009-3647
CVE-2009-3647 describes a cross-site scripting (XSS) vulnerability in the YABSoft Mega File Hosting Script (MFH/MFHS) 1.2, where an attacker can inject arbitrary web script or HTML via the moudi parameter in emaullinks.php. The evidence in connected sources confirms the affected component and the...
PHP 5.2.11, 5.3.0 Multiple Restriction-Bypass Vulnerabilities
PHP is prone to a SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100281"...
PHP <=5.3 - preg_match() full path disclosure
Exploit for unknown platform in category remote exploits ============================================= PHP =5.3 - pregmatch full path disclosure ============================================= Title: PHP =5.3 - pregmatch full path disclosure CVE-ID: OSVDB-ID: Author: David Vieira-Kurz Published:...
PHP 5.3 - preg_match() Full Path Disclosure
PHP 5.3 - pregmatch Full Path Disclosure MajorSecurity Advisory 57PHP =5.3 - pregmatch full path disclosure Details ======= Product: PHP =5.3 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============...
Google: Cooperation Needed to Combat Malicious Ads
GENEVA — A more comprehensive and serious level of cooperation among industry leaders is needed to help stop the scourge of malicious Web ads and botnets that result from the infected PCs, a top Google executive said Wednesday. Eric Davis, the head of anti-malvertising at Google, speaking to a...
nginx 0.7.61 WebDAV directory traversal
Exploit for unknown platform in category remote exploits ======================================= nginx 0.7.61 WebDAV directory traversal ======================================= Title: nginx 0.7.61 WebDAV directory traversal CVE-ID: OSVDB-ID: Author: Kingcope Published: 2009-09-23 Verified: yes vi...
Nginx 0.7.61 - WebDAV Directory Traversal
Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and the user has to have permission to u...
mozilla-firefox
New mozilla-firefox packages are available for Slackware 12.2, 13.0, and -current to fix security issues. The Firefox 3.0.14 package may also be used with Slackware 11.0 or newer. More details about the issues may be found on the Mozilla website:...
Apache Site Hacked Through SSH Key Compromise
The main site of the Apache Software Foundation was compromised on Friday through an attack using a compromised SSH key, leading to concerns about the integrity of copies of the hugely popular Apache Web server, which is distributed through the Apache.org site. Early Friday morning EDT, a message...
Geeklog <= 1.6.0sr1 Remote Arbitrary File Upload Vulnerability
No description provided by source. ============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml...
Geeklog 1.6.0sr1 - Arbitrary File Upload
Geeklog 1.6.0sr1 - Arbitrary File Upload ============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml...
Geeklog <= 1.6.0sr1 Remote Arbitrary File Upload Vulnerability
Exploit for unknown platform in category web applications ============================================================== Geeklog = 1.6.0sr1 Remote Arbitrary File Upload Vulnerability ==============================================================...
Geeklog 1.6.0sr1 - Arbitrary File Upload
============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml...
Geeklog 1.6.0sr1 File Upload
============================================================================== Geeklog with the URL of the Geeklog site. Opens an interactive browser session where you can create directories and upload files. This also exposes all the files in the images/Library/File|Image|Media|Flash directories...
Geeklog <- 1.6.0sr1 - Remote Arbitrary File Upload
============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml...
Sql injection
Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers to execute arbitrary SQL commands via a 1 cookid or 2 cookgid cookie...