Rename vulnerability in ourphp v1.8.0

Ourphp website building system is a php+mysql website building system. ourphp v1.8.0 version exists renaming vulnerability, the attacker will Trojan horse code injected into the edited file, rename the file as an executable script file, so as to obtain the website webshell...

Out-of-Bounds Write

OpenCV is vulnerable to out-of-bounds write. A malicious user can pass an image to the FillColorRow8 function in the utils.cpp to cause an out-of-bounds write that could cause injected code to be executed or to crash the application...

atmail Cross-Site Scripting Vulnerability

atmail is an open source WebMail client from Australia's atmail company , which provides a Webmail interface , address book management , calendars and other features , and supports IMAP, video mail and so on. A cross-site scripting vulnerability exists in versions of atmail prior to 7.8.0.2. A...

Opsview <= 4.6.2 - Multiple XSS Vulnerabilities

Exploit for php platform in category web applications Exploit title: Opsview 4.6.2 - Multiple XSS Date: 07-06-2015 Vendor homepage: www.opsview.com Version: 4.6.2 CVE: CVE-2015-4420 Author: Dolev Farhi @dolevf Tested On: Kali Linux + Windows 7 Details: -------- Opsview is a monitoring system base...

EasyCTF Cross-Site Scripting Vulnerability

EasyCTF is a CGI program for scoring CTFs. EasyCTF suffers from an unspecified cross-site scripting vulnerability that could be exploited by remote attackers to inject malicious script or HTML code, which could be used to gain access to sensitive information or hijack user sessions when malicious...

[PyMal] The Malware Analysis Framework

PyMal is a python based interactive Malware Analysis Framework. It is built on the top of three pure python programes Pefile, Pydbg and Volatility. The main aim of the project is to combine all the Malware Analysis related tools into a single interface for rapid analysis. PyMal have several wrapp...

Firefox < 15.0 Multiple Vulnerabilities

The installed version of Firefox is earlier than 15.0 and thus, is potentially affected by the following security issues : - An error exists related to 'Object.defineProperty' and the location object and can allow cross-site scripting attacks. CVE-2012-1956 - Unspecified memory safety issues exis...

Microsoft Internet Explorer TextRange Object Memory Corruption (MS08-045; CVE-2008-2255)

A memory corruption vulnerability exists in the way Microsoft Internet Explorer manages text. The vulnerability is due to an integer overflow error when storing text string, which leads to memory corruption in the browser. Remote unauthenticated attackers could exploit this vulnerability by...

libpng Transparency Chunk Length Buffer Overflow (CVE-2004-0597)

The Portable Network Graphics PNG specification defines a datastream and an associated file format that provides a lossless, portable, image compression. libpng is a open source implementation of the PNG specification. A vulnerability exists in the way libpng handles the transparency chunk of a P...

DSA-1066-1 phpbb2 - missing input sanitising

Bulletin has no description...

CVE-2005-1894

Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing the code into the Referer header of an HTTP request, which causes the code to be injected into referer.php, which can then be accessed by the attacker...