CVE-2012-1328

Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 are affected by a code/injection vulnerability in the handling of configuration data downloads to an RT phone, allowing local users to gain privileges via injected data (Bug ID CSCts32237). The issue is triggered by improper pr...

Unfixed XSS vulnerability at www.nordkeyboards.com

Security researcher wutsec, has submitted on 04/02/2012 a cross-site-scripting XSS vulnerability affecting www.nordkeyboards.com, which at the time of submission ranked 306769 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/02/2012. It is...

Cross Application Scripting vulnerability in Android browser

Cross Application Scripting vulnerability in Android browser Recently IBM researchers detected a security vulnerability in Android's Browser which can be exploited by a non-privileged application in order to inject JavaScript code into the context of any domain.This vulnerability has the same...

CVE-2011-2626

CVE-2011-2626 affects Opera browsers prior to 11.50, where an injected script could set the SRC attribute of an IFRAME, causing an application crash (DoS). Multiple vendor advisories reiterate the issue and reference Opera’s fixed release paths. Affected: Opera before 11.50; Impact: denial of ser...

CVE-2011-0761

Perl 5.10.x allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash by leveraging an ability to inject arguments into a 1 getpeername, 2 readdir, 3 closedir, 4 getsockname, 5 rewinddir, 6 tell, or 7 telldir function call...

Microsoft Internet Explorer TextRange Object Memory Corruption (MS08-045; CVE-2008-2255)

A memory corruption vulnerability exists in the way Microsoft Internet Explorer manages text. The vulnerability is due to an integer overflow error when storing text string, which leads to memory corruption in the browser. Remote unauthenticated attackers could exploit this vulnerability by...

SnowCade v3 SQL injection vulnerability-vulnerability warning-the black bar safety net

SnowCade v3 at presentSQL injectionattack vulnerability, can get administrator privileges http://127.0.0.1/index.php?action=browse&cat=injected statements http://127.0.0.1/index.php?action=playgame&gameid=injected statements http://127.0.0.1/index.php?action=browse&cat=injected statements Columns...

CVE-2010-0963

Cross-site scripting XSS vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers to inject arbitrary web script or HTML via the t parameter, related to an invalid ticket ID. NOTE: some of these details are obtained from third party information...

libpng Transparency Chunk Length Buffer Overflow (CVE-2004-0597)

The Portable Network Graphics PNG specification defines a datastream and an associated file format that provides a lossless, portable, image compression. libpng is a open source implementation of the PNG specification. A vulnerability exists in the way libpng handles the transparency chunk of a P...

CVE-2009-4196

Multiple cross-site scripting XSS vulnerabilities in multiple scripts in Forms/ in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 allow remote attackers to inject arbitrary web script or HTML via the 1 BackButton parameter to error1; 2 wzConnFlag parameter to freshpppoe1; 3...

Mozilla Firefox Chrome Page Loading Restriction Bypass (CVE-2005-2706)

The Firefox and Mozilla web browsers are applications designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so on. The web browser implements security restrictions on the execution of scripts and access to certain resources based on the orig...

Alleycode HTML Editor 2.2.1 - Local Buffer Overflow

Alleycode HTML Editor 2.2.1 - Local Buffer Overflow !/usr/bin/env python Alleycode HTML Editor 2.21 Local .HTML Overflow Exploit SEH Coded By: DrIDE Found By: Rafael de Sousa Tested On: XPSP0 SP3 doesn't have any usable P/P/R Download: www.alleycode.com calc.exe - 303 bytes Encoder - alpha/upper...

News website management system vulnerability-vulnerability warning-the black bar safety net

News website management system vulnerabilities author: xk8888888 This system has N of the Year Edition,General government, schools and enterprises with much more, Special permit: to display news NewsView. asp? NewsID= Login login. asp? id=3,The main special permit is available one has a EDIT the...

Unfixed XSS vulnerability at www.journaux.fr

Security researcher xylitol, has submitted on 17/06/2008 a cross-site-scripting XSS vulnerability affecting www.journaux.fr, which at the time of submission ranked 108659 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is current...

PHP Webquest 2.5 - id_actividad SQL Injection

PHP Webquest 2.5 - idactividad SQL Injection / script name : phpwebquest script version : 2.5 script website : http://phpwebquest.org Bug Finder : D4realTeaM 'unkn0wnX','n3t-mapper','ToxiC350'; injected file : webquest/soportederechaw.php Variable : idactividad Contact : n3t-mapp3r At hotmail dot...

Mercur Messaging 2005 <= SP4 IMAP Remote Exploit (egghunter mod)

No description provided by source. !/usr/bin/python Mercur Messaging 2005 SP3 IMAP service - Egghunter mod [email protected] http://www.offensive-security.com Original exploit by Winny Thomas Thanks Thomas, this code really came in handy ! VMWare seems to alter the stack a bit as the...

DSA-1066-1 phpbb2 - missing input sanitising

Bulletin has no description...

Shbablek Mail Vulnerablitiy - Cross-Site Scripting

Shbablek Mail Vulnerablitiy - Cross-Site Scripting by n0m3rcy Copyright c 2006 n0m3rcy [email protected] Exploit: i in the Already have an account? ia Account name: scriptalert1/script ib Password: scriptalert1/script Shoutz: cijfer , dag , devil-00 , q-ex and all my friends have phun!...

Code injection

Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allows remote attackers to execute arbitrary commands via a leading ; semicolon in the name parameter in a systemdoc action, which is injected into phpinfo.php...

CVE-2006-0296

The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file...