CVE-2010-2802

Cross-site scripting XSS vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments...

Memory corruption

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to the rendering...

CVE-2010-1782

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to the rendering...

CVE-2010-1782

Removed by vendor...

openSUSE Security Update : w3m (openSUSE-SU-2010:0393-1)

w3m did not handle embedded nul characters in the common name and in subject alternative names of x509 certificates. CVE-2010-2074 has been assigned to this issue. This update also turns on verification of x509 certificates by default which was not the case before. %NASLMINLEVEL 70300 C Tenable...

Fedora 12 : samba-3.4.5-55.fc12 (2010-1218)

Tue Jan 26 2010 Guenther Deschner - 3.4.5-55 - Security Release, fixes CVE-2009-3297 - resolves: 532940 - Tue Jan 26 2010 Guenther Deschner - 3.4.5-54 - Fix crash in pdbedit - resolves: 541267 - Tue Jan 19 2010 Guenther Deschner - 3.4.5-53 - Update to 3.4.5 - Thu Jan 14 2010 Guenther Deschner -...

Directory traversal

Directory traversal vulnerability in iChat in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, when AIM is used, allows remote attackers to create arbitrary files via directory traversal sequences in an inline image-transfer operation...

DEBIAN-CVE-2009-2936

The Command Line Interface aka Server CLI or administration interface in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to 1 execute arbitrary code via a vcl.inline...

PT-2010-1279 · Varnish · Varnish

Name of the Vulnerable Software and Affected Versions: Varnish versions prior to 2.1.0 Description: The Command Line Interface in the master process of the reverse proxy server does not require authentication for commands received through a TCP port. This allows remote attackers to execute...

Talking about the Ring0 privilege of obtain-vulnerability warning-the black bar safety net

Recently been trying to write a program to kill 3 6 0, but encountered a lot of trouble, even if elevated, the 能干 掉 Winlogon.exe 也 干 不 掉 360tray.exe depressed for half a day. Don't know 3 6 0 what weird means. Then find the Find the previous comparison of the bovine X-virus Panda burning incense...

Windows x64 Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell Windows x64 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 505 include Msf::Payload::Windows include Msf::Payload::Single include...

CVE-2009-2242

SQL injection vulnerability in activeappointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2009-2241

Cross-site scripting XSS vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

Sql injection

SQL injection vulnerability in activeappointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2009-2241

The CVE-2009-2241 issue is an XSS vulnerability in the ASP Inline Corporate Calendar’s search.asp, exploitable via the keyword parameter. The affected component is the search function within the ASP Inline Corporate Calendar application; the underlying cause is improper handling of user-supplied ...

CVE-2009-2242

The CVE-2009-2242 entry describes a SQL injection vulnerability in active_appointments.asp of the ASP Inline Corporate Calendar. The flaw allows remote attackers to inject arbitrary SQL commands via the order parameter, potentially compromising the underlying database. The vulnerability is docume...

CVE-2009-2242

SQL injection vulnerability in activeappointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2009-2243

The CVE-2009-2243 vulnerability affects the ASP Inline Corporate Calendar, specifically the active_appointments.asp component. The root cause is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the sortby parameter. This could lead to data exposure...

ASP Inline Corporate Calendar (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. + Script : ASP Talk + Exploit Type : Multiple Exploits SQL/CSS + Google Dork : intitle:"ASP inline corporate calendar" inurl:.asp?id= + Contact : blackbeard-sql A.T hotmail.fr --//-- Exploit : 1Cross site scripting :...

ASP Inline Corporate Calendar (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= ASP Inline Corporate Calendar SQL/XSS Multiple Remote Vulnerabilities =======================================================================...