Wiki Web Help 0.2.7 Cross Site Scripting

------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Persistent/Reflected XSS Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010 Tested On...............Windows Vista...

Wiki Web Help 0.2.7 Shell Upload

------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Arbitrary Upload Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010 Tested On...............Windows Vista + XAMPP...

Bit Weaver v2.7 Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================== Bit Weaver v2.7 Local File Inclusion Vulnerability ================================================== ------------------------------------------------------------------------...

Vulnerabilitiy in extension Frontend User Registration (sr_feuser_register)

It has been discovered that the extension Frontend User Registration srfeuserregister is susceptible to Cross Site Scripting XSS attacks. Component Type: Third party extension. This extensions is not part of the TYPO3 default installation. Affected Versions: Version 2.5.24 and all versions below...

SA-CONTRIB-2010-023 - Workflow - Cross Site Scripting

When used in combination with the Token module, the Workflow module does not escape the text entered into the Comment field of the workflow fieldset on the node form. This allows a user with the permission to change the workflow state of a node to perform a Cross Site Scripting XSS attack if a...

Darkmarket Founder Gets 56 Months in Jail

Renukanth Subramaniam, 33, who had previously plead guilty was sentenced to 46 months for conspiracy to defraud and 10 months for five counts of mortgage fraud, the terms to run consecutively. Also sentenced was Darkmarket user John McHugh, 66, who had the sign in “Devilman” and created fake cred...

Safari 4.0.4 (531.21.10) - Stack Overflow/Run Denial of Service

Exploit for unknown platform in category dos / poc =============================================================== Safari 4.0.4 531.21.10 - Stack Overflow/Run Denial of Service =============================================================== !/usr/bin/perl Safari 4.0.4 531.21.10 - Stack Overflow/r...

Safari 4.0.4 (531.21.10) - Stack Overflow/Run Denial of Service

No description provided by source. !/usr/bin/perl Safari 4.0.4 531.21.10 - Stack Overflow/run 0Day DoS POC by John Cobb - www.NoBytes.com - 20/01/2010 - v1.0 Tested on WinXP 32bit SP3 Magic Numbers: 114516 - 114718 : Safari quits without error 114719 : Safari quits with illegal operation: AppName...

SLAD fastjohn Run

This script connects to SLAD on a remote host to run remote john password scanner in fastmode. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS...

SLAD fastjohn Run

This script connects to SLAD on a remote host to run remote john password scanner in fastmode. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. Copyright C...

ZDI-10-009: RealNetworks RealPlayer IVR Format Remote Code Execution Vulnerability

ZDI-10-009: RealNetworks RealPlayer IVR Format Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-009 January 21, 2010 -- CVE ID: CVE-2009-0376 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

Exploit Easy RM to MP3 2.7.3.700 - Ruby

Exploit for unknown platform in category local exploits ======================================= Exploit Easy RM to MP3 2.7.3.700 - Ruby ======================================= Title: Exploit Easy RM to MP3 2.7.3.700 - Ruby CVE-ID: OSVDB-ID: Author: John Babio Published: 2009-12-24 Verified: yes...

SA-CONTRIB-2009-080 - Simplenews Statistics - Multiple vulnerabilities

The Simplenews Statistics module provides newsletter statistics such as the open rate and CTR click-through rate. The module suffers multiple vulnerabilities, including Cross Site Request Forgeries CSRF, Cross Site Scripting problem Cross Site Scripting and Open Redirect. This problem allows an...

SA-CONTRIB-2009-079 - vCard - Cross Site Scripting

The vCard module adds a vCard download link to every user's profile. This link makes it easy to add users from a Drupal site to a local address book. When the themevcard function is added to a theme and default content from the vCard module is output, the site will be vulnerable to Cross Site...

Fedora Core 11 FEDORA-2009-7498 (mumbles)

The remote host is missing an update to mumbles announced via advisory FEDORA-2009-7498. OpenVAS Vulnerability Test $Id: fcore20097498.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7498 mumbles Authors: Thomas Reinke Copyright: Copyright c 2009...

SA-CONTRIB-2009-044 - Bubbletimer - Multiple vulnerabilities

Bubbletimer allows users to create timesheets based on nodes. It suffers from a cross-site scripting XSS vulnerability due to not properly sanitizing node titles before they are displayed. It is also vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly add...

Unfixed XSS vulnerability at www.johncassidyphoto.co.uk

Security researcher Xylitol, has submitted on 06/10/2009 a cross-site-scripting XSS vulnerability affecting www.johncassidyphoto.co.uk, which at the time of submission ranked 2684397 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/2010. I...

Staying safe online: The need for cybersecurity

On the day that President Obama releases a cybersecurity policy review, hear from experts and officials in the field. This video features Janet Napolitano, Secretary of Homeland Security; William Pelgrin, Chief Cybersecurity Officer of New York; John Thompson, CEO of Symantec; Leslie Harris of th...

SA-CONTRIB-2009-025 - Fivestar - Cross-site request forgery

The Fivestar module provides a voting widget for content and records votes using Ajax. The URL used by the javascript to register votes is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Fivestar 5.x-1.x prior to...

Fedora Update for R FEDORA-2008-7619

Check for the Version of R OpenVAS Vulnerability Test Fedora Update for R FEDORA-2008-7619 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...