5024 matches found
CentOS Update for thunderbird CESA-2009:1126 centos5 i386
Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2009:1126 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
SQueRT 0.9.0 - New version released
SQueRT 0.9.0 - New version released CHANGELOG: tabbed interface date ribbon CSS/JS fixes and cleanup Bunch of new stuff Download SQueRT 0.9.0...
SQueRT 0.9.0 - New version released
SQueRT 0.9.0 - New version released CHANGELOG: tabbed interface date ribbon CSS/JS fixes and cleanup Bunch of new stuff Download SQueRT 0.9.0...
Wordpress Audio Player v2.0b6 - Web Vulnerability
Document Title: =============== Wordpress Audio Player v2.0b6 - Web Vulnerability Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 84 Product & Service Introduction: =============================== Wordpress Audio Player Plugin/Addon...
WeBid 1.0.2 - Persistent Cross-Site Scripting (via SQL Injection)
WeBid 1.0.2 - Persistent Cross-Site Scripting via SQL Injection Exploit Title: presistent XSS through SQLi WeBid 1.0.2 Google Dork: "powered by WeBid" Date: 15-06-2011 Author: Saif El-Sherei Software Link: http://sourceforge.net/projects/simpleauction/ Version: 1.0.2 Tested on: Firefox 4, XAMPP...
CVE-2010-4794
Multiple cross-site scripting XSS vulnerabilities in the JoomlaSeller JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 month and 2 year parameters in a jscalendar action to index.php. NOTE: some of these detail...
CVE-2010-4795
SQL injection vulnerability in the JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the evid parameter in a details action to index.php. NOTE: some of these details are obtained from third party information...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the JoomlaSeller JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 month and 2 year parameters in a jscalendar action to index.php. NOTE: some of these detail...
Sql injection
SQL injection vulnerability in the JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the evid parameter in a details action to index.php. NOTE: some of these details are obtained from third party information...
CVE-2010-4794
Multiple cross-site scripting XSS vulnerabilities in the JoomlaSeller JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 month and 2 year parameters in a jscalendar action to index.php. NOTE: some of these detail...
CVE-2010-4794
Summary (CVE-2010-4794) : The Joomla! component JoomlaSeller JS Calendar (com_jscalendar) for Joomla! versions 1.5.1 and 1.5.4 contains multiple XSS vulnerabilities. An attacker can inject arbitrary JavaScript/HTML via the (1) month and (2) year parameters in a jscalendar action to index.php, ena...
CVE-2010-4795
CVE-2010-4795: A SQL injection vulnerability affects the Joomla! JS Calendar (com_jscalendar) component versions 1.5.1 and 1.5.4. The flaw allows remote attackers to execute arbitrary SQL commands via the ev_id parameter in a details action to index.php. Underlying issue is improper handling of u...
CVE-2010-4795
SQL injection vulnerability in the JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the evid parameter in a details action to index.php. NOTE: some of these details are obtained from third party information...
Host-Extract - Host/IP Pattern Extractor Tool !
Host-Extract - Host/IP Pattern Extractor Tool ! This little ruby script tries to extract all IP/Host patterns in page response of a given URL and JavaScript/CSS files of that URL. With it, you can quickly identify internal IPs/Hostnames, development IPs/ports, cdn, load balancers, additional...
ClubHack : CHMag Issue 14th, March 2011 Download !
ClubHack : CHMag Issue 14th, March 2011 Download ! Description: 14th issue of ClubHACK magazine is out. Contents of this issue: Tech Gyan - Remote Thread Execution in System Process Tool Gyan - JS Recon: Java Script Network Reconnaissance Tool Mom's Guide - Choosing Right Secure Mobile Legal Gyan...
Anonymous Hackers announce Operation Italy ( #OPITALY ) on 13.02.2011 at 9am GMT (10.00 italian time)
Anonymous Hackers announce Operation Italy OPITALY on 13.02.2011 at 9am GMT 10.00 italian time Press Release : Operation Iran - Press release by Anonymous Hackers LOIC : Mobile/Js LOIC : Reasons : Cables : Source : Google...
webkitgtk security update
1.2.6-2 - Added fix for js regression 1.2.6-1 - Update to 1.2.6...
Xinhua enterprise web site management system v4. 0 XSS0day add administrator and patch-vulnerability warning-the black bar safety net
From:B0mbErM@n Description:online repair function is not to submit the filter Analysis:xiu. asp not be submitted to the filter, resulting in execution of arbitraryXSSstatement. Patch:filter Exp: ../xiu. the asp directly into the repair, then at the contact address written on the SCRIPT...
Joomla JSupport 1.5.6 Cross Site Scripting
Exploit Title: Joomla Component comjsupport Critical XSS Vulnerability Date: 12.11.2010 Author: Valentin Category: webapps/0day Version: 1.5.6 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title =...
Joomla! Component JSupport 1.5.6 - Cross-Site Scripting
Joomla! Component JSupport 1.5.6 - Cross-Site Scripting Exploit Title: Joomla Component comjsupport Critical XSS Vulnerability Date: 12.11.2010 Author: Valentin Category: webapps/0day Version: 1.5.6 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...