CVE-2022-35950

OroCommerce is an open-source Business to Business Commerce application. In versions 4.1.0 through 4.1.13, 4.2.0 through 4.2.10, 5.0.0 prior to 5.0.11, and 5.1.0 prior to 5.1.1, the JS payload added to the product name may be executed at the storefront when adding a note to the shopping list line...

Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin does not sanitise the 'Text Next to Icon' field when adding or editing a Characteristic, allowing high privilege users such as admin to use XSS payload in it, leading to an authenticated Stored Cross-Site Scripting issue Add or Edit a Characteristic...

MDaemon Webmail 跨站脚本漏洞

MDaemon Webmail is a server-side application for providing mail services from MDaemon, Inc. in the United States. A cross-site scripting vulnerability exists in MDaemon webmail 19.5.5, which allows attackers to execute code and XSS attacks while opening a contact list...

ScriptFTP 3.3 - Remote Buffer Overflow (LIST) (1)

ScriptFTP 3.3 - Remote Buffer Overflow LIST 1 Exploit Title: ScriptFTP Yes, this poc is using PASSIVE connection and it will take some time to establish. I love the way we wait...

Windows Live Messenger 8.0 Heap Overflow

Windows Live Messenger 8.0 Contact List .ctt Heap Overflow /////////////////////////////////////////////// // by: JAAScois // www.jaascois.com 25/06/2006 // // Exploit at: 0x0076228A = kernel32.FormatMessageW // Example: // download .ctt file :...

Yahoo! Messenger 5.x6.0 - Offline Mode Status Remote Buffer Overflow

Yahoo! Messenger 5.x6.0 - Offline Mode Status Remote Buffer Overflow source: https://www.securityfocus.com/bid/12750/info It has been reported that a remote buffer overflow vulnerability affects Yahoo! Messenger. This issue is due to a failure of the application to securely copy user-supplied inp...

eGroup.mailing.lists.txt

Date: Sat, 24 Apr 1999 08:59:19 +0300 From: Philip Stoev To: [email protected] Subject: eGROUPS security flaw eGROUPS wwww.egroups.com is a web site providing mailing list services. The mailing lists aka groups can be moderated, and the moderator can approve/revoke posted messages by sending...