MemHT Portal 4.0.1 Cross Site Scripting

!/usr/bin/perl MemHT Portal 4.0.1 Persistent Cross Site Scripting Vulnerability user agent by ZonTa - zontahackersatgmaildotcom After successful inject wait for the admin to view statistic page. Fix is available : http://www.memht.com/news149MemHT-Portal-4-0-2.html use Getopt::Std; use...

Joomla CCBoard 1.2-RC Cross Site Scripting / SQL Injection

Exploit Title: Joomla Component comccboard Multiple Vulnerabilities Date: 13 Nov 2010 Author: jdc Category: webapps/0day Version: 1.2-RC Download: http://codeclassic.org/the-downloads/joomla-extensionscomponents/292-ccboard-bulletin-board-forum.html Persistent XSS -------------- ccBoard doesn't...

Joomla Component ccBoard 1.2-RC Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================================== Joomla Component ccBoard 1.2-RC Multiple Vulnerabilities ======================================================== Exploit Title: Joomla Component comccboard Multiple Vulnerabilities Date...

Joomla! Component CCBoard 1.2-RC - Multiple Vulnerabilities

Joomla! Component CCBoard 1.2-RC - Multiple Vulnerabilities Exploit Title: Joomla Component comccboard Multiple Vulnerabilities Date: 13 Nov 2010 Author: jdc Category: webapps/0day Version: 1.2-RC Download:...

VulnCheck KEV: CVE-2010-2568

Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user...

Nmap NSE: SMB Enum Sessions

This script attempts to enumerate the users logged into a system either locally or through an SMB share. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-sessions.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumsessions.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper fo...

Cross-site Request Forgery (CSRF) Vulnerabilities in Amiro.CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Amiro.CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Amiro.CMS 1.1 The vulnerability exists due to insufficient validation of the request origin i...

Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required in that a user must browse to a malicious website. The specific flaws exists in the instantiation of three specific ActiveX controls. The combination ...

CVE-1999-0256

creationtimestamp| type| source ---|---|--- 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16706 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16724 2018-05-29 15:50:33+00:00| seen|...

Multiple Vulnerabilities in Pixie

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pixie which could be exploited to perform cross-site scripting, script insertions and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Pixie The vulnerability exists due to input...

PT-2010-2964 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 SP1 through 8 Description: A remote code execution issue exists due to improper initialization or deletion of an object, leading to memory corruption. This could be exploited by an attacker through a...

Microsoft ATL Uninitialized Object Code Execution (MS09-037; CVE-2009-0901)

Microsoft Active Template Library ATL is a set of template-based C++ classes developed to help simplify the programming of Component Object Model COM objects. The COM support in Microsoft Visual C++ allows developers to create a variety of COM objects, OLE Automation servers, and ActiveX controls...

Sun Solaris 10 - 'in.ftpd' Long Command Handling Security

source: https://www.securityfocus.com/bid/40320/info Sun Solaris 'in.ftpd' FTP server is prone to a security vulnerability that allows attackers to perform cross-site request-forgery attacks. An attacker can exploit this issue to perform unauthorized actions by enticing a logged-in user to visit ...

Mozilla Firefox Top-level Script Object Offset Calculation Memory Corruption (CVE-2009-3073)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, CSS, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the...

500page.jsp Improvements

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-19601. panel Some further improvements to the 500page.jsp: The following should not appear if there is no stack trace: quote...

Edimax AR-7084GA Router CSRF + Persistent XSS Exploit

Exploit for hardware platform in category web applications ===================================================== Edimax AR-7084GA Router CSRF + Persistent XSS Exploit ===================================================== 25 die"One or more of the parts can't be longer then 25 characters!";...

Apple QuickTime H.263 PictureHeader Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within quicktime.qts wh...

Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the decompression of XLSX files. The XL...

bitweaver 2.7 persistant Xss Vulnerability

Exploit for unknown platform in category web applications ========================================== bitweaver 2.7 persistant Xss Vulnerability ========================================== prog ------------- bitweaver 2.7 vuln ------------- Persistant XSS in articles/edit.php logged only source...

PT-2010-2046 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: A remote code execution issue exists due to incorrect initialization or deletion of an object. An attacker can exploit this by creating a specially crafted Web page. When viewed,...