EUVD-2012-1056

Malware in sbrugna...

TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController

Problem The ShowImageController eID txcmsshowpic lacks a cryptographic HMAC-signature on the frame HTTP query parameter e.g. /index.php?eID=txcmsshowpic?file=3&...&frame=12345. This allows adversaries to instruct the system to produce an arbitrary number of thumbnail images on the server side...

mackwebsolutions.com Cross Site Scripting vulnerability OBB-2716012

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-QX3W-4864-94CH Cleartext storage of session identifier

Problem User session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system...

Cleartext storage of session identifier

User session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system. Solution...

mack-finanz.eu Cross Site Scripting vulnerability OBB-1345809

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Citrix ADC (NetScaler) Directory Traversal RCE

This module exploits a directory traversal in Citrix Application Delivery Controller ADC, aka NetScaler, and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0, to execute an arbitrary command payload. Module Options msf use exploit/freebsd/http/citrix/dirtraversalrce msf undefineddirtraversalrce show...

Denial of Service Vulnerability in MXProgrammer Software

MXProgrammer software is a windows desktop software of Weihai Mack Electric Technology Co., Ltd. which is used to communicate with its MX series PLC products and complete the functions of program writing and downloading. A denial of service vulnerability exists in the MXProgrammer software. When...

CVE-2012-1018

Cross-site scripting XSS vulnerability in includes/convert.php in D-Mack Media Currency Converter modcurrencyconverter module 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the from parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in includes/convert.php in D-Mack Media Currency Converter modcurrencyconverter module 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the from parameter...

CVE-2012-1018

CVE-2012-1018 is a cross-site scripting (XSS) vulnerability in the Joomla! currency converter module “mod_currencyconverter” version 1.0.0 (D-Mack Media) where the parameter from can be abused to inject arbitrary script/HTML. Affected component: Joomla! extension/mod_currencyconverter (includes/c...

CVE-2012-1018: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in includes/convert.php in D-Mack Media Currency Converter modcurrencyconverter module 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the from parameter...

Areuhot.info Hacked By Mack (Team Nuts)

Areuhot.info Hacked By Mack Team Nuts Hacked Link : https://areuhot.info/banners/nuts.htm News Source : Mack Team Nuts | Via Chat Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Kadence.com hacked by Team nuts: Undergorund Devil, Chip the hacker boy,SaRKAar,Mack !

Kadence.com hacked by Team nuts: Undergorund Devil, Chip the hacker boy,SaRKAar,Mack ! Link : https://www.kadence.com/nuts.html Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

imageVue Gallery 16 Cross Site Scripting

======================================================================================== | Title : imageVue Gallery Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found...