EUVD-2012-1056

Malware in sbrugna...

TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController

Problem The ShowImageController eID txcmsshowpic lacks a cryptographic HMAC-signature on the frame HTTP query parameter e.g. /index.php?eID=txcmsshowpic?file=3&...&frame=12345. This allows adversaries to instruct the system to produce an arbitrary number of thumbnail images on the server side...

mackwebsolutions.com Cross Site Scripting vulnerability OBB-2716012

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Citrix ADC (NetScaler) Directory Traversal RCE

This module exploits a directory traversal in Citrix Application Delivery Controller ADC, aka NetScaler, and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0, to execute an arbitrary command payload. Module Options msf use exploit/freebsd/http/citrixdirtraversalrce msf exploitcitrixdirtraversalrce show...

GHSA-QX3W-4864-94CH Cleartext storage of session identifier

Problem User session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system...

Cleartext storage of session identifier

User session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system. Solution...

mack-finanz.eu Cross Site Scripting vulnerability OBB-1345809

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Denial of Service Vulnerability in MXProgrammer Software

MXProgrammer software is a windows desktop software of Weihai Mack Electric Technology Co., Ltd. which is used to communicate with its MX series PLC products and complete the functions of program writing and downloading. A denial of service vulnerability exists in the MXProgrammer software. When...

CVE-2012-1018

Cross-site scripting XSS vulnerability in includes/convert.php in D-Mack Media Currency Converter modcurrencyconverter module 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the from parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in includes/convert.php in D-Mack Media Currency Converter modcurrencyconverter module 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the from parameter...

CVE-2012-1018

CVE-2012-1018 is a cross-site scripting (XSS) vulnerability in the Joomla! currency converter module “mod_currencyconverter” version 1.0.0 (D-Mack Media) where the parameter from can be abused to inject arbitrary script/HTML. Affected component: Joomla! extension/mod_currencyconverter (includes/c...

Areuhot.info Hacked By Mack (Team Nuts)

Areuhot.info Hacked By Mack Team Nuts Hacked Link : https://areuhot.info/banners/nuts.htm News Source : Mack Team Nuts | Via Chat Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Kadence.com hacked by Team nuts: Undergorund Devil, Chip the hacker boy,SaRKAar,Mack !

Kadence.com hacked by Team nuts: Undergorund Devil, Chip the hacker boy,SaRKAar,Mack ! Link : https://www.kadence.com/nuts.html Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

imageVue Gallery 16 Cross Site Scripting

======================================================================================== | Title : imageVue Gallery Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found...