217 matches found
MyScript Memo v3.0 iOS - (Mail) Persistent Vulnerability
Document Title: =============== MyScript Memo v3.0 iOS - Mail Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1706 Release Date: ============= 2016-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 170...
Angler Exploit Kit Spreading Cryptowall 4.0
As expected, it didn’t take long for one of the most popular exploit kits, Angler, to start spreading the latest iteration of Cryptowall ransomware. A drive-by campaign that uses a one-two punch to drop Cryptowall 4.0 has been observed in the wild this week, according to researchers at Heimdal...
Splunk Cross-Site Scripting Vulnerability (CNVD-2015-06361)
Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructure. Splunk suffers from a cross-site scripting vulnerability that allows remote attackers to...
адвокат-в-томске.рф XSS vulnerability
Vulnerable URL:...
Adobe ColdFusion suffers from an unspecified cross-site scripting vulnerability (CNVD-2015-02633)
Adobe ColdFusion is a dynamic Web server , its CFML is a programming language , similar to the current JSP in the JSTL. Adobe ColdFusion has an unspecified cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which c...
IBM Sterling Connect:Enterprise跨站脚本漏洞
CVE ID:CVE-2013-6327 IBM Sterling Connect是一款点到点文件传输软件，可实现企业内和企业间的大容量、安全可靠的文件交付。 IBM Sterling Connect:Enterprise存在一个未明跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 IBM Sterling Connect:Enterprise 1.3.0.2 IBM Sterling Connect:Enterprise 1.4.0.0. 厂商补丁： IBM ----- IBM Sterling Connect...
webring Cross Site Scripting Vulnerability
Exploit for unknown platform in category web applications ========================================== webring Cross Site Scripting Vulnerability ========================================== ======================================================================================== | Title : webring Cro...
appservopen-xss.txt
========================================================== AppServ Open Project XSS =Example= Alert: - http://target/index.php?appservlang=" - http://target/index.php?appservlang=" Open Window - http://target/index.php?appservlang="window.open/phpinfo.php/ - http://target/index.php?appservlang="...
Unfixed XSS vulnerability at search.dunyagazetesi.com.tr
Security researcher St@rExT, has submitted on 19/08/2007 a cross-site-scripting XSS vulnerability affecting search.dunyagazetesi.com.tr, which at the time of submission ranked 47501 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It...
Cisco Unified MeetingPlace Web Conference跨站脚本漏洞
Cisco Unified MeetingPlace Web Conference是一款Web会议解决方案。 Cisco Unified MeetingPlace Web Conference不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题是对多个参数缺少充分过滤，可导致恶意脚本注入。构建恶意WEB页，诱使用户访问，可导致获得敏感信息。目前没有详细漏洞细节提供。 Cisco Unified MeetingPlace Web Conference 5.3.104.3 Cisco Unified MeetingPlace Web Conference...
simpcmslight-rfi.txt
Bug Found By Dr.RoVeR --Arab48 Hacker Contact: [email protected] --- Script: SimpCMS Light Download: http://www.simpcms.com/light/normal/simp-cms-light.zip -- Bug File: index.php Bug code in line 31: include $site.".php"; -- Exploit: http://site.com/path/index.php?site=EvilScript --...
Unfixed XSS vulnerability at www.nalp.org
Security researcher MaXWeL, has submitted on 04/07/2007 a cross-site-scripting XSS vulnerability affecting www.nalp.org, which at the time of submission ranked 1008261 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2007. It is currently...
[Full-disclosure] Apple Mac Tiger 10.4 weblog server
------------------------------------------------------------ - EXPL-A-2005-010 exploitlabs.com Advisory 039 - ------------------------------------------------------------ - Mac OSX Server weblog - AFFECTED PRODUCTS ================= Mac OSX 10.4.0 Weblog Server http://apple.com OVERVIEW ========...
STG Security Advisory 2004-11-22.11
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041122-11 JSPWiki XSS vulnerability Revision 1.0 Date Published: 2004-11-22 KST Last Update: 2004-11-22 Disclosed by SSR Team [email protected] Summary ======== JSPWiki is one of famous wiki web applications. It has...
Microsoft Internet Explorer - Remote Application.Shell
function InjectedDuringRedirection showModalDialog'md.htm',window,"dialogTop:-10000;dialogLeft:-10000;dialogHeight:1; dialogWidth:1;".location="vbscript:"""; setTimeout"myiframe.execScriptInjectedDuringRedirection.toString",100; setTimeout"myiframe.execScript'InjectedDuringRedirection' ",101;...
Secunia Research: Opera browser Cross Site Scripting
====================================================================== Secunia Research 26/02/2003 - Opera browser Cross Site Scripting - ====================================================================== Table of Contents 1..........................................................Description...