poweruy.incosa.com.uy XSS vulnerability

Vulnerable URL: http://poweruy.incosa.com.uy/wiki/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 08.03.2016 Latest check for patch:| 08.03.2016 22:31 GMT Vulnerability type:| XSS...

sovendus.com XSS vulnerability

Vulnerable URL: http://www.sovendus.com/de/sovendus/Impressum.php/x';alert/XSSPOSED/// Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10899 Google Pageran...

cscvb.com Open Redirect vulnerability

Vulnerable URL: http://www.cscvb.com/mobile/redirect.cfm?address=http://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:55 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 20015558...

The vulnerability of Firefox and Firefox ESR browsers allows attackers to trigger a service failure or increase their privileges.

The vulnerability of the Updater component in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability can allow an attacker acting locally to cause service failures or increase their privileges using a specially crafted MAR file...

CVE-2015-4482

marread.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows local users to gain privileges or cause a denial of service out-of-bounds write via a crafted name of a Mozilla Archive aka MAR file...

CVE-2015-4482

marread.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows local users to gain privileges or cause a denial of service out-of-bounds write via a crafted name of a Mozilla Archive aka MAR file...

CVE-2015-4482

marread.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows local users to gain privileges or cause a denial of service out-of-bounds write via a crafted name of a Mozilla Archive aka MAR file...

CVE-2015-4482

CVE-2015-4482 affects Mozilla Firefox before 40.0 and Firefox ESR before 38.2, via the Updater’s MAR file handling. mar_read.c could allow a crafted MAR file name to cause an out-of-bounds write, enabling local privilege gain or a denial of service. In public documents, the remediation typically ...

Out-of-bounds write with Updater and malicious MAR file — Mozilla

Security researcher Holger Fuhrmannek reported that if the Updater opens a MAR format file with a specially crafted name, an out-of-bounds write will occur. This can lead to a potentially exploitable crash but requires that the malicious MAR format file be present on the local system and the...

WordPress WPshop eCommerce 1.3.9.5 Shell Upload Exploit

This Metasploit module exploits an arbitrary file upload in the WordPress WPshop eCommerce plugin versions 1.3.3.3 to 1.3.9.5. It allows you to upload arbitrary PHP code and get remote code execution. This Metasploit module has been tested successfully on WordPress WPshop eCommerce 1.3.9.5 with...

Apple Mac OS X Multiple Vulnerabilities -02 (Mar 2015)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mercur Messaging 2005 IMAP Login Buffer Overflow

No description provided by source. $Id: mercurlogin.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

TVersity <= 1.9.7 Arbitrary File Download

No description provided by source. Luigi Auriemma Application: TVersity http://tversity.com Versions: = 1.9.7 Platforms: Windows Bug: arbitrary files downloading Exploitation: remote Date: 14 Mar 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The...

blogman 0.45 Multiple Vulnerabilities

No description provided by source. Salvatore drosophila Fresta Application: BlogMan http://sourceforge.net/projects/blogman/ Version: 0.45 Bug: Multiple SQL Injection Authentication Bypass Privilege Escalation Exploitation: Remote Date: 1 Mar 2009 Discovered by: Salvatore drosophila Fresta Author...

War-FTPD 1.65 Username Overflow

No description provided by source. $Id: warftpd165user.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Dogfood CRM spell.php Remote Command Execution

No description provided by source. $Id: dogfoodspellexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Norton AntiSpam 2004 SymSpamHelper ActiveX Control Buffer Overflow

No description provided by source. $Id: nis2004antispam.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

MODX Revolution 2.2.13 (and prior) Blind SQL Injection

Product: MODX Revolution Severity: Critical Versions: 2.0.0–2.2.13 Vulnerability type: SQL Injection Report date: 2014-Mar-10 Fixed date: 2014-Apr-04 Description Multiple vulnerabilities were discovered in MODX Revolution that allow users to inject and manipulate the database. This includes an...

CVE-2014-1496

Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during an update...

CVE-2014-1496

Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during an update...