3719 matches found
Max Network Technology BBSMAX <= 4.2 'threadid' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38630/info Max Network Technology BBSMAX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
Neon Labs Website <= 3.2 (nl.php g_strRootDir) Remote Inclusion Vuln
No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...
YAAP <= 1.5 __autoload() Remote File Inclusion Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Script name.......:Yaap Affected Version.....:1.5 D.page..:http://yaap.oskbraniewo.pl/download/yaap15.tar.gz...
Autodesk 3ds Max Application Callbacks Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36634/info Autodesk 3ds Max is prone to a vulnerability that lets attackers execute arbitrary commands in the context of the vulnerable application. This issue affects the following: 3ds Max 6 through 9 3ds Max 2008 throu...
phpXD <= 0.3 (path) Remote File Inclusion Vulnerability
No description provided by source. | | \ | Dr Max Virus | / \ | | / / || \ / \ ------------------------------------------------------------------------------------------------------------------------ Script:phpxd Affected Version:0.3...
Lucent Ascend MAX <= 5.0/Pipeline <= 6.0/TNT 1.0/2.0 Router MAX UDP Port 9 Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/714/info Certain versions of Ascends Lucent router software listen on port 9 UDP Discard. Ascend provides configuration tools for MAX and Pipeline routers that locate locally installed routers by broadcasting a specially...
3editor CMS <= 0.42 (index.php) Local File Include Vulnerability
No description provided by source. script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page'...
Nullsoft Winamp <= 5.3 (Ultravox-Max-Msg) Heap Overflow DoS PoC
No description provided by source. / Nullsoft Winamp 5.31 Ultravox Ultravox-Max-Msg Heap Overflow Dos POC by cocoruderfrankruderathotmail.com,2006/10/30 use like winampunsv.exe ultravox-max-msgvalue,then the winampunsvsimple ultravox server will listen on tcp port 80,when winamp connect the serve...
PwsPHP <= 1.1 (themes/fin.php) Remote File Include Vulnerablity
No description provided by source. ========================================================================================================================== PwsPHP v1.1 theme File inclusion Vulnerablity =============================================== Script:PwsPHP ============= Version:1.1...
Max Network Technology BBSMAX <= 4.2 'post.aspx' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38592/info Max Network Technology BBSMAX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
MySpeach <= 2.1b (up.php) Remote Inclusion Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:MySpeach Affected Version:beta2.1 and maybe older Downlaoad:http://www.graphiks.net/scripts/chat/myspeach-2.1beta.zip...
Lucent Ascend MAX <= 5.0/Pipeline <= 6.0/TNT 1.0/2.0 Router MAX UDP Port 9 Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/714/info Certain versions of Ascends Lucent router software listen on port 9 UDP Discard. Ascend provides configuration tools for MAX and Pipeline routers that locate locally installed routers by broadcasting a specially...
Tucows Client Code Suite (CSS) <= 1.2.1015 File Include Vulnerability
No description provided by source. !/usr/bin/perl Tucows Open Project --Remote File Inclusion Vulnerablity Bug Found & Exploit coded By Dr Max Virus Download:http://developer.tucows.com/code/ccs/downloads/ccs-open-1.2.1015-2006-209-1337.zip use LWP::UserAgent; $target=@ARGV0; $shellsite=@ARGV1;...
[oss-security] CVE request: PowerDNS in default configuration is vulnerable to DoS attack
It was found 1 that in default configuration PowerDNS is allowed to consume more file descriptors than is available for a default installation of many Linux distributions. Default configuration is: 2 threads / 2048 max-mthreads, which leads to a theoretical FD consumption of 4096. Default FD limi...
Factlink: Criptographic Issue: Strisct Transport Security with not good max age..(TOO SHORT!)
Issue: Strict Transport Security with too short max age. Description: Your site use a good "Strict Transport Security" but with short MAX AGE! Severity: See more information below. Proof of Concept by ssllabs.com 100% affidability: "Strict Transport Security HSTS Yes max-age=2592000 TOO SHORT les...
CVE-2014-3871
CVE-2014-3871 documents multiple SQL injection vulnerabilities in Geodesic Solutions GeoCore MAX 7.3.3 (Ge oAuctions/GeoClassifieds) where remote attackers can trigger SQL commands via the register.php parameters (1) c[password] and (2) c[username]. The entry notes that the b parameter in index.p...
CVE-2014-3871
Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 formerly GeoClassifieds and GeoAuctions allow remote attackers to execute arbitrary SQL commands via the 1 cpassword or 2 cusername parameter. NOTE: the b parameter to index.php vector is already covere...
CVE-2014-3871
Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 formerly GeoClassifieds and GeoAuctions allow remote attackers to execute arbitrary SQL commands via the 1 cpassword or 2 cusername parameter. NOTE: the b parameter to index.php vector is already covere...
CVE-2014-3871: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 formerly GeoClassifieds and GeoAuctions allow remote attackers to execute arbitrary SQL commands via the 1 cpassword or 2 cusername parameter. NOTE: the b parameter to index.php vector is already covere...
PT-2014-5566
Name of the Vulnerable Software and Affected Versions GeoCore MAX version 7.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cpassword or cusername parameter in the register.php file. Recommendations For GeoCore MAX version 7.3.3,...