Lucene search
K

147 matches found

NVD
NVD
added 2009/07/14 2:30 p.m.11 views

CVE-2008-6855

Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie...

7.5CVSS7.2AI score0.00494EPSS
Exploits1References4
Prion
Prion
added 2009/07/14 2:30 p.m.8 views

Authentication flaw

Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie...

7.5CVSS7.8AI score0.00494EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2009/07/14 2:0 p.m.10 views

CVE-2008-6855

Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie...

7.2AI score0.00494EPSS
Exploits1References4
CVE
CVE
added 2009/07/14 2:0 p.m.40 views

CVE-2008-6855

The CVE-2008-6855 entry concerns Xigla Software Absolute News Feed 1.0 and possibly 1.5. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie. Impact is remote and includes potential administrative access , per the NVD entry...

7.5CVSS7.5AI score0.00494EPSS
Exploits1References4Affected Software1
Fedora
Fedora
added 2009/04/28 1:22 a.m.30 views

[SECURITY] Fedora 10 Update: blam-1.8.5-10.fc10

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

9.3CVSS2.3AI score0.32166EPSS
Exploits1
Fedora
Fedora
added 2009/02/06 5:22 a.m.31 views

[SECURITY] Fedora 9 Update: blam-1.8.5-5.fc9.1

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

10CVSS2.3AI score0.08533EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2008/12/21 12:0 a.m.25 views

FreeBSD : opera -- multiple vulnerabilities (225bc349-ce10-11dd-a721-0030843d3802)

The Opera Team reports : Manipulating certain text-area contents can cause a buffer overflow, which may be exploited to execute arbitrary code. Certain HTML constructs can cause the resulting DOM to change unexpectedly, which triggers a crash. To inject code, additional techniques will have to be...

9.3CVSS6.3AI score0.38814EPSS
Exploits6References7
FreeBSD
FreeBSD
added 2008/11/18 12:0 a.m.30 views

opera -- multiple vulnerabilities

The Opera Team reports: Manipulating certain text-area contents can cause a buffer overflow, which may be exploited to execute arbitrary code. Certain HTML constructs can cause the resulting DOM to change unexpectedly, which triggers a crash. To inject code, additional techniques will have to be...

9.3CVSS6.8AI score0.38814EPSS
Exploits6References6
Tenable Nessus
Tenable Nessus
added 2008/11/04 12:0 a.m.28 views

GLSA-200811-01 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200811-01 Opera: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Opera: Opera does not restrict the ability of a framed web page to change the address associated with a different frame CVE-2008-4195. Chri...

10CVSS8.1AI score0.62121EPSS
Exploits6References15
seebug.org
seebug.org
added 2008/11/01 12:0 a.m.16 views

Absolute News Feed 1.0 Remote Insecure Cookie Handling Vulnerability

No description provided by source. Discovered by : Hakxer Script : Absolute News Feed http://www.xigla.com/absolutenf/demo.htm Greetz : Allah , All My friend ,www.educ-up.com ------------------------------- Poc : javascript:document.cookie="xlaAFSuser=p=admin"; Exploit Go To admin login :...

7.1AI score
Exploits0
0day.today
0day.today
added 2008/10/31 12:0 a.m.21 views

Absolute News Feed 1.0 Remote Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Absolute News Feed 1.0 Remote Insecure Cookie Handling Vulnerability ==================================================================== Discovered by : Hakxer Script :...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2008/10/31 12:0 a.m.7 views

Absolute News Feed 1.0 - Remote Insecure Cookie Handling

Absolute News Feed 1.0 - Remote Insecure Cookie Handling Discovered by : Hakxer Script : Absolute News Feed http://www.xigla.com/absolutenf/demo.htm Greetz : Allah , All My friend ,www.educ-up.com ------------------------------- Poc : javascript:document.cookie="xlaAFSuser=p=admin"; Exploit Go To...

0.8AI score
Exploits0
Exploit DB
Exploit DB
added 2008/10/31 12:0 a.m.28 views

Absolute News Feed 1.0 - Remote Insecure Cookie Handling

Discovered by : Hakxer Script : Absolute News Feed http://www.xigla.com/absolutenf/demo.htm Greetz : Allah , All My friend ,www.educ-up.com ------------------------------- Poc : javascript:document.cookie="xlaAFSuser=p=admin"; Exploit Go To admin login :...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2008/10/30 12:0 a.m.27 views

Opera Web Browser Multiple XSS Vulnerability (Windows)

The host is installed with Opera web browser and is prone to multiple Cross Site Scripting XSS Vulnerability. OpenVAS Vulnerability Test $Id: gboperamultvulnoct08win.nasl 6519 2017-07-04 14:08:14Z cfischer $ Opera Web Browser Multiple XSS Vulnerability Windows Authors: Chandan S Copyright:...

5.8CVSS8.3AI score0.62121EPSS
Exploits4References3
OpenVAS
OpenVAS
added 2008/10/30 12:0 a.m.26 views

Opera Web Browser Multiple XSS Vulnerability (Linux)

The host is installed with Opera Web Browser and is prone to multiple Cross Site Scripting XSS Vulnerability. OpenVAS Vulnerability Test $Id: gboperamultvulnoct08lin.nasl 6539 2017-07-05 12:02:14Z cfischer $ Opera Web Browser Multiple XSS Vulnerability Linux Authors: Chandan S Copyright: Copyrigh...

5.8CVSS8.3AI score0.62121EPSS
Exploits4References3
OpenVAS
OpenVAS
added 2008/10/30 12:0 a.m.28 views

Opera Web Browser Multiple XSS Vulnerabilities - Windows

Opera web browser is prone to multiple Cross Site Scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS8.2AI score0.62121EPSS
Exploits4References5
Tenable Nessus
Tenable Nessus
added 2008/10/29 12:0 a.m.46 views

FreeBSD : opera -- multiple vulnerabilities (f5c4d7f7-9f4b-11dd-bab1-001999392805)

Opera reports : Certain constructs are not escaped correctly by Opera's History Search results. These can be used to inject scripts into the page, which can then be used to look through the user's browsing history, including the contents of the pages they have visited. These may contain sensitive...

5.8CVSS5.4AI score0.13824EPSS
Exploits3References7
NVD
NVD
added 2008/10/23 10:0 p.m.10 views

CVE-2008-4698

Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds...

5.8CVSS6.5AI score0.00787EPSS
Exploits0References16
Prion
Prion
added 2008/10/23 10:0 p.m.11 views

Design/Logic Flaw

Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds...

5.8CVSS6.7AI score0.00787EPSS
Exploits0References16Affected Software1
UbuntuCve
UbuntuCve
added 2008/10/23 10:0 p.m.21 views

CVE-2008-4698

Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds...

5.8CVSS6AI score0.00787EPSS
Exploits0References1
Rows per page
Query Builder