6023 matches found
Meta: IDOR in Facebook Messages webcam photos
I found that photos people take with their webcam within private message conversations can be accessed without proper authorization via a photo preview mechanism. Even when the sender decides to discard the image after seeing the preview, it can later still be retrieved through this same preview...
Joomla NoNumber Framework Local File Inclusion / Shell Upload
Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...
CentOS 4 : frysk (CESA-2011:1327)
An updated frysk package that fixes one security issue is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CentOS Update for frysk CESA-2011:1327 centos4 i386
Check for the Version of frysk OpenVAS Vulnerability Test CentOS Update for frysk CESA-2011:1327 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
CentOS Update for ecryptfs-utils-75-5.el5_ CESA-2011:1241 centos5 i386
Check for the Version of ecryptfs-utils OpenVAS Vulnerability Test CentOS Update for ecryptfs-utils-75-5.el5 CESA-2011:1241 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...
ecryptfs security update
CentOS Errata and Security Advisory CESA-2011:1241 Updated ecryptfs-utils packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring...
CentOS Update for ecryptfs-utils CESA-2009:1307 centos5 i386
Check for the Version of ecryptfs-utils OpenVAS Vulnerability Test CentOS Update for ecryptfs-utils CESA-2009:1307 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...
Code injection
Opera before 11.50 allows user-assisted remote attackers to cause a denial of service application hang via a large table, which is not properly handled during a print preview...
CVE-2011-2624
Opera before 11.50 allows user-assisted remote attackers to cause a denial of service application hang via a large table, which is not properly handled during a print preview...
CVE-2011-2624
Opera before 11.50 is affected by a denial-of-service vulnerability caused by improper handling of a large table in print preview. The issue affects the print preview rendering path and can cause the application to hang. Publicly referenced advisories confirm this CVE-2011-2624 issue and indicate...
PT-2011-3973
Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.50 Description The issue allows user-assisted remote attackers to cause a denial of service, resulting in an application hang. This occurs when a large table is not properly handled during a print preview...
CVE-2011-2624: Undefined Security Weakness
Opera before 11.50 allows user-assisted remote attackers to cause a denial of service application hang via a large table, which is not properly handled during a print preview...
Microsoft Windows shmedia.dll DoS
Division by zero on AVI preview creation...
Windows Explorer 6.0.2900.5512 (Shmedia.dll 6.0.2900.5512) AVI Preview
Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Windows Explorer 6.0.2900.5512 Shmedia.dll 6.0.2900.5512 App Url:...
Microsoft Windows Explorer 6.0.2900.5512 - 'Shmedia.dll 6.0.2900.5512' AVI Preview Denial of Service (PoC)
done by BraniX www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Windows Explorer 6.0.2900.5512 Shmedia.dll 6.0.2900.5512 App Url: http://www.micro$oft.com Shmedia.dll 6.0.2900.5512 MD5:...
ZDI-11-108: Mac OS X Compact Font Format Decoder Remote Code Execution Vulnerability
ZDI-11-108: Mac OS X Compact Font Format Decoder Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-108 March 22, 2011 -- CVE ID: CVE-2011-0176 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Apple -- Affected Products: Apple Preview --...
PHPOK3 business website built Station program injection-vulnerability warning-the black bar safety net
Author: jsbug original: http://lcx.cc/?FoxNews=1077.html Friends always stepping on my body to embark on DOTA Super God of the road, see the forum someone said phpok, taking advantage of the weekend, send on the head a gold, hope you can also be super-God. “phpok3/app/www/models/upfile.php”: the...
Discovery TorrentTrader 2.6 Cross Site Scripting / SQL Injection / Local File Inclusion
Exploit Title: TorrentTrader 2.6 Multiple vulnerabilities Google Dork: "Powered by TorrentTrader v2.06" Date: 29 Décembre 2010 Author: EsS4ndre Software Link: http://sourceforge.net/projects/torrenttrader/files/TorrentTrader%20v2/TorrentTrader-v2.06/ Version: 2.6 Tested on: Linux...
Facebook.com Cross Site Request Forgery / Cross Site Scripting
Facebook is a social networking website with the second highest number of visits worldwide, and over 500 million active users. Our team recently performed a quick security audit of the main Facebook site along with its mobile versions. Here are the full details of our findings. I. DESCRIPTION OF...
