560 matches found
DEBIAN-CVE-2008-2302
Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...
Vulnerability in Claroline
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в Claroline. Уязвимость в функции goto в параметре url. XSS: http://site/claroline/document/goto/?url=3Cimg20src=''20onerror=22javascript:alertdocument.cookie223E Уязвима версия Claroline 1.8.8 и предыдущие версии...
All Club CMS <= 0.0.1f index.php Local File Inclusion Vulnerability
No description provided by source. Vulnerability: File Inclusion Software Vulnerable: All Club CMS 0.0.1f and maybe prior versions. Vulnerable Code: --- function autoload$classname requireonce 'includes/'.$classname . '.php'; --- Download: http://sourceforge.net/project/showfiles.php?groupid=2090...
Bitweaver XSS & SQL Injection Vulnerability
HSC Bitweaver XSS & SQL Injection Vulnerability Bitweaver is an open source content management system. Its speed and power are ideal for large-scale community websites and corporate applications, but it is simple enough for non-technical small site users to set up and administrate. It comes fully...
CVE-2007-4931
HP System Management Homepage SMH for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update, which has unknown impact and attack vectors, probably related to previous vulnerabilities for...
Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit
Exploit for unknown platform in category remote exploits ========================================================== Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit ========================================================== / Dreatica-FXP crew ----------------------------------------...
CVE-2007-2535
WinAce allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...
Softerra PHP Developer Library 1.5.3 - 'Grid3.lib.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/20442/info Softerra PHP Developer Library is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...
PT-2006-1576 · Blackboard · Blackboard Academic Suite
Name of the Vulnerable Software and Affected Versions: Blackboard Academic Suite versions 6.0 and earlier Description: The issue arises when the software does not properly clear session information after a user has been idle and then de-authenticates. This allows subsequent users to log in as the...
CVE-2005-2133
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1915. Reason: This candidate is a duplicate of CVE-2005-1915. Notes: All CVE users should reference CVE-2005-1915 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
SUSE-SA:2005:007: mailman
The remote host is missing the patch for the advisory SUSE-SA:2005:007 mailman. Mailman is a flexible mailing list management tool. It provides mail controlled subscription front ends and also includes CGI scripts to handle subscription, moderation and archive retrieval and other options. Due to...
MusicDaemon 0.0.3 - Remote Denial of Service etcshadow Stealer (2)
MusicDaemon 0.0.3 - Remote Denial of Service etcshadow Stealer 2 / MusicDaemon Hello ...... bin::9797:0::::: ftp::9797:0::::: sshd::9797:0::::: ...... root@vortex:/test Server Side View: root@vortex:/test/musicdaemon-0.0.3/src ./musicd -c ../musicd.conf -p 1234 Using configuration: ../musicd.conf...
Remote Format String Vulnerabilities in eXtremail
Package: eXtremail Auth: http://www.extremail.com/ Versions: 1.5.9 current release Vulnerability: Format String What’s eXtremail: eXtremail is a Unix mail server that supports SMTP/POP3/IMAP protocols. It includes support for virtual domains, spoofing attack ,SSL connection and Antivirus checking...
TYPSoft FTP Server 1.1 - Remote CPU Consumption (Denial of Service)
source: https://www.securityfocus.com/bid/9702/info It has been reported that TYPESoft FTP Server is prone to a remote denial of service vulnerability that may allow an attacker to cause the server to crash. This vulnerability has been reported to affect version 1.10 of the software, however,...
InstaBoard 1.3 - index.cfm SQL Injection
InstaBoard 1.3 - index.cfm SQL Injection source: https://www.securityfocus.com/bid/7338/info It has been reported that multiple input validation errors exist in the index.cfm file included with InstaBoard. Because of this issue, remote attackers may launch SQL injection attacks through the...
Web Wiz Site News 3.6 - Information Disclosure
Web Wiz Site News 3.6 - Information Disclosure source: https://www.securityfocus.com/bid/7341/info Web Wiz Site News has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file that is used by the...
Re: exploiting wu-ftpd
The patches have been available over a week now. I think that is long enough. On the 1st of December Przemyslaw Frasunek [email protected] wrote something about getting a wu-ftpd exploit working. The problem he was having was to do with the following macro: define arenaforptrptr...
Update Rollup 2 for System Center 2022 Operations Manager
None None...
Microsoft Application Virtualization 4.6 Service Pack 3 (KB2873450)
Application Virtualization App-V 4.6 Service Pack 3 provides new platform support for Windows 8.1 and Windows Server 2012 R2. This service pack also provides the latest security and stability enhancements to help keep computers running App-V up-to-date, reliable, and more secure. The goal of this...