Information leak via XMLHttpRequest statusText — Mozilla

Matt Haggard reported that the statusText property of an XMLHttpRequest object is readable by the requester even when the request is made across origins. This status information reveals the presence of a web server and could be used to gather information about servers on internal private networks...

Micronetsoft Rental Property Management Website - SQL Injection

Micronetsoft Rental Property Management Website - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Micronetsoft Rental Property Management Website SQLi Vulnerability Vendor url:http://www.micronetsoft.com Version:1 Price:179$ Published: 2010-09-06 GThanx to:r0073r...

Micronetsoft Rental Property Management Website SQL Injection

Exploit for asp platform in category web applications ============================================================= Micronetsoft Rental Property Management Website SQL Injection =============================================================...

Micronetsoft Rental Property Management Website - SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Micronetsoft Rental Property Management Website SQLi Vulnerability Vendor url:http://www.micronetsoft.com Version:1 Price:179$ Published: 2010-09-06 GThanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat,...

Microsoft Office Property Code Execution exploit (CVE-2006-2389)

No description provided by source. Microsoft Office Property Code Execution exploit CVE-2006-2389 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Vulnerble application MS office 2003 Tested...

Microsoft Office Property Code Execution

Microsoft Office Property Code Execution exploit CVE-2006-2389 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 Greets...

Microsoft Office Property Code Execution exploit (CVE-2006-2389)

Exploit for windows platform in category remote exploits ================================================================ Microsoft Office Property Code Execution exploit CVE-2006-2389 ================================================================ Microsoft Office Property Code Execution exploi...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0553-1)

icedtea included in java-160-openjdk was updated to version 1.8.1 which fixes two security issues : CVE-2010-2783: IcedTea 'Extended JNLP Services' arbitrary file access CVE-2010-2548: IcedTea Incomplete property access check for unsigned applications The new version also fixes many non-security...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0553-1)

icedtea included in java-160-openjdk was updated to version 1.8.1 which fixes two security issues : CVE-2010-2783: IcedTea 'Extended JNLP Services' arbitrary file access CVE-2010-2548: IcedTea Incomplete property access check for unsigned applications The new version also fixes many non-security...

Property for enabling/disabling viewage of Jira administrators

As of JRA-21004, it also happened that the Administrator page does not show the administrators anymore. This patch is enables through one property in jira-atlassian.properties, and it resolves severall problems. We would prefer that there is a property like jira.administrators.show=true/false,...

Property for enabling/disabling viewage of Jira administrators

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-22096. panel As of JRA-21004, it also happened that the Administrator page does not show the administrators anymore. This patch is enables...

CVE-2010-1172

DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the 1 DeviceKit-Power, 2 NetworkManager, and 3 ModemManager...

dbus-glib: property access not validated

DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the 1 DeviceKit-Power, 2 NetworkManager, and 3 ModemManager...

Joomla com_properties Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================== Joomla comproperties Persistent XSS Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

ZeeClassifieds v1x Multiple Vulnerabilty

Exploit for php platform in category web applications ======================================== ZeeClassifieds v1x Multiple Vulnerabilty ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

SapGUI BI v7100.1.400.8 Heap Corruption Exploit

Exploit for windows platform in category remote exploits =============================================== SapGUI BI v7100.1.400.8 Heap Corruption Exploit =============================================== var buf = ''; while buf.length 64 buf += unescape"%u0a05"; function Check // windows/exec - 557...

SapGUI BI 7100.1.400.8 Heap Corruption

var buf = ''; while buf.length 64 buf += unescape"%u0a05"; function Check // windows/exec - 557 bytes // http://www.metasploit.com // Encoder: x86/alphamixed // EXITFUNC=process, CMD=c:\windows\system32\calc.exe var shellcode =...

SapGUI BI 7100.1.400.8 - Heap Corruption

var buf = ''; while buf.length 64 buf += unescape"%u0a05"; function Check // windows/exec - 557 bytes // http://www.metasploit.com // Encoder: x86/alphamixed // EXITFUNC=process, CMD=c:\windows\system32\calc.exe var shellcode =...

Oracle Secure Backup Administration objectname Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit this vulnerability. The specific flaw exists in the handling of variables to the propertybox.php script located on the Oracle Secure...

CVE-2010-2680

Directory traversal vulnerability in the JExtensions JE Section/Property Finder jesectionfinder component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php...