9845 matches found
CVE-2013-5930
CVE-2013-5930 affects the Real Estate PHP Script, specifically the search_residential.php endpoint. It is a cross-site scripting (XSS) vulnerability exploitable via the bos parameter, allowing remote attackers to inject arbitrary scripts/HTML. The NVD entry notes a CVSS v2 base score of 4.3 (Medi...
CVE-2013-5930
Cross-site scripting XSS vulnerability in searchresidential.php in Real Estate PHP Script allows remote attackers to inject arbitrary web script or HTML via the bos parameter...
CVE-2013-5931
CVE-2013-5931 : A SQL injection vulnerability affects the Real Estate PHP Script in the file property_listings_detail.php via the listingid parameter. An attacker could remotely execute arbitrary SQL commands, as documented by the CVE description (CVSSv2 base score 7.5, HIGH). The connected recor...
[SECURITY] Fedora 18 Update: graphite-web-0.9.12-1.fc18
Graphite consists of a storage backend and a web-based visualization fronte nd. Client applications send streams of numeric time-series data to the Graphite backend called carbon, where it gets stored in fixed-size database files similar in design to RRD. The web frontend provides user interfaces...
[SECURITY] Fedora 19 Update: graphite-web-0.9.12-1.fc19
Graphite consists of a storage backend and a web-based visualization fronte nd. Client applications send streams of numeric time-series data to the Graphite backend called carbon, where it gets stored in fixed-size database files similar in design to RRD. The web frontend provides user interfaces...
Real Estate PHP Script Cross Site Scripting
Cross Site Scripting Application Name : Real Estate Php Script Vulnerable Type : Post Cross Site Scripting Infection : Yönetici ve User cookieleri çalýnabilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 | Bug Researchers Example :...
Real Media Player filename handler stack buffer overflow vulnerability
Overview Real Media Player fails to parse filenames correctly, which may allow a remote, unauthenticated attacker to execute arbitrary code in the context of the logged in user. Description CWE-121: Stack-based Buffer Overflow - CVE-2013-4973Real Media Player versions prior to version 16.0.3.51 a...
Threat Outbreak Alert: Fake Real Estate Inquiry Email Messages on September 10, 2013
Medium Alert ID: 30490 First Published: 2013 August 22 14:21 GMT Last Updated: 2013 September 11 15:06 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain property purchase inquiries for the recipient. The text in the email...
Fedora Update for chrony FEDORA-2013-14539
Check for the Version of chrony OpenVAS Vulnerability Test Fedora Update for chrony FEDORA-2013-14539 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage:...
Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities
Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage:...
Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities
Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://monoray.net/products/6-open-real-estate Tested on: Linux & Windows, PHP...
[SECURITY] Fedora 19 Update: chrony-1.29-1.fc19
A client/server for the Network Time Protocol, this program keeps your computer's clock accurate. It was specially designed to support systems with intermittent internet connections, but it also works well in permanently connected environments. It can use also hardware reference clocks, system...
qconn-exec NSE Script
Attempts to identify whether a listening QNX QCONN daemon allows unauthenticated users to execute arbitrary operating system commands. QNX is a commercial Unix-like real-time operating system, aimed primarily at the embedded systems market. The QCONN daemon is a service provider that provides...
Open Real Estate CMS 1.5.1 CSRF / Path Disclosure / SQL Injection
Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://monoray.net/products/6-open-real-estate Tested on: Linux & Windows, PHP...
NSA’s #XKeyscore program could read Facebook Chats And Private Messages
According to a new report revealed by NSA leaker Edward Snowden, The National Security Agency has a secret program that allows it to see just about everything a person does on the Internet. An NSA tool called DNI Presenter, used to read the content of stored emails, also enables an analyst using...
DEBIAN-CVE-2013-4936
The IsDFPFrame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x before 1.10.1 does not validate MAC addresses, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...
CVE-2013-4936
The IsDFPFrame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x before 1.10.1 does not validate MAC addresses, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...
Null pointer dereference
The IsDFPFrame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x before 1.10.1 does not validate MAC addresses, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...
