6594 matches found
Code injection
Accoria Web Server aka Rock Web Server 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie...
Simple Machines Forum 2.0 RC3 Cross Site Request Forgery
Exploit Title: Simple Machines Forum = 2.0 RC3 Sesc theft XSRF Date: 09-06-2010 Author: Xianur0 Software Link: http://download.simplemachines.org/ Version: =2.0 RC3 Tested on: 1.1.11 & 2.0 RC3 Vale, este "bug" es simple, y a decir verdad me parese bastante estupido, pero bueno... xD... El SMF en...
SA00001-2010
Vulnerability Report 1. Affected software OrangeHRM 2.5.0.4 Prior versions may also be affected. "OrangeHRM is an Open Source HRM system. It provides an ideal solution for small and medium sized enterprises looking for an inexpensive way to effectively manage and develop their human resources."...
CVE-2008-7255
loginscreen.tcl in aMSN aka Alvaro's Messenger before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation...
CVE-2008-7255
loginscreen.tcl in aMSN aka Alvaro's Messenger before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation...
CVE-2008-7255
CVE-2008-7255 concerns aMSN (Alvaro’s Messenger) where login_screen.tcl can save a password after logout, enabling session hijacking on unattended workstations. The vulnerability is described with a CVSS v2 base score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P) and is classified as a local issue with no ...
OpenSSH X Connections Session Hijacking Vulnerability
OpenSSH is prone to a vulnerability that allows attackers to hijack forwarded X connections. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...
Novell eDirectory DHost Predictable Session ID
The eDirectory DHost web server running on the remote host generates predictable session IDs. A remote attacker could exploit this by predicting the session ID of a legitimately logged-in user, which could lead to the hijacking of administrative sessions. C Tenable Network Security, Inc...
Novell eDirectory 8.8.5 - DHost Weak Session Cookie Session Hijacking (Metasploit)
source: https://www.securityfocus.com/bid/38782/info Novell eDirectory is prone to a session-hijacking vulnerability. An attacker can exploit this issue to gain access to the affected application. Novell eDirectory 8.8.5 is vulnerable; other versions may also be affected. $Id:...
Cross-site scripting cookie theft
Added: 03/09/2010 Background Many web sites include scripts, which are lists of commands which, when executed in sequence, provide some enhancement to a web page. Web browsers are able to recognize scripts in web pages by the tag and handle them accordingly. Problem By sending an HTTP request...
Perforce Multiple Vulnerabilities
Perforce Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Cross-site scripting cookie theft
Added: 03/09/2010 Background Many web sites include scripts, which are lists of commands which, when executed in sequence, provide some enhancement to a web page. Web browsers are able to recognize scripts in web pages by the tag and handle them accordingly. Problem By sending an HTTP request...
Perforce Multiple Vulnerabilities
Perforce Server is prone to Multiple Vulnerabilities. 1. A security-bypass vulnerability. Attackers may exploit the issue to bypass certain security restrictions and perform unauthorized actions. 2. A session-hijacking vulnerability. An attacker can exploit this issue to gain access to the affect...
CVE-2009-4655
The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie...
Code injection
The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie...
Cybershade CMS 0.2b Session Hijacking
p0c!: Session Hijacking Cybershade CMS 0.2b Session Hijacking PoC Vulnerability url: http://sourceforge.net/projects/cybershadecms/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security...
GLSA-201001-08 : SquirrelMail: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201001-08 SquirrelMail: Multiple vulnerabilities Multiple vulnerabilities were found in SquirrelMail: Niels Teusink reported multiple input sanitation flaws in certain encrypted strings in e-mail headers, related to...
Cybershade CMS 0.2b Session Hijacking PoC Vulnerability
Exploit for unknown platform in category web applications ======================================================= Cybershade CMS 0.2b Session Hijacking PoC Vulnerability ======================================================= p0c!: Session Hijacking Cybershade CMS 0.2b Session Hijacking PoC...
Kusaba X <= 0.9 XSS/CSRF vulnerabilities
Exploit for unknown platform in category web applications ======================================== Kusaba X . iframes work too The injected script will render and execute when a Moderator or Administrator views the reports. If a Moderator falls victim, the worst case scenario would be cookie...