Mandriva Linux Security Advisory : libesmtp (MDVSA-2010:195)

Multiple vulnerabilities has been found and corrected in libesmtp : libESMTP, probably 1.0.4 and earlier, does not properly handle a '\0' NUL character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL...

CVE-2010-1507

WebYaST in yast2-webclient in SUSE Linux Enterprise SLE 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session cookies by leveraging knowledge of this key...

Google Chrome < 6.0.472.53 Multiple Vulnerabilities

Binary data 800892.prm...

Authorization

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors...

Design/Logic Flaw

The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a redirect, and...

CVE-2010-2522

The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message...

Sardus (index.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== Sardus index.php Blind SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

iProv CMS (XSS/SQL Injection) Multiple Vulnerability

Exploit for php platform in category web applications ==================================================== iProv CMS XSS/SQL Injection Multiple Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

CVE-2010-2660

Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters...

Code injection

Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters...

Publifarm (newsdettaglio.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================================== Publifarm newsdettaglio.php Blind SQL Injection Vulnerability ===============================================================...

UFO: Alien Invasion v2.2.1 BoF Exploit (Win7 ASLR and DEP Bypass)

Exploit for windows platform in category remote exploits ================================================================= UFO: Alien Invasion v2.2.1 BoF Exploit Win7 ASLR and DEP Bypass ================================================================= !/usr/bin/python Exploit Title: UFO: Alien...

UFO: Alien Invasion 2.2.1 (Windows 7) - Remote Buffer Overflow (ASLR + DEP Bypass)

UFO: Alien Invasion 2.2.1 Windows 7 - Remote Buffer Overflow ASLR + DEP Bypass !/usr/bin/python Exploit Title: UFO: Alien Invasion v2.2.1 BoF Exploit Win7 ASLR and DEP Bypass Date: July 5, 2010 Author: Node Software Link:...

Padasoft (news.php) SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== Padasoft news.php SQL Injection Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

RAVVIVA (news.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== RAVVIVA news.php Blind SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Dada CMS (gioco_desc.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== Dada CMS giocodesc.php SQL Injection Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Dada CMS (faq) XSS Vulnerabilities

Exploit for php platform in category web applications ================================== Dada CMS faq XSS Vulnerabilities ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

Kconsulting (XSS/URL Redirecting) Multiple Vulnerability

Exploit for php platform in category web applications ======================================================== Kconsulting XSS/URL Redirecting Multiple Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

PunBB Private Message System <= 1.2.3 XSS Vulnerability (3)

Exploit for php platform in category web applications =========================================================== PunBB Private Message System Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0...

PunBB Private Message System <= 1.2.3 XSS Vulnerability (2)

Exploit for php platform in category web applications =========================================================== PunBB Private Message System Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0...