231 matches found
Squirrel Sandbox Escape allows Code Execution in Games and Cloud Services
SquirrelLang is an interpreted, open-source programming language that is used by video games and cloud services for customization and plugin development. For example, the extremely popular game Counter-Strike: Global Offensive CS:GO attracts millions of players on a monthly basis and utilizes the...
squirrel-sql-client.10976.n7.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1184711 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Squirrel Run - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Squirrel Run published at the 'play' market has multiple vulnerabilities...
Talking James Squirrel - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Talking James Squirrel published at the 'play' market has multiple vulnerabilities...
WordPress Squirrel Theme 1.6.4 Remote File Inclusion Vulnerability
WordPress Squirrel Theme version 1.6.4 suffers from a remote file inclusion vulnerability. | Title : WP-squirrel 1.6.4 Theme R/L Files Inclusion Download Vulnerability | Author : indoushka | email : email protected | Tested on: windows 8.1 Français V.Pro | Download :...
WordPress Squirrel Theme 1.6.4 Remote File Inclusion
| Title : WP-squirrel 1.6.4 Theme R/L Files Inclusion Download Vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Download : https://wordpress.org/themes/squirrel/ ======================================= poc : requireonce $functionspath...
Microsoft Hotmail or Outlook 0day exploit by squirrel sploit
An 0day exploit in Microsoft Hotmail system was discovered by squirrel sploit and was successively Integer in our software / Caution should read this : English Tutorial : http://www.youtube.com/watch?v=zfsBXz3lmRg French Tutorial : http://www.youtube.com/watch?v=XHGCXajyVA To exploit this...
squirrelmail: not fixed in RHSA-2012:0103
functions/imapgeneral.php in SquirrelMail, as used in Red Hat Enterprise Linux RHEL 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service disk consumption by making many IMAP login attempts with different usernames, leading to...
SquirrelMail: Server-side code injection in map_yp_alias username map
The mapypalias function in functions/imapgeneral.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program...
Unfixed XSS vulnerability at www.armoredsquirrel.com
Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.armoredsquirrel.com, which at the time of submission ranked 6115670 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. I...
Squirrel Mail 1.2.7 XSS Exploit
Sorry if you receive two of these. DarC KonQuesT XSS Release- Product: Squirrel Mail 1.2.7 - released June 21, 2002 tested, others possibly vulnerable Vendor: Squirrel Mail - Web: www.squirrelmail.org Problem: Cross Site Scripting Severity: Moderate Operating Systems: Tested against Red Hat 7.3,...