New Relic: Html injection in monitor name textbox

payload in monitor name textbox : image tag is executed in Monitot failed email fix : Need to done secure parse encode in monitor name textbox to prevent html injection in email...

SQL Injection Vulnerability in MagazineCantoRequest.aspx of Beijing Jinpan Software Technology Co.

Beijing Jinpan Software Technology Co., Ltd. Jinpan collection query system is a digital library as the framework for building a new type of large-scale system adapted to the operation mechanism of digital libraries. The product MagazineCantoRequest.aspx SQL injection vulnerability exists, the...

Mozilla: Dragging and dropping images exposes final URL after redirects (MFSA 2015-110)

Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element...

PT-2015-2177

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Mozilla Firefox ESR versions 38.x prior to 38.3 Description The issue is related to a lack of protection for service data, allowing a remote attacker to bypass existing access restrictions and execute a...

CVE-2015-4519

Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element...

VeryPDF HTML Converter 2.0 - Local Buffer Overflow (SEH/ToLower() Bypass)

Exploit Title: VeryPDF HTML Converter v2.0 SEH/ToLower Bypass Buffer Overflow Date: 9-6-2015 Target tested: Windows 7 x86/x64 Software Link: http://www.verypdf.com/htmltools/winhtmltools.exe Exploit Author: Robbie Corley Contact: [email protected] Website: CVE: Category: Local Exploit...

PT-2014-6439

Name of the Vulnerable Software and Affected Versions Schrack Technik microControl version 1.7.0 937 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the...

CVE-2014-5382: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web interface in Schrack Technik microControl with firmware 1.7.0 937 allow remote attackers to inject arbitrary web script or HTML via the position textbox in the configuration menu or other unspecified vectors...

Concrete CMS: XSS IN member List (Because of City Textbox)

Proof: http://prntscr.com/348q0v 1st: go to your profile Edit your Address and City and put this code "...

Oracle Linux 5 : newt (ELSA-2009-1463)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1463 advisory. 0.52.2-12.el54.1 - fix buffer overflow in textbox when reflowing 524618, CVE-2009-2905 Tenable has extracted the preceding description block directly from the...

Apple QuickTime TeXML textBox Element Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Apple...

Microsoft Internet Explorer VML TextBox Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2013-2807

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted TeXML file, specifically through the textBox Element Parsing...

PT-2013-3093

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer affected versions not specified Description The issue is related to a use-after-free condition in the VML TextBox component. This can potentially lead to remote code execution. Recommendations At the moment, there i...

SuSE 10 Security Update : LibreOffice (ZYPP Patch Number 8022)

LibreOffice 3.4.5 includes many fixes over the previous LibreOffice 3.4.2.6 update. The update fixes the following security issues : - 740453: Vulnerability in RDF handling. CVE-2012-0037 - 752595: overflow in jpeg handling. CVE-2012-1149 - 736146: buffer overflow in the build in icu copy 736146...

Kevin Mitnick's website open to Cross-Site Scripting ( XSS ) vulnerability

Kevin Mitnick's website open to Cross-Site Scripting XSS vulnerability Cross-Site Scripting XSS vulnerability discovered in official website of Kevin Mitnick one of the most talented hackers, and the one one most prosecuted by the state. Mitnick's hacker handle was "Condor". He became the first...

BPTSoft Web Solution Group SQL Injection

HUT CNIS Exploit Title: BPTSoft Web Solution Group SQL INJECTION Vulnerability Date: 2012/1/1 Author: S.Azadi Google Dork: site:.ir intext:Copyright 2005-2009 BPTSoft Web Solution Group Vulnerability Type: SQL Injection Version: 2005-2009...

CVE-2011-1845

Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service memory consumption via an application involving 1 subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or 2 a TextBlock or TextBox...

Design/Logic Flaw

Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service memory consumption via an application involving 1 subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or 2 a TextBlock or TextBox...

CVE-2011-1845

Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service memory consumption via an application involving 1 subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or 2 a TextBlock or TextBox...