930 matches found
CVE-2008-3743
CVE-2008-3743 affects Drupal 6.x before 6.4. The vulnerability is a CSRF issue caused by improper token validation for cached forms and forms with AHAH elements, enabling remote attackers to perform unspecified actions. The MiracleLinux advisories reference this CVE and indicate remediation by up...
CVE-2008-3681
components/comuser/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the "first enabled user lowest id" password, typically for the administrator...
MS Windows Improper Token Validation Local Exploit (working)
No description provided by source. / Removed include "stdafx.h" / str0ke / include stdio.h include windows.h define INFOBUFFERSIZE MAXCOMPUTERNAMELENGTH + 1 define PATHSIZE INFOBUFFERSIZE + MAXPATH + 4 typedef UINT WINAPI PFnMsiInstallProductLPCSTR szPackagePath, LPCSTR szCommandLine; int mainint...
Microsoft Windows - Improper Token Validation Privilege Escalation
Microsoft Windows - Improper Token Validation Privilege Escalation / Removed include "stdafx.h" / str0ke / include include define INFOBUFFERSIZE MAXCOMPUTERNAMELENGTH + 1 define PATHSIZE INFOBUFFERSIZE + MAXPATH + 4 typedef UINT WINAPI PFnMsiInstallProductLPCSTR szPackagePath, LPCSTR szCommandLin...
MS Windows Improper Token Validation Local Exploit (working)
Exploit for unknown platform in category local exploits ============================================================ MS Windows Improper Token Validation Local Exploit working ============================================================ / Removed include "stdafx.h" / str0ke / include include defi...
Microsoft Windows - Improper Token Validation Privilege Escalation
/ Removed include "stdafx.h" / str0ke / include include define INFOBUFFERSIZE MAXCOMPUTERNAMELENGTH + 1 define PATHSIZE INFOBUFFERSIZE + MAXPATH + 4 typedef UINT WINAPI PFnMsiInstallProductLPCSTR szPackagePath, LPCSTR szCommandLine; int mainint argc, char argv HANDLE hToken,hThread; HMODULE hMsi ...
Security Update For Exchange Server 2013 CU6 (KB3011140)
The security update addresses the vulnerabilities by ensuring that Outlook Web Access properly validates request tokens and by ensuring that URLs are properly sanitized...
Security Update For Exchange Server 2016 CU18 (KB4581424)
A Microsoft Exchange information disclosure exists in how tokens are validated when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user...
Security Update For Exchange Server 2019 CU7 (KB4581424)
A Microsoft Exchange information disclosure exists in how tokens are validated when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user...
Security Update For Exchange Server 2019 CU6 (KB4581424)
A Microsoft Exchange information disclosure exists in how tokens are validated when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user...