127 matches found
'Twilight' Fans Targeted in SEO Scareware Scams
Scareware purveyors’ top target for today: Twilight fans using Google to search for show times, sound tracks and all things related to latest movie about young vampire lovers. Read the full article. The Last Watchdog...
Ultimate Uploader 1.3 - Arbitrary File Upload
Ultimate Uploader 1.3 - Arbitrary File Upload ========================================================================== Script Name : Ultimate Uploader 1.3 Language : php Vendor : http://www.element-it.com Author : Master Mind Home : www.shdowskill.com , www.vbspiders.com...
Twilight Movie Fans Targeted in Scareware, Viruses
A viral marketing campaign designed to exploit your anticipation over the New Moon movie coming out tomorrow may look like normal free media you’ve come to expect on the Internet. A scareware purveyor has been spreading bad URLs, with the help of corrupted Google search results, having to do with...
CVE-2009-3856
Cross-site scripting XSS vulnerability in the default URI in news/ in Twilight CMS before 4.1 allows remote attackers to inject arbitrary web script or HTML via the calendar parameter. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in the default URI in news/ in Twilight CMS before 4.1 allows remote attackers to inject arbitrary web script or HTML via the calendar parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-3856
Twilight CMS
Stratek Web Design Twilight CMS 4.0 - calendar Cross-Site Scripting
Stratek Web Design Twilight CMS 4.0 - calendar Cross-Site Scripting source: https://www.securityfocus.com/bid/41895/info Twilight CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...
Stratek Web Design Twilight CMS 4.0 - 'calendar' Cross-Site Scripting
source: https://www.securityfocus.com/bid/41895/info Twilight CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...
[ONSEC-09-018] Twilight CMS XSS
http://onsec.ru/vuln?id=10 ONSEC-09-018 Twilight CMS XSS Цель: Twilight CMS Тип: Межсайтовый скриптинг Угроза: Средняя Дата обнаружения: 01.10.2009 Дата оповещения разработчика: 01.10.2009 Дата выхода исправления: 10.01.2009 Автор: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru...
CVE-2003-1318
CVE-2003-1318 affects Twilight Webserver 1.3.3.0. A remote attacker can cause a denial of service (application crash) by issuing a GET request for a long URI. The provided documents do not specify any official fixes or patches; no exploitation details are given beyond the basic description.
CVE-2003-1318
Twilight Webserver 1.3.3.0 allows remote attackers to cause a denial of service application crash via a GET request for a long URI, a different vulnerability than CVE-2004-2376...
Twilight Webserver 1.3.3.0 (GET) Remote Denial of Service Exploit
No description provided by source. / Denial of Service Attack against Twilight Webserver v1.3.3.0 Author: H0tTurk- WebSite: http://www.twilightutilities.com Version: Twilight Webserver v1.3.3.0 $24.95 USD NewVersion: Tw 2.1 Exploit: tw.c Compile: gcc twilight -o tw Contact: - Mail:...
CVE-2004-2380
The CVE describes a directory traversal vulnerability in Twilight Utilities Web Server 2.0.0.0, exploitable through postfile.exe where an attacker can abuse the attfile parameter containing .. to write arbitrary files. Affected component is postfile.exe; the underlying cause is improper validatio...
CVE-2004-2376
CVE-2004-2376 affects Twilight Utilities Web Server 2.0.0.0, with a vulnerability in the helper executable postfile.exe . The issue is a buffer overflow triggered by a URL request containing a long attfile attribute , which can allow a remote attacker to cause a denial of service (crash) and pote...
CVE-2004-2380
Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to write arbitrary files via a .. dot dot in the attfile parameter...
CVE-2004-2376
Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a URL request with a long attfile attribute...
CVE-2004-2376
Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a URL request with a long attfile attribute...
CVE-2004-2380
Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to write arbitrary files via a .. dot dot in the attfile parameter...