PT-2013-70: Multiple Cross-Site Scripting (XSS) in Serv-U File Server

The specialists of the Positive Research center have detected Multiple Cross-Site Scripting vulnerabilities in Serv-U File Server. The application does not perform sufficient validation of parameters, which are sent by client and used in HTM scripts. This vulnerability allows an attacker to execu...

PT-2013-68: Sensitive Information Disclosure in Serv-U File Server

The specialists of the Positive Research center have detected a Sensitive Information Disclosure vulnerability in Serv-U File Server on Windows. The system does not consider that NTFS allows users to address files with extended syntax, while matching the requested resource URL with locations...

U-mail 9.8.53 /worldClient/html/fileshare.php SQL注入漏洞

No description provided by source...

Serv-U SSL远程拒绝服务及LDAP漏洞

Serv-U是一种使用广泛的FTP服务器程序。 Serv-U 15.0.0.0之前版本在SSL和LDAP的实现上存在安全漏洞，可导致拒绝服务等其他影响。成功利用此漏洞需要设置 "Require Fully Qualified Membership" LDAP登录设置。 0 serv-u 14.x 厂商补丁： serv-u ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.serv-u.com/releasenotes/...

Serv-U < 14.0.2.0 FTP Server SSL Renegotiation DoS

According to its banner, the installed version of Serv-U is earlier than 14.0.2.0 and is, therefore, potentially affected by a denial of service vulnerability. A remote attacker could cause denial of service conditions by continually sending SSL renegotiation requests to the application...

JDK: unspecified vulnerability fixed in 7u25 (2D)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different...

U-mail邮箱系统存储型xss漏洞

简要描述： : 详细说明： 正文未作过滤！ 正文编辑html插入代码 影响大量邮箱系统 官方邮箱测试 漏洞证明：...

OpenJDK: Specially crafted sample model integer overflow (2D, 8007014)

Unspecified vulnerability in the 2D component in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than...

CVE-2013-0703

CVE-2013-0703 is an XSS vulnerability affecting imgboard.com imgboard before 1.22R6.1 u and 20xx before 2010u. Reported across multiple sources (NVD, JVN, Red Hat, CVE records); vectors are unspecified in most summaries. The root cause/impact is reflected as arbitrary script execution in the user...

Serv-U FTP <= 11.1.0.3 possible management console access

Exploit for windows platform in category dos / poc -------- winerr.h -------- / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error =...

Pennsylvania Man Indicted For Hack of Department of Energy Network

A Pennsylvania man was arrested yesterday after a Massachusetts grand jury issued a four-count indictment alleging that he hacked into computer networks belonging to the U.S. Department of Energy DoE and the University of Massachusetts and tried to sell access to a DoE supercomputer for $50,000 t...

MyWorldCMS XSS Presistent Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CVE-2012-1399

Unspecified vulnerability in the U+Box 2.0 lg.uplusbox application 2.0.2 and 2.0.8.4 for Android has unknown impact and attack vectors...

CVE-2012-1400

Unspecified vulnerability in the U+Box 2.0 Pad lg.uplusbox.pad application 2.0.8.4 for Android has unknown impact and attack vectors...

Code injection

Unspecified vulnerability in the U+Box 2.0 lg.uplusbox application 2.0.2 and 2.0.8.4 for Android has unknown impact and attack vectors...

CVE-2012-1399

Unspecified vulnerability in the U+Box 2.0 lg.uplusbox application 2.0.2 and 2.0.8.4 for Android has unknown impact and attack vectors...

CVE-2012-1400

Unspecified vulnerability in the U+Box 2.0 Pad lg.uplusbox.pad application 2.0.8.4 for Android has unknown impact and attack vectors...

Code injection

Unspecified vulnerability in the U+Box 2.0 Pad lg.uplusbox.pad application 2.0.8.4 for Android has unknown impact and attack vectors...

CVE-2012-1399

Technical details about CVE-2012-1399 are not publicly available in the provided connected documents; no affected products, impact, vectors, or remediation are specified here. Monitor for updates.

CVE-2012-1400

Technical details about CVE-2012-1400 are not publicly provided in the supplied documents. Monitoring for updates recommended; no concrete affected products, vectors, impact, or fixes can be stated from the available material.