phptax 0.8 <= Remote Code Execution Vulnerability

----------------------------------------------------- phptax 0.8 = Remote Code Execution Vulnerability ----------------------------------------------------- Discovered by: Jean Pascal Pereira [email protected] Vendor information: "PhpTax is free software to do your U.S. income taxes. Tested under...

FirePass 7.0 SSL VPN - refreshURL Open Redirection

FirePass 7.0 SSL VPN - refreshURL Open Redirection source: https://www.securityfocus.com/bid/56156/info FirePass SSL VPN is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other...

FirePass 7.0 SSL VPN - 'refreshURL' Open Redirection

source: https://www.securityfocus.com/bid/56156/info FirePass SSL VPN is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. Versions prior to FirePass 7.0.0...

Valve Steam multiple security vulnerabilities

Buffer overflows, code executions and game engines vulnerabilities can be exploited via steam:// URI handler...

Mozilla Firefox < 16.0 Multiple Vulnerabilities

Binary data 6602.prm...

SeaMonkey 2.x < 2.13 Multiple Vulnerabilities

Binary data 6603.prm...

Mozilla SeaMonkey 2.x < 2.13 Multiple Vulnerabilities

Binary data 801301.prm...

Mozilla Firefox 15.x <= 15 Multiple Vulnerabilities

Binary data 801325.prm...

Mozilla Thunderbird 15.x <= 15 Multiple Vulnerabilities

Binary data 801323.prm...

Mozilla Thunderbird < 16.0.1 Multiple Vulnerabilities

Binary data 6604.prm...

SilverStripe CMS 2.4.x - 'BackURL' Open Redirection

source: https://www.securityfocus.com/bid/55915/info SilverStripe is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. SilverStripe 2.4.7 and prior are...

SilverStripe CMS 2.4.x - BackURL Open Redirection

SilverStripe CMS 2.4.x - BackURL Open Redirection source: https://www.securityfocus.com/bid/55915/info SilverStripe is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks a...

CVE-2012-3040

Cross-site scripting XSS vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

Arctic Torrent 1.2.3 - Memory Corruption (Denial of Service)

!/usr/bin/perl Arctic Torrent 1.2.3 Vendor URI: http://int64.org/projects/arctic-torrent/ Vendor Description: A minimal BitTorrent client. It wont have all the pretty features that other torrent apps have, but focuses on low memory and cpu usage. Because it was written in C++, you dont get the hi...

Arctic Torrent 1.2.3 Memory Corruption

!/usr/bin/perl Arctic Torrent 1.2.3 Vendor URI: http://int64.org/projects/arctic-torrent/ Vendor Description: A minimal BitTorrent client. It wont have all the pretty features that other torrent apps have, but focuses on low memory and cpu usage. Because it was written in C++, you dont get the hi...

Arctic Torrent 1.2.3 <= Remote Memory Corruption

Exploit for windows platform in category dos / poc !/usr/bin/perl Arctic Torrent 1.2.3 Vendor URI: http://int64.org/projects/arctic-torrent/ Vendor Description: A minimal BitTorrent client. It wont have all the pretty features that other torrent apps have, but focuses on low memory and cpu usage...

HCView - WriteAV Crash (PoC)

HCView - WriteAV Crash PoC !/usr/bin/perl Hardcoreview WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira Vendor URI: http://sourceforge.net/projects/hardcoreview/ Vendor Description: Image browser. Designed and created for profesional and amature watching image files. All kind of image...

HCView - WriteAV Crash (PoC)

!/usr/bin/perl Hardcoreview WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira Vendor URI: http://sourceforge.net/projects/hardcoreview/ Vendor Description: Image browser. Designed and created for profesional and amature watching image files. All kind of image files ; . Support .jpg,...

Universal Cross-site scripting vulnerability in Opera browser

A Universal Cross-site scripting vulnerability in Opera browser was disclosed today on a Russian forum rdot.org. The flaw has the ability to be triggered by exploiting flaws inside browsers, instead of leveraging the vulnerabilities against insecure web sites. "Vulnerable versions Opera for...