10560 matches found
Hit Counter 2.0 Cross Site Scripting Vulnerability
Exploit for unknown platform in category web applications ================================================== Hit Counter 2.0 Cross Site Scripting Vulnerability ================================================== | Dork : Powered by Hit Counter v2.0 c eTek Systems | Tested on: windows SP2 Fran?§ai...
DVBBS Multiple Cross Site Scripting Vulnerabilities
Exploit for unknown platform in category web applications =================================================== DVBBS Multiple Cross Site Scripting Vulnerabilities =================================================== Remote: Yes Credit: lostmon is credited with the discovery of this vulnerability...
Kojoney 0.0.4.1 - 'urllib.urlopen()' Remote Denial of Service
source: https://www.securityfocus.com/bid/38395/info Kojoney is prone to a remote denial-of-service vulnerability. A remote attacker can exploit this issue to gain unauthorized access to local files and crash the affected application, resulting in a denial-of-service condition. Versions prior to...
vBulletin 4.0.2 Cross Site Scripting
======================================================================================== | Title : vBulletin Version 4.0.2 Cross Site Scripting in URI Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site :...
Social Web CMS 2 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/38329/info Social Web CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...
Mongoose 2.8 - Space String Remote File Disclosure
source: https://www.securityfocus.com/bid/38145/info Mongoose is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process, which may a...
VideoLAN VLC Media Player SMB URI Invalid Free
VLC Media Player is an open source multimedia player maintained by VideoLAN.org. It can play many audio and video formats MPEG, DivX, ogg, Wave etc. as well as various streaming protocols. It is highly portable and available for multiple platforms. Support for various formats is implemented in th...
Code injection
Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via multiple requests for a non-existent file using a long URI...
IBM Installation Manager iim URI Handling Code Execution
IBM Installation Manager IIM is a software tool that helps to install, update, modify, and install packages. It helps to manage IBM applications or packages by providing tools to keep packages up to date, modify the packages, manage the licenses for those packages, and uninstall the packages from...
nginx URI Parsing Buffer Underflow (CVE-2009-2629)
A remote buffer underflow vulnerability exists within nginx HTTP server. The vulnerability is due to an error when processing malicious HTTP requests. A remote attacker can exploit this vulnerability by sending an HTTP request containing specially crafted URI to the target system. Successful...
SAP BusinessObjects 12 - URI redirection Cross-Site Scripting
SAP BusinessObjects 12 - URI redirection Cross-Site Scripting source: https://www.securityfocus.com/bid/37972/info SAP BusinessObjects is prone to multiple URI-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input. Attackers can...
SAP BusinessObjects 12 - URI redirection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/37972/info SAP BusinessObjects is prone to multiple URI-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to execute arbitrary script or HTML code,...
HP OpenView Network Node Manager ovalarm.exe CGI Buffer Overflow
This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53. By sending a specially crafted CGI request to ovalarm.exe, an attacker can execute arbitrary code. This specific vulnerability is due to a call to "sprintfnew" in the "isWide" function within "ovalarm.exe". A...
Microsoft Internet Explorer 8 - URI Validation Remote Code Execution
Microsoft Internet Explorer 8 - URI Validation Remote Code Execution source: https://www.securityfocus.com/bid/37884/info Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running th...
Microsoft Internet Explorer 8 - URI Validation Remote Code Execution
source: https://www.securityfocus.com/bid/37884/info Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application an...
EFS Software Easy Chat Server 2.2 - Remote Buffer Overflow
EFS Software Easy Chat Server 2.2 - Remote Buffer Overflow !/usr/bin/ruby Author: John Babio Tested on: Windows XP Sp3 Eng require 'net/http' require 'uri' require 'socket' jmp = "\xeb\x06\x90\x90" ppr = "\xa2\xb9\01\x10" SSLEAY32.dll pop ebx, pop ebp, ret win32exec - EXITFUNC=seh CMD=calc Size=1...
Design/Logic Flaw
The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal variables and other data via a request to a URI ending in /dump/, as demonstrated by discovering the value of the getPathTranslated variable...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 jspsnoop/, 2 jspsnoop/ERROR/, and 3 jspsnoop/IOException/, and possibly t...
Tribisur - 'cat' Cross-Site Scripting
source: https://www.securityfocus.com/bid/37800/info Tribisur is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...