3299 matches found
CVE-2008-5446
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not comment...
CVE-2008-5446
CVE-2008-5446 concerns an unspecified vulnerability in the Oracle Applications Framework (OAF) component of Oracle E-Business Suite, affecting versions 11.5.10 CU2 and 12.0.6. The issue is described as allowing remote authenticated users to affect confidentiality via unknown vectors; there is a n...
DMXReady Contact Us Manager 1.1 - Remote Contents Change
Title : DMXReady Contact Us Manager http://target/path//applications/ContactUsManager/inccontactusmanager.asp Edit - http://target/path//admin/ContactUsManager/addcategory.asp : milw0rm.com 2009-01-14...
DMXReady Contact Us Manager <= 1.1 Remote Contents Change Vuln
Exploit for unknown platform in category web applications ============================================================== DMXReady Contact Us Manager http://target/path//applications/ContactUsManager/inccontactusmanager.asp Edit - http://target/path//admin/ContactUsManager/addcategory.asp :...
DMXReady Contact Us Manager <= 1.1 Remote Contents Change Vuln
No description provided by source. Title : DMXReady Contact Us Manager = 1.1 Remote Contents Change Vulnerability Author : "ajann" from Turkey Contact : : S.Page : http://www.dmxready.com $$ : 49.97 $ Dork : inurl:inccontactusmanager.asp DorkEx :...
US-CERT Technical Cyber Security Alert TA08-340A -- Sun Java Updates for Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-340A Sun Java Updates for Multiple Vulnerabilities Original release date: December 05, 2008 Last revised: -- Source: US-CERT Systems Affected Sun Java Runtime Environment versions JDK and...
Husdawg, LLC. System Requirements Lab ActiveX Unsafe Method
This module allows attackers to execute code via an unsafe method in Husdawg, LLC. System Requirements Lab ActiveX Control sysreqlab2.dll 2.30.0.0 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...
iseemedia / Roxio / MGI Software LPViewer ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in LPViewer ActiveX control LPControll.dll 3.2.0.2. When sending an overly long string to the URL property an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...
SoftArtisans XFile FileManager ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in SoftArtisans XFile FileManager ActiveX control SAFmgPwd.dll 2.0.5.3. When sending an overly long string to the GetDriveName method an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...
CVE-2008-4149
Cross-site scripting XSS vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link page header" field...
Cross site scripting
Cross-site scripting XSS vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link page header" field...
CVE-2008-4149
Cross-site scripting XSS vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link page header" field...
CVE-2008-4149
CVE-2008-4149 is a documented XSS vulnerability in the Drupal module “Link to Us” (Greg Holsclaw) for 5.x versions prior to 5.x-1.1. The issue resides in the Link page header input, allowing injection of arbitrary web script or HTML. Impact described as cross-site scripting; exploitation details ...
SA-2008-052 - Link To Us - Cross site scripting
The Link To Us module creates a page to display uploaded banners that can be used by others to link to your Drupal site. The module will create well formed SEO links with full title, alt and anchor text determined by the node title, taxonomy term or other pages that are directed to the module...
Unfixed XSS vulnerability at www.wowgoldvip.com
Security researcher mckt, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.wowgoldvip.com, which at the time of submission ranked 133425 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2008. It is current...
Cisco Security Advisory: SNMP Version 3 Authentication Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: SNMP Version 3 Authentication Vulnerabilities Document ID: 107408 Advisory ID: cisco-sa-20080610-snmpv3 http://www.cisco.com/warp/public/707/cisco-sa-20080610-snmpv3.shtml Revision 1.0 For Public Release 2008 June 10 1600 UTC...
SNMP Version 3 Authentication Vulnerabilities
Multiple Cisco products contain either of two authentication vulnerabilities in the Simple Network Management Protocol version 3 SNMPv3 feature. These vulnerabilities can be exploited when processing a malformed SNMPv3 message. These vulnerabilities could allow the disclosure of network informati...
US-CERT Technical Cyber Security Alert TA08-094A -- Apple Updates for Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-094A Apple Updates for Multiple Vulnerabilities Original release date: April 3, 2008 Last revised: -- Source: US-CERT Systems Affected Apple Mac OS X running versions of QuickTime prior t...
US-CERT Technical Cyber Security Alert TA08-079B -- MIT Kerberos Updates for Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-079B MIT Kerberos Updates for Multiple Vulnerabilities Original release date: March 19, 2008 Last revised: -- Source: US-CERT Systems Affected MIT Kerberos Overview The MIT Kerberos...
US-CERT Technical Cyber Security Alert TA08-066A -- Sun Updates for Multiple Vulnerabilities in Java
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-066A Sun Updates for Multiple Vulnerabilities in Java Original release date: March 6, 2008 Last revised: -- Source: US-CERT Systems Affected Sun Java Runtime Environment versions JDK and...