Apache Tomcat 7.0.x < 7.0.4 SecurityManager Local Security Bypass

Binary data 5792.pasl...

Microsoft Internet Explorer Denial of Service Vulnerability (Mar 2010)

Internet Explorer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft IE 6&amp;7 Crash Exploit

Securitylab.ir Application Info: Name: Microsoft IE Version: 6 & 7 Tested on : XPSP1/SP2/SP3 Vulnerability Info: Type: Crash Risk: Medium Vulnerability: IE.html scriptdocument.createElement"html".outerHTML/script Discoverd By: Pouya Daneshmand Website: http://securitylab.ir Contacts:...

Microsoft Internet Explorer Remote Code Execution Vulnerability (979352)

The host is installed with Internet Explorer and is prone to Remote Code Execution vulnerability. This NVT has been replaced by NVT secpodms10-002.nasl OID:1.3.6.1.4.1.25623.1.0.901097. OpenVAS Vulnerability Test $Id: gbmsiedepremotecodeexecvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft...

Design/Logic Flaw

The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the 1 Privileged Context and 2 Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and...

CMScontrol 7.x (index.php id_menu) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== CMScontrol 7.x index.php idmenu SQL Injection Vulnerability ==============================================================...

CMScontrol (Content Management Portal Solutions) Sql Injection

No description provided by source. =Info======================================================================= Software: CMScontrol Content Management Portal Solutions Sql Injection Version: 7. Vulnerability: Remote Sql Injection Google Dork: "index.php?idmenu=" CMScontrol Off. site:...

Microsoft Internet Explorer 'findText()' Unicode Parsing DoS Vulnerability

This host has Internet Explorer installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmsiefindtextdosvulnaug09.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer 'findText' Unicode Parsing DoS Vulnerability Authors: Sharath S Copyright:...

Microsoft Internet Explorer 'findText()' Unicode Parsing DoS Vulnerability

Internet Explorer is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Internet Explorer Buffer Overflow Vulnerability (Jul 2009)

Internet Explorer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell Groupwise Cross Site Scripting

Novell GroupWise Web Access Multiple XSS /============================================\ / SecureState R&D Team - leroy and sasquatch \ / Discovered: 11-24-08, 03-05-09 \ \ Vendor Notified: 01-06-09, 03-05-09 / \ Vendor Publication: 05-21-09 / ============================================/...

Microsoft Internet Explorer Denial of Service Vulnerability (Apr 2009)

Internet Explorer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hot Project v7 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -------------------------AllaH AkbaR------------------------------- Hot Project - Version 7 Auth Bypass Remote Sql Injecion --------------------------------------------------------------------------- Discovered By: HCOCAMAN ALGERIAN HaCkEr Mail: [email protected]...

Hot Project 7.0 - Authentication Bypass

Hot Project 7.0 - Authentication Bypass -------------------------AllaH AkbaR------------------------------- Hot Project - Version 7 Auth Bypass Remote Sql Injecion --------------------------------------------------------------------------- Discovered By: HCOCAMAN ALGERIAN HaCkEr Mail:...

PHP infoBoard 7 - Plus Insecure Cookie Handling

PHP infoBoard 7 - Plus Insecure Cookie Handling + PHP infoBoard V.7 Plus Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "infouser=1; path=/"; document.cookie = "infopass=1; path=/"; milw0rm.com 2008-09-25...

Cezanne 6.5.17 - home.asp?CFTARGET Cross-Site Scripting

Cezanne 6.5.17 - home.asp?CFTARGET Cross-Site Scripting source: https://www.securityfocus.com/bid/28772/info Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Authenticated attackers may leverage these issues to...

s21sec-42-en.txt

S21Sec Advisory - Title: Cezanne SW Cross-Site Scripting login required ID: S21SEC-042-en Severity: Medium History: 02.Jan.2008 Vulnerability discovered Authors: Juan de la Fuente Costa [email protected] Fco Javier Puerta Rubio [email protected] URL:...

PHP-Nuke < 8.0 (sid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================= PHP-Nuke version Tested on 7.9 & 6.0 '; if $argc table prefix\n"; print "ex.: " . $argv0 . " phpnuke.org 7\n"; credits; exit; / few definitions / if empty$argv3 $prefix = 'nuke'; define...

CVE-2007-4760

The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...

DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy

I have details about the DOS issue on my blog with links to the Astaro forums. http://www.hescominsoon.com/archives/773 Version affected: ALL Version 7 systems. This is easily reproducible. Just setup a BT client behind the astaro and do not setup a packetfilter and NAT rule for the BT traffic...