Sandbox Multiple Remote Vulnerabilities

Sandbox is prone to multiple remote vulnerabilities, including multiple SQL-injection vulnerabilities, a local file-include vulnerability, and multiple arbitrary-file-upload vulnerabilities. Exploiting these issues could allow an attacker to upload and execute arbitrary code within the context of...

Sandbox Multiple Remote Vulnerabilities

Sandbox is prone to multiple remote vulnerabilities, including multiple SQL-injection vulnerabilities, a local file-include vulnerability, and multiple arbitrary-file-upload vulnerabilities. Exploiting these issues could allow an attacker to upload and execute arbitrary code within the context of...

osCommerce Local File Include and HTML Injection Vulnerabilities

osCommerce is prone to a local file-include vulnerability and an HTML- injection vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2010-0732

gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDKWINDOWFOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an...

CVE-2010-0441

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service daemon crash via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is 1 missing, 2 modified ...

Design/Logic Flaw

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations...

Zeus Web Server 4.x - SSL2_CLIENT_HELLO Remote Buffer Overflow (PoC)

Zeus Web Server 4.x - SSL2CLIENTHELLO Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/37829/info Zeus Web Server is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this iss...

Imagevue r16 - 'amount' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37557/info Imagevue is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

M.J.M. Quick Player 1.2 - Local Stack Buffer Overflow

M.J.M. Quick Player 1.2 - Local Stack Buffer Overflow Vulnerability : M.J.M. Quick Player v1.2 Stack BOF Discovered by : mrme seeleymagicathotmaildotcom Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : dec 28th, 2009 Type : local and remote code execution OS : Windows...

TFTgallery <= v 0.13 XSS

Exploit for unknown platform in category web applications ======================== TFTgallery document.writedocument.cookie 0day.today 2018-01-01...

httpdx 1.4.5 - dot Character Remote File Disclosure

httpdx 1.4.5 - dot Character Remote File Disclosure source: https://www.securityfocus.com/bid/44141/info The 'httpdx' application is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the...

Nagios 3.0.6 - 'statuswml.cgi' Arbitrary Shell Command Injection

source: https://www.securityfocus.com/bid/35464/info Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running th...

Profense 2.2.202.4.2 - Web Application Firewall Security Bypass

Profense 2.2.202.4.2 - Web Application Firewall Security Bypass source: https://www.securityfocus.com/bid/35053/info Profense Web Application Firewall is prone to multiple security-bypass vulnerabilities. An attacker can exploit these issues to bypass certain security restrictions and perform...

RealNetworks RealPlayer Gold 10.0 MP3 - File Handling Remote Denial of Service

RealNetworks RealPlayer Gold 10.0 MP3 - File Handling Remote Denial of Service source: https://www.securityfocus.com/bid/34719/info RealNetworks RealPlayer is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted files. Exploiting this issue...

Turnkey eBook Store 1.1 - 'keywords' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34324/info Turnkey eBook Store is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based...

lighttpd < 1.4.20 Multiple Vulnerabilities

Binary data 4698.prm...

PHP 5.2.6 - create_function() Code Injection (2)

PHP 5.2.6 - createfunction Code Injection 2 source: https://www.securityfocus.com/bid/31398/info PHP is prone to a code-injection weakness because it fails to sufficiently sanitize input to 'createfunction'. Note that the anonymous function returned need not be called for the supplied code to be...

Microsoft Internet Explorer 7/8 Beta 1 - Frame Location Cross Domain Security Bypass

source: https://www.securityfocus.com/bid/29986/info Microsoft Internet Explorer is prone to a cross-domain scripting security-bypass vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to change the location of a frame from a...

PT-2008-3473 · Apache +2 · Apache Tomcat +2

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 5.5.9 through 5.5.26 Apache Tomcat versions 6.0.0 through 6.0.16 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the name parameter also known as the...

Campus Bulletin Board 3.4 - post3book.asp?review Cross-Site Scripting

Campus Bulletin Board 3.4 - post3book.asp?review Cross-Site Scripting source: https://www.securityfocus.com/bid/29375/info Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to...