2304 matches found
BeyondCHM 1.1 - Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= ============================================================================= BeyondCHM 1.1 Buffer Overflow price 32.56 EUR Url: http://www.beyondchm.com/ Author: shinnai...
Booking Calendar Lite CSRF (change password)
Exploit for php platform in category web applications Exploit Title: Booking Calendar Lite CSRF change password Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/booking-calendar-lite/27644/ Category:: webapps Demo : http://dev.kreci.net/calendar/admin.php Greetz:...
CVE-2011-4923
Cross-site scripting XSS vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the num parameter in a view action to index.cgi, related to the log file viewer, a different vulnerability than...
Unfixed Redirect vulnerability at calllendar.com
Security researcher p0pc0rn, has submitted on 24/12/2011 a Redirect vulnerability affecting calllendar.com, which at the time of submission ranked 26217722 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently unfixed. If...
CVE-2011-0284
Double free vulnerability in the prepareerroras function in doasreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an edat...
CVE-2006-6576
creationtimestamp| type| source ---|---|--- 2011-01-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16036 2011-06-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17355 2018-05-29 15:50:33+00:00| seen|...
Microsoft Windows Mobile - Overly Long vCard Name Field Denial of Service
Microsoft Windows Mobile - Overly Long vCard Name Field Denial of Service source: https://www.securityfocus.com/bid/44287/info Microsoft Windows Mobile is prone to a denial-of-service vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this issue to...
CVE-2008-0935
creationtimestamp| type| source ---|---|--- 2010-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16514 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/novelliprintexecuterequest.rb 2025-02-06...
[security bulletin] HPSBMA02558 SSRT010158 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02290344 Version: 1 HPSBMA02558 SSRT010158 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...
Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation
!/usr/bin/python avast! 4.7 aavmker4.sys privilege escalation http://www.trapkit.de/advisories/TKADV2008-002.txt CVE-2008-1625 Tested on WindXpSp2/Sp3 Dep ON Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce - 17/04/2010 Tested on WinXPSP2/SP3 englis...
Mozilla Firefox 3.5.3 Local Download Manager Exploit
Mozilla Firefox 3.5.3 Local Download Manager Exploit Exploit code for the download tampering vulnerability that can be referenced at http://www.mozilla.org/security/announce/2009/mfsa2009-53.html Full technical details at http://jbrownsec.blogspot.com/2009/10/firefox-local-download-manager.html...
Unfixed Redirect vulnerability at www.nra.org
Security researcher The Rat, has submitted on 05/05/2009 a Redirect vulnerability affecting www.nra.org, which at the time of submission ranked 132664 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently unfixed. If you...
Unfixed XSS vulnerability at www.nuestro-tiempo.com
Security researcher xylitol, has submitted on 19/08/2008 a cross-site-scripting XSS vulnerability affecting www.nuestro-tiempo.com, which at the time of submission ranked 216939 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/08/2008. It is...
CVE-2008-3217
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing...
PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection
PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV90$2008 ----------------------------------------------------------------------------------------- ECHOADV90$2008 PostNuke Module pnEncyclopedia = 0.2.0 id...
Unfixed XSS vulnerability at www.sportverbund.de
Security researcher PKDooM2007, has submitted on 18/03/2008 a cross-site-scripting XSS vulnerability affecting www.sportverbund.de, which at the time of submission ranked 3146860 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is...
Unfixed XSS vulnerability at www.townofgreece.org
Security researcher holisticinfosec, has submitted on 16/01/2008 a cross-site-scripting XSS vulnerability affecting www.townofgreece.org, which at the time of submission ranked 3362638 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008...
Unfixed XSS vulnerability at blogacine.blogacine.net
Security researcher Uber0n, has submitted on 13/01/2008 a cross-site-scripting XSS vulnerability affecting blogacine.blogacine.net, which at the time of submission ranked 1486325 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/02/2008. It is...
Unfixed XSS vulnerability at www.tripple.net
Security researcher TraCK10ya, has submitted on 01/02/2008 a cross-site-scripting XSS vulnerability affecting www.tripple.net, which at the time of submission ranked 42651 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/03/2008. It is...