PT-2011-3955

Name of the Vulnerable Software and Affected Versions IBM Rational Team Concert RTC version 3.0 Description A cross-site scripting XSS issue exists in the Web UI, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Recommendations For IBM Rational Team...

CVE-2011-2606: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI in IBM Rational Team Concert RTC 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511...

CVE-2011-1716

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1716

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1716

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1716

CVE-2011-1716 concerns Xymon Monitor’s Web UI, where multiple XSS vulnerabilities exist in versions prior to 4.3.1. The description specifies that remote attackers can inject arbitrary web script or HTML via unspecified vectors, indicating the Web UI’s insufficient input/output handling as the ro...

CVE-2011-1716

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1716

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-3316

Name of the Vulnerable Software and Affected Versions Xymon versions prior to 4.3.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Web UI. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML, potentially leading to...

CVE-2011-1716: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Zolsoft Office Server Free Edition Cross Site Request Forgery

!--=============================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...

Path for daily backup is configurable through WEB UI

It is possible to set the daily backup path and partial name through the web UI. This could mean that information can be obtained by a rouge admin. This issue addresses that by introducing a flag so concerned administrators can remove this feature. This flag is set to false by default meaning it ...

Path for daily backup is configurable through WEB UI

It is possible to set the daily backup path and partial name through the web UI. This could mean that information can be obtained by a rouge admin. This issue addresses that by introducing a flag so concerned administrators can remove this feature. This flag is set to false by default meaning it ...

geminabox

!https://repository-images.githubusercontent.com/463074/c53c...

Barracuda Web Application Firewall Detection (HTTP)

HTTP based detection of Barracuda Web Application Firewall. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target port. Default port = 8080 Note: for som...

VideoLAN VLC Media Player 0.9.8a - Web UI input Remote Denial of Service

VideoLAN VLC Media Player 0.9.8a - Web UI input Remote Denial of Service !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target...

VideoLAN VLC Media Player 0.9.8a - Web UI 'input' Remote Denial of Service

!/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target port. Default port = 8080 Note: for some reason, A x 2070785 = terminate...

VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== VLC 0.9.8a Web UI input Remote Denial of Service Exploit ========================================================== !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader...