4033 matches found
CVE-2014-2791
CVE-2014-2791 affects Microsoft Internet Explorer (notably IE 9) and is a remote memory-corruption vulnerability triggered via a crafted web site. The issue allows remote code execution or memory corruption leading to a potential denial of service when a user visits a malicious page. Several conn...
CVE-2014-2809
CVE-2014-2809 affects Microsoft Internet Explorer 6–11 and is described as a memory corruption vulnerability in a crafted web site that can enable remote code execution or memory-based denial of service. The issue is one of several IE memory corruption vulnerabilities disclosed in MS14-037; the c...
CVE-2014-2786
CVE-2014-2786 affects Microsoft Internet Explorer 9–11. It is a memory-corruption vulnerability in IE that allows remote code execution or memory corruption via a crafted website; exploited remotely with public exploits. Remediation is applying the MS14-037 IE update. Connected sources corroborat...
Paypal BBP #108 MOS - Persistent Web Vulnerability
Document Title: =============== Paypal BBP 108 MOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1049 PayPal Security UID: qw115bSN Release Date: ============= 2014-07-08 Vulnerability Laboratory ID VL-ID:...
Photo Org WonderApplications 8.3 iOS - Local File Inclusion
Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04 Vulnerability Laboratory ID VL-ID:...
Creative Software UK Community Portal 1.1 DiscReply.php mid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A...
PHP-Nuke Error Manager Module 2.1 error.php Multiple Variables XSS
No description provided by source. source: http://www.securityfocus.com/bid/9911/info It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional conditions and simple design errors. These issu...
Files Desk Pro v1.4 iOS - Local File Inclusion
No description provided by source. Document Title: =============== Files Desk Pro v1.4 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1266 Release Date: ============= 2014-05-16 Vulnerability Laboratory ID VL-ID:...
Windows 95/98 UNC Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/779/info There is a overflowable buffer in the networking code for Windows 95 and 98 all versions. The buffer is in the part of the code that handles filenames. By specifying an exceptionally long filename, an attacker ca...
Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities
No description provided by source. Document Title: =============== Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1152 Release Date: ============= 2013-12-04 Vulnerability Laboratory ID VL-ID:...
ILIAS eLearning CMS 4.3.4 & 4.4 - Persistent XSS
No description provided by source. Document Title: =============== ILIAS eLearning 4.3.4 & 4.4 CMS - Persistent Notes Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1122 Release Date: ============= 2013-10-27 Vulnerability Laboratory I...
Olat CMS 7.8.0.1 - Persistent XSS
No description provided by source. Document Title: =============== Olat CMS 7.8.0.1 - Persistent Calender Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1125 Release Date: ============= 2013-10-27 Vulnerability Laboratory ID VL-ID:...
PDF Album v1.7 iOS - File Include Web Vulnerability
No description provided by source. Document Title: =============== PDF Album v1.7 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1255 Release Date: ============= 2014-04-11 Vulnerability Laboratory ID VL-ID:...
88Scripts Event Calendar 2.0 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15658/info 88Scripts Event Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
paFileDB 3.1 - Cross Site Scripting Vulnerability
No description provided by source. ======================================================================================== | Title : paFileDB 3.1 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
ICONICS Vessel / Gauge / Switch 8.02.140 - ActiveX BOF Exploit (meta)
No description provided by source. $Id: iconicsdlgwrapper.rb 1 2008-09-21 22:43:00Z kf $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
PHPList Mailing List Manager 2.x /admin/admin.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15350/info PHPList is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly santize user-supplied input. The application is prone to multiple cross-site...
WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' Cross-Site Scripting
No description provided by source. An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI. The following proof of concept is available: curl -H Cookie: my cookies here -H Host: body onload=alertString.fromCharCode88,83,83...
QuickPayPro 3.1 popups.edit.php popupid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...
Acunetix 8 build 20120704 - Remote Stack Based Overflow
No description provided by source. !/usr/bin/python Title: Acunetix Web Vulnerability Scanner Buffer Overflow Exploit Version: 8 Build: 20120704 Tested on: Windows XP SP2 en Vendor: http://www.acunetix.com/ Original Advisory: http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.html...