EUVD-2005-3679

Malware in sbrugna...

EUVD-2007-2055

Malware in sbrugna...

Wizz Air - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Wizz Air published at the 'play' market has multiple vulnerabilities...

Tuto4PC Utilities Silently Install 12M Backdoors, Cisco

Security experts are warning PC users of scareware computer utilities published by the French firm Tuto4PC that secretly bundle adware and spyware. Cisco’s Talos security research team said several of the company’s utilities, including OneSoftPerDay and System Healer, contain Trojans that exhibit...

Wizz Forum ForumReply.php TopicID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15410/info Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Wizz Forum ForumAuthDetails.php AuthID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15410/info Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Wizz RSS Reader Mozilla plugin crossite scripting

Crossite scripting with RSS feeds...

CVE-2007-2060

Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM...

CVE-2007-2060

CVE-2007-2060 affects the Wizz RSS Reader Firefox extension (pre-2.1.9). A cross-zone scripting flaw allows remote attackers to run arbitrary JavaScript in the browser chrome via the RSS feed DOM, enabling potential remote code execution in the user’s browser UI. The vulnerability is described ac...

CVE-2007-2060

Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM...

The Wizz RSS Reader chrome access vulnerability

Overview The Wizz RSS Reader contains a vulnerability that may allow an attacker to take any action that Mozlla Firefox can. Description The Mozilla Firefox user interface components outside of the content area are created using chrome. This includes toolbars, menu bars, progress bars, and window...

CVE-2005-3682

Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via 1 the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in 2 ForumTopicDetails.php and 3 ForumReply.php...

CVE-2005-3682

CVE-2005-3682 describes multiple SQL injection vulnerabilities in Wizz Forum 1.20 . Attackers can remotely exploit: (1) AuthID in ForumAuthDetails.php, (2) TopicID in ForumTopicDetails.php, and (3) TopicID/ForumReply in ForumReply.php to execute arbitrary SQL commands. The description indicates t...

CVE-2005-3682

Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via 1 the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in 2 ForumTopicDetails.php and 3 ForumReply.php...

wizzSQL.txt

Hello,, Multible Sql injections in Wizz Forum ,, Discovered by : HACKERS PAL Thanks For :: DeviL-00 - AbducterAbducterMinds - almaster -=-=-=-=-=-=-=-=-=-=-=-=-=-=- file : ForumAuthDetails.php...

Multible Sql injections in Wizz Forum

Hello,, Multible Sql injections in Wizz Forum ,, Discovered by : HACKERS PAL Thanks For :: DeviL-00 - AbducterAbducterMinds - almaster -=-=-=-=-=-=-=-=-=-=-=-=-=-=- file : ForumAuthDetails.php...

Wizz Forum 1.20 (TopicID) Remote SQL Injection Exploit

No description provided by source. !/bin/env perl //----------------------------------------------------------- // Wizz Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster // http://WwW.SoQoR.NeT //-----------------------------------------------------------...

Wizz Forum 1.20 - TopicID SQL Injection

Wizz Forum 1.20 - TopicID SQL Injection !/bin/env perl //----------------------------------------------------------- // Wizz Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster // http://WwW.SoQoR.NeT...

Wizz Forum - 'forumreply.php?TopicID' SQL Injection

source: https://www.securityfocus.com/bid/15410/info Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...

Wizz Forum 1.20 (TopicID) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== Wizz Forum 1.20 TopicID Remote SQL Injection Exploit ====================================================== !/bin/env perl //-----------------------------------------------------------...