Internet Explorer CSS Special Character Information Disclosure (MS10-071; CVE-2010-3325)

CSS Cascading Style Sheets is a formatting method for Web pages using HTML. An information disclosure vulnerability has been reported in the way Microsoft Internet Explorer processes CSS special characters. The vulnerability is due to the way Internet Explorer improperly process CSS special...

Internet Explorer Cross-Domain Information Disclosure (MS10-071; CVE-2010-3330)

Multiple memory corruption vulnerabilities have been reported in Microsoft Internet Explorer. An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Internet Explorer that incorrectly allows scripts to access and read...

Research In Motion BlackBerry Device Software 4.7.1 - Cross Domain Information Disclosure

Research In Motion BlackBerry Device Software 4.7.1 - Cross Domain Information Disclosure source: https://www.securityfocus.com/bid/43685/info Research In Motion BlackBerry Device Software is prone to a cross-domain information-disclosure vulnerability because the application's web browser fails ...

Jax Guestbook admin bypass vulnerability

Exploit for php platform in category web applications ======================================== Jax Guestbook admin bypass vulnerability ======================================== Exploit Title: Jax Guestbook admin bypass vulnerability Date: 3.10.2010 Author: EraGoN Software...

Jax Calender admin bypass vulnerability

Exploit for php platform in category web applications ======================================= Jax Calender admin bypass vulnerability ======================================= Exploit Title: Jax Calender admin bypass vulnerability Date: 3.10.2010 Author: EraGoN Software Link:...

Microsoft Internet Explorer Unsafe Scripting Misconfiguration

This exploit takes advantage of the "Initialize and script ActiveX controls not marked safe for scripting" setting within Internet Explorer. When this option is set, IE allows access to the WScript.Shell ActiveX control, which allows javascript to interact with the file system and run commands...

AlstraSoft AskMe Pro 2.1 SQL Injection

================================================================== Exploit Title: AlstraSoft AskMe Pro SQL Injection Vulnerability Date: 12/09/2010 Author: Amine92 Email: [email protected] Software Link: http://www.alstrasoft.com/askme.htm Version: All Version Price: 99.99$ Tested on: Xp Sp 2...

AlstraSoft AskMe Pro 2.1 forum_answer.php?que_id SQL Injection Vulnerability

AlstraSoft AskMe Pro 2.1 forumanswer.php?queid SQL Injection Vulnerability. Webapps exploit for php platform ================================================================== Exploit Title: AlstraSoft AskMe Pro SQL Injection Vulnerability Date: 12/09/2010 Author: Amine92 Email:...

AlstraSoft AskMe Pro 2.1 SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== AlstraSoft AskMe Pro 2.1 SQL Injection Vulnerability ==================================================== Author: Amine92 Email: email protected Software Link:...

DSA-2103-1 smbind - sql injection

Bulletin has no description...

Cross site scripting

Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute script in an unintended domain or security zone, and obtain sensitive information, via unspecified vectors, aka "Event Handler Cross-Domain Vulnerability."...

CVE-2010-1258

CVE-2010-1258 arises from Internet Explorer 6–8 failing to determine the origin of script code, enabling a remote attacker to run script in a different domain/zone and potentially access user data. The primary entry is through crafted web content that exploits cross-domain context (Event Handler ...

Microsoft Internet Explorer Event Handler Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to access local files or content from a browser window in another domain or security...

Mini-stream RM-MP3 ConverterWMDownloaderASX to MP3 Converter - Local Stack Buffer Overflow

Mini-stream RM-MP3 ConverterWMDownloaderASX to MP3 Converter - Local Stack Buffer Overflow Exploit Title: Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Converter Stack Buffer Overflow Exploit Tested on Windows XP SP3 Pro Found By : Cyber-Zone ABDELKHALEK...

MDVA-2009:145 : x11-driver-input-synaptics

The synaptics touchpad driver shipped with 2009.1 has problems correctly identifying and scaling the right hand scroll zone on certain hardware including the ASUS EeePC 701. This updated version addresses this and several other minor issues. Fixing among others Mandriva bug 51845. %NASLMINLEVEL...

LILDBI - Arbitrary File Upload

LILDBI - Arbitrary File Upload Exploit Title: LILDBI Shell Upload Vulnerability Date: 23.07.2010 Author: EraGoN Software Link: http://productos.bvsalud.org/product.php?id=lildbi-web〈=en Version: 1.2 Tested on: Ubuntu Linux - WinXP sp2/sp3 Dark Hackers Team Dork : allinurl:"/lildbi/ POC : The shel...

LILDBI Shell Upload Vulnerability

Exploit for php platform in category web applications ================================= LILDBI Shell Upload Vulnerability ================================= Exploit Title: LILDBI Shell Upload Vulnerability Date: 23.07.2010 Author: EraGoN Software Link:...

LILDBI 1.2 Shell Upload

Exploit Title: LILDBI Shell Upload Vulnerability Date: 23.07.2010 Author: EraGoN Software Link: http://productos.bvsalud.org/product.php?id=lildbi-web〈=en Version: 1.2 Tested on: Ubuntu Linux - WinXP sp2/sp3 Dark Hackers Team Dork : allinurl:"/lildbi/ POC : The shell upload page :...

LILDBI - Arbitrary File Upload

Exploit Title: LILDBI Shell Upload Vulnerability Date: 23.07.2010 Author: EraGoN Software Link: http://productos.bvsalud.org/product.php?id=lildbi-web〈=en Version: 1.2 Tested on: Ubuntu Linux - WinXP sp2/sp3 Dark Hackers Team Dork : allinurl:"/lildbi/ POC : The shell upload page :...

Zend Studio Cross Zone Command Execution

Author: www.80vul.com Email: [email protected] Release Date: 2010/7/10 References: http://80vul.com/Zend%20studio/Zend%20studio%20location%20Cross.htm Zend Studio is a commercial, proprietary integrated development environment IDE for PHP developed by Zend Technologies, based on the PHP...