DaLogin - Multiple Vulnerabilities

dalogin 2.2 multiple vulnerabilites app desc: Configurable WebSite. PHP + Mysql: news zone with rss feed, private zone, languages, themes, administration panel app source: http://dalogin.sourceforge.net/ author: hc0 1 config file disclosure you can access config.ini file from...

Microsoft Help and Support Center - sysinfosysinfomain.htm Cross-Site Scripting

Microsoft Help and Support Center - sysinfosysinfomain.htm Cross-Site Scripting source: https://www.securityfocus.com/bid/40721/info Help and Support Center is prone to a cross-site scripting weakness because it fails to properly sanitize user-supplied input. An attacker may leverage this issue t...

Microsoft Help and Support Center 'sysinfo/sysinfomain.htm' Cross Site Scripting Weakness

Description Help and Support Center is prone to a cross-site scripting weakness because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the privileged zone of the browser of an unsuspecting user. NOTE: This issue is a...

DoS attacks on email clients via protocol handlers

Hello 3APA3A! I want to warn you about security vulnerabilities in email clients, particularly in Outlook Express and Outlook. This advisory is concerned with my series of advisories about vulnerabilities in browsers, which belong to group of DoS via protocol handlers. ---------------------------...

MidiCart Shell Upload

Exploit Title: MidiCart PHP,ASP Shell Upload Vulnerability Date: 17.05.2010 Author: DigitALL Software Link: http://download.cnet.com/MidiCart-PHP-Shopping-Cart/3000-26494-10064577.html Version: All Version Tested on: DigitALL Xp Version x1 Code : dork : inurl:"ordermoney.php" or...

Trusted Sites Zone (Whitelisting)

Keep in mind that when the Internet Zone is set to High, you may encounter web sites that do not function properly due to one or more of the associated security settings. This is where the Trusted sites zone can help. If you trust that the site will not contain malicious content, you can add it t...

Trusted Sites Zone

The Trusted sites zone is a security zone for sites that you think are safe to visit. You believe that the site is designed with security in mind and that it can be trusted not to contain malicious content. To add or remove sites from this zone, you can click the Sites button. This will open a...

Mandriva Update for timezone MDVA-2010:138 (timezone)

Check for the Version of timezone OpenVAS Vulnerability Test Mandriva Update for timezone MDVA-2010:138 timezone Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for php-timezonedb MDVA-2010:139 (php-timezonedb)

Check for the Version of php-timezonedb OpenVAS Vulnerability Test Mandriva Update for php-timezonedb MDVA-2010:139 php-timezonedb Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Mandriva Update for php-timezonedb MDVA-2010:139 (php-timezonedb)

Check for the Version of php-timezonedb OpenVAS Vulnerability Test Mandriva Update for php-timezonedb MDVA-2010:139 php-timezonedb Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Mandriva Update for timezone MDVA-2010:138 (timezone)

Check for the Version of timezone OpenVAS Vulnerability Test Mandriva Update for timezone MDVA-2010:138 timezone Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Code injection

Unspecified vulnerability in Sun Solaris 10 and OpenSolaris snv49 through snv117, when 64bit mode is used on the Intel x86 platform and a Linux lx branded zone is configured, allows local users to cause a denial of service panic via unspecified vectors, a different vulnerability than CVE-2007-622...

CVE-2009-4774

Unspecified vulnerability in Sun Solaris 10 and OpenSolaris snv49 through snv117, when 64bit mode is used on the Intel x86 platform and a Linux lx branded zone is configured, allows local users to cause a denial of service panic via unspecified vectors, a different vulnerability than CVE-2007-622...

CVE-2009-4774

Unspecified vulnerability in Sun Solaris 10 and OpenSolaris snv49 through snv117, when 64bit mode is used on the Intel x86 platform and a Linux lx branded zone is configured, allows local users to cause a denial of service panic via unspecified vectors, a different vulnerability than CVE-2007-622...

Mandriva Update for timezone MDVA-2010:116 (timezone)

Check for the Version of timezone OpenVAS Vulnerability Test Mandriva Update for timezone MDVA-2010:116 timezone Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for timezone MDVA-2010:116 (timezone)

Check for the Version of timezone OpenVAS Vulnerability Test Mandriva Update for timezone MDVA-2010:116 timezone Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

YaPig v0.94.0u Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================== YaPig v0.94.0u Remote File Inclusion Vulnerability ================================================== |=-----------------------------------------------------=| |=-------------= JIKO...

YaPig V0.94 remote File Include Vulnerability

Exploit for php platform in category web applications ============================================= YaPig V0.94 remote File Include Vulnerability ============================================= |=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com|...

Internet Explorer Element Cross-Domain Information Disclosure (MS10-018; CVE-2010-0494)

Microsoft Internet Explorer is the most widely used Internet browser. An information disclosure vulnerability has been reported in Internet Explorer. The vulnerability is due to the way Internet Explorer incorrectly interprets the origin of script, allowing the script to run in the context of a...

Apple QuickTime MOV File HREFTrack Cross-Zone Scripting

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous video formats. QuickTime is capable of processing the Apple QuickTime movie file format, which is a proprietary format created by Appl...