vSkimmer Point-of-Sale Terminals Server Information Disclosure

vSkimmer is a Trojan-like malware designed to infect Windows-based servers attached with payment card readers. Post infection, the malware gathers sensitive information such as Credit Card numbers and sends it back to the C server...

Microsoft Office 2013 Token Hijacking Information Disclosure (MS13-104; CVE-2013-5054)

An information disclosure vulnerability has been reported in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office handles specially crafted responses. A remote attacker can exploit this issue by enticing a victim to open an Office file hosted on a malicious website...

NTP Servers Monlist Command Denial of Service (CVE-2013-5211)

There exists a design flaw in NTP servers that can allow attackers to perform DoS attacks against target machines. A remote attacker can leverage this flaw by sending a specially crafted request to an affected NTP server...

Suspicious JavaScript Encoding

Certain evasion tools can obfuscate JavaScript code in order to circumvent security software. Successful exploitation could allow attackers to execute arbitrary code on the target...

JavaScript Payload Encoding

Certain JavaScript obfuscation schemes can be used to circumvent security software. These methods could allow attackers to execute arbitrary code on a target machine...

Adobe Flash Player Type Confusion Arbitrary Code Execution (APSB13-28; CVE-2013-5331)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a type confusion condition while handling a malformed SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file. Successful exploitation...

RealNetworks RealPlayer RMP File Heap Buffer Overflow (CVE-2013-6877)

A heap buffer overflow exists in RealNetworks RealPlayer. The vulnerability is due an error when handling RMP files, overly long values for certain tags can result in a heap buffer overflow. A remote unauthenticated attacker could exploit this vulnerability by enticing a user to open a crafted RM...

Zimbra Collaboration Server Local File Inclusion (CVE-2013-7091)

A local file include vulnerability has been reported in Zimbra Collaboration Server. The vulnerability is due to insufficient validation of user-supplied input. A remote attacker can exploit this vulnerability to retrieve sensitive information like LDAP root credentials...

Microsoft Excel Document Malformed BIFF Record Heap Overflow (MS09-067) - Ver2 (CVE-2009-3130)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

Microsoft Internet Explorer mergeAttribues Property Handling Memory Corruption - Ver2 (CVE-2007-0945)

Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...

VEGO Web Forum login.php username Parameter SQL Injection - Ver2 (CVE-2006-0067)

An SQL injection vulnerability has been reported in VEGO Links Builder. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft IIS ASP Handling Code Execution (MS08-006) - Ver2 (CVE-2008-0075)

Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of dynamic content, notably in the form...

WU-FTPD File Globbing Denial Of Service - Ver2 (CVE-2005-0256)

A denial-of-service vulnerability has been reported in wu-ftpd. A remote attacker could trigger this vulnerability via a glob pattern with a large number of wildcard characters as demonstrated using the dir command. Successful exploitation of this vulnerability would allow a remote attacker to...

PSlash Web Portal index.php Code Execution - Ver2 (CVE-2001-1235)

A code execution vulnerability has been reported in PSlash Web Portal. A remote attacker could trigger this vulnerability by including files from remote web sites using an HTTP request that modifies the includedir variable. Successful exploitation of this vulnerability could allow a remote attack...

System V TTYPROMPT Buffer Overflow - Ver2 (CVE-2001-0797)

A buffer overflow vulnerability has been reported in various System V based operating systems. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Ultimate Fun Book function.php gbpfad Parameter PHP Code Execution - Ver2 (CVE-2007-1059)

A code execution vulnerability has been reported in Ultimate Fun Book. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Internet Explorer Null Byte Information Disclosure (MS12-010) - Ver2 (CVE-2012-0012)

An information disclosure vulnerability has been reported in Internet Explorer. The vulnerability occurs during certain processes, in which Internet Explorer incorrectly allows attackers to view content from the process memory. A remote attacker may exploit this issue by enticing target users to...

Internet Explorer iepeers.dll Remote Code Execution - Ver2 (CVE-2010-0806)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer handles specific attributes. To trigger this issue, an attacker may create a maliciou...

Saphplesson id Parameter SQL Injection - Ver2 (CVE-2006-2835)

An SQL injection vulnerability has been reported in Saphplesson. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Oracle 9i HTTP Server Web Administration Access Privilege Escalation - Ver2 (CVE-2002-0561)

A privilege escalation vulnerability has been reported in Oracle 9i Application Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

OPENi-CMS Plugin index.php oi_dir Parameter PHP Code Execution - Ver2 (CVE-2007-0881)

A code execution vulnerability has been reported inSeitenschutz plugin for OPENi-CMS 1.0. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CA BrightStor Arcserve Media Server Stack Buffer Overflow - Ver2 (CVE-2007-2139)

A buffer overflow vulnerability has been reported in CA BrightStor ARCserve Media Server. The vulnerability is due to insufficient boundary checking when processing crafted strings supplied in SUN RPC requests. Successful exploitation of this vulnerability could allow a remote attacker to execute...

Sun Java Web Start JRE Buffer Overflow - Ver2 (CVE-2007-3655)

A buffer overflow vulnerability has been reported in Sun JRE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

GeoBlog viewcat.php cat Parameter SQL Injection - Ver2 (CVE-2006-0249)

An SQL injection vulnerability has been reported in BitDamaged geoBlog MOD1.0. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

PHPjournaler index.php readold Parameter SQL Injection - Ver2 (CVE-2006-0066)

An SQL injection vulnerability has been reported in PHPjournaler. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

ScozBook auth.php adminname Parameter SQL Injection - Ver2 (CVE-2006-0079)

An SQL injection vulnerability has been reported in ScozNet ScozBook BETA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Venom Board post.php3 topic_id Parameter SQL Injection - Ver2 (CVE-2006-0160)

An SQL injection vulnerability has been reported in Venom Board. A remote attacker could exploit this vulnerability by sending specaially crafted parent root and topicid parameters to post.php. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL...

CA BrightStor ARCserve Backup Media Server SUN-RPC Procedure Code Execution - Ver2 (CVE-2007-1785)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

Empire CMS checklevel.php check_path Parameter PHP Code Execution - Ver2 (CVE-2006-4354)

A code execution vulnerability has been reported in Phome Empire CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

ME Download System header.php Parameter PHP Code Execution - Ver2 (CVE-2006-4053)

A code execution vulnerability has been reported in ME Download System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

NetWin SurgeMail Webmail Server page Parameter Format String - Ver2 (CVE-2008-1055)

A format string vulnerability has been reported in NetWin SurgeMail and WebMail. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Postguestbook CONF_CONFIG_PATH Parameter PHP Code Execution - Ver2 (CVE-2007-1372)

A code execution vulnerability has been reported in Postguestbook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

MyPhPim calendar.php3 cal_id Parameter SQL Injection - Ver2 (CVE-2006-0167)

An SQL injection vulnerability has been reported in MyPhPim. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

TheWebForum login.php username Parameter SQL Injection - Ver2 (CVE-2006-0135)

An SQL injection vulnerability has been reported in TheWebForum twf. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Symantec Web Gateway ldap_latest.php Blind SQL Injection - Ver2 (CVE-2012-2961)

An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft OpenType Font Format Driver Index Code Execution (MS10-091) - Ver2 (CVE-2010-3956)

OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. A remote code execution vulnerability has been reported in the way Microsoft Windows OpenType Font OTF format driver improperly parses specially crafted OpenType fonts. A remote...

phpMYAdmin goto Parameter PHP Code Execution - Ver2 (CVE-2001-0478)

A code execution vulnerability has been reported in phpMYAdmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PHP POST File Upload Buffer Overflow - Ver2 (CVE-2002-0081)

A buffer overflow vulnerability has been reported in PHP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

VEGO Web Forum index.php theme_id Parameter SQL Injection - Ver2 (CVE-2006-0065)

An SQL injection vulnerability has been reported in VEGO Web Forum. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

PHP POST File Upload PHP GLOBALS Variable Overwrite Security Bypass - Ver2 (CVE-2005-3390)

A security bypass vulnerability has been reported in PHP. A remote attacker could exploit this vulnerability via a multipart/form-data POST request with a "GLOBALS" fileupload field. Successful exploitation of this vulnerability could allow a remote attacker to bypass security protections of PHP...

Bit 5 Blog processlogin.php username Parameter SQL Injection - Ver2 (CVE-2006-0320)

An SQL injection vulnerability has been reported in Bit 5 Blog. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Oracle 9i HTTP Server Globals.JSA Access Information Disclosure - Ver2 (CVE-2002-0562)

An information disclosure vulnerability has been reported in Oracle 9i Application Server. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Mac OS X Safari x-man-page URI Terminal Escape Command Execution - Ver2 (CVE-2005-1342)

A command execution vulnerability has been reported in Apple Mac OS X. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

PhpSecurePages secure.php cfgProgDir Parameter PHP Code Execution - Ver2 (CVE-2001-1468)

A code execution vulnerability has been reported in phpSecurePages. A remote attacker could trigger this vulnerability by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code. Successful exploitation of this vulnerability could allow a remote attacke...

Mozilla Firefox Javascript XBL Compilation Code Execution - Ver2 (CVE-2006-1733)

A code execution vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cybozu Garoon tid Parameter SQL Injection - Ver2 (CVE-2006-4444)

An SQL injection vulnerability has been reported in Cybozu Garoon. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Benders Calendar index.php this_day Parameter SQL Injection - Ver2 (CVE-2006-0252)

An SQL injection vulnerability has been reported in Benders Calendar. A remote attacker could trigger this vulnerability via the year, month and day parameters. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

PHPAuction view.inc.php phpAds_path Parameter PHP Code Execution - Ver2 (CVE-2006-3984)

A code execution vulnerability has been reported in Albasoftware PHPauction. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Apple Safari Webkit Floating Point Data Type Code Execution - Ver2 (CVE-2010-1807)

Safari is a web browsing application developed by Apple. Safari browsing functionality is built around the set of components called WebKit. WebKit is a development toolkit which allows third party developers to build applications that use Internet technologies such as HTML, HTTP, and others. A...

Wordcircle index.php password Parameter SQL Injection - Ver2 (CVE-2006-0205)

An SQL injection vulnerability has been reported in Wordcircle. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...