Kasseler CMS suffers from file disclosure and cross site scripting vulnerabilities.
fd60166553d369546db9ec24f0d8ad882e8d459d10c5487f4027a8159328b2adNetragard, L.L.C Advisory - The libxml library is prone to a heap-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary within the context of an application using the affected library. Failed exploit attempts will result in a denial-of-service vulnerability. Safari uses the vulnerable libxml library and can be attacked via the feed:// input vector. Versions below 3.2.3 are affected.
9012ec278979cbf1e8f349fe20406fb03ef5ed6f98fa19b6fa6209f214f162f3Campsite version 3.3.0 RC1 suffers from multiple remote file inclusion vulnerabilities.
950cf53f0bbf4e1e24f2c05e6fc413768fd482bd0131059d4cc642c2dae762abMyBB versions 1.4.6 and below remote code execution exploit.
2bb96a8c46fd43511d08890422cdbad48a11d910e717f51fae959f29a36c4865Bopup Communications Server remote SYSTEM exploit.
4ab4ba4fe29fb0b4379325376bff1051b56fb57072a41a5dfe853dbf038b8e17Gravy Media Photo Host version 1.0.8 suffers from a local file inclusion vulnerability.
d704249c66d9853e55489682bf6df8d815f1d0643f04ed5e343b1d7a0a8c1260AWScripts Gallery Search Engine version 1.5 suffers from an insecure cookie vulnerability.
f867c42880384ff94e179d402b9d452febf2b5ed57bf891deff2a583b514758cThe Elgg CMS versions below 1.00 suffer from cross site scripting, cross site request forgery, and change password vulnerabilities.
40e064c1b6975c83f7c1b05460f3f848a91ed63188b5e7554523635940bf14d6pmaPWN phpMyAdmin code injection remote command execution scanner and exploit.
70fa9c39342e8666bbfde9f29319905729cea47df83d706b329330eddf5351dephpDatingClub version 3.7 suffers from remote SQL injection and cross site scripting vulnerabilities.
c5d625619a822ab0e5e9df255f176acc309e48d42ab73940587240ed765429b9DedeCMS version 5.3 suffers from an arbitrary file upload vulnerability.
8b19970dd9e7ec1eb63a9a5cf0c733305cd675fc8372b59407ec1e025f1a4f0eInternet Explorer versions 7 and 8 suffer from some cross site scripting vulnerabilities.
01ff72adae6badc1a3d1922ad2173c94909448ac7e44cd9cf0c60e99b5710c16pc4 Uploader versions 10.0 and below suffer from a remote file disclosure vulnerability.
5260ccaf7dd2e3f862645f99db9b3036f10a53af766ee93dd89eb70c5a185cecMIDAS version 1.43 suffers from an insecure cookie handling vulnerability that allows for authentication bypass.
4af5c1d7bc1b60a42ec6dc08618f50ab63e9f6c39a97e26b5eaf4349c4c1ef88PEEL E-Commerce suffers from a remote SQL injection vulnerability.
1288f4009067b50767bf899e0b1240d4a53027df3c002b1d22505e46c06a720aPHP version 5.2.10 has an invalid fix for the safe_mode bypass with exec/system/passthru. Proof of concept included.
f45b4faa55d58fe0a522660c4854e7295102f832ffe6f1fac13af3b95ec1d1f2Safari on the Apple iPhone suffers from a vulnerability that allows an attacker to auto-dial a number.
750d96b2e5b025f4f460cec5ea7897e6f417588a419c661fea5d7b95be167b5cNetBSD/x86 kill all processes shellcode.
a7ffee5d6b2d5960b4ea4ee717bfddb99b166c9e763cae77072218cfa897e251CMS Buzz suffers from cross site scripting and password changing vulnerabilities.
fb5939b64b85e8a19fc9f6065e7cf9e789deab9259dcf2bef236805d64e3b6d9DESlock++ version 4.0.2 local kernel SYSTEM exploit. Affects dlpcrypt.sys version 0.1.1.27.
8ff07a4da72ac1297bb179ba6e2d9a8a8cd03398d6c137b28d4494419fe7e1efThe Edraw PDF Viewer component suffers from an Active-X related remote code execution vulnerability. Versions below 3.2.0.126.
5577e778cc8e8cb1e505491e8a8f69f363de5890ef2f4d4147cf2a67eb8b4860PhpPortal version 1.0 suffers from an insecure cookie handling vulnerability.
ed7afbb754e9ee7059925029e381b2b3d79ebaf83331bb638b729868cad1c969compface versions 1.5.2 and below buffer overflow proof of concept exploit that creates a malicious .xbm file.
c5838f4bfa2530ad67e8a1af408fac4fd213d1e6d3faba21b6139a093e4a2f4eFretsWeb version 1.2 remote blind SQL injection exploit.
b7390328099861e3fc4835f53f2252ac75890c00aa5e3420cfe8ff5c39740e1aFretsWeb version 1.2 suffers from multiple local file inclusion vulnerabilities.
c65fe4cc4f9b2c910a30da9289b96807987f403d2ff4a6e3c399fe3da3234295
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed