QuickPHP Web Server version 1.10.0 remote file download exploit.
50efa502ca2f3fac91c083999a9a6e178c8fe6ba7618767f8a0466811aa60f51WordPress version 3.0.4 suffers from a stored cross site scripting vulnerability.
226c9b8585f3659298b3eec5cd34555b70668b654f9137580694e2432119109fIgnition version 1.3 remote code execution exploit.
987884ba2fadda2451380c1bf5fb0f64c629658cfab01e33e4fc33332e9cef65Ignition version 1.3 suffers from a local file inclusion vulnerability.
fcef02e9002f319bd32eef9dfa30c74bd4d165c2060f7d0f3e53d6019c7a7990Whitepaper called Fusion of Xploits - Multiplexing Exploitation.
049bfce912a54cdb9f5a41be0137e97696d8f5d1a4d88376f022003b318eceb2Secunia Security Advisory - Debian has issued an update for wordpress. This fixes a vulnerability, which can be exploited by malicious users to conduct SQL injection attacks.
ff33f175d3db3ebcaae3b415d201eabb7c1ffe3a1883faec9fcc21ed72d1b95fSecunia Security Advisory - Fedora has issued an update for tor. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
ef16756ca774bd2e32c82f2a1dd959d583b2c13ad54fb98061105a272c7a5898Secunia Security Advisory - Fedora has issued an update for Ajaxterm. This fixes a security issue, which can be exploited by malicious people to conduct hijacking attacks.
b403776bf4fcdce7f38f2aa94337106948fa4b7f5baac6b7c691338bec62c9efSecunia Security Advisory - rgod has discovered a security issue in CA ARCserve D2D, which can be exploited by malicious people to bypass certain security restrictions and compromise a vulnerable system.
51c4799a65900b0e6b6ab4d560eb8fb894269b9df07f9df50ab86946510d0a38Secunia Security Advisory - Craig Heffner has reported a security issue in DD-WRT, which can be exploited by malicious people to disclose system information.
92c083c2921c4725842a253b4eff4f85371b3b41747acb37e5297a92477d1cc0Secunia Security Advisory - Some vulnerabilities have been discovered in TorrentTrader, which can be exploited by malicious users to conduct SQL injection attacks and by malicious people to conduct cross-site scripting attacks.
4a17cd7641947f8a43e0faa3bebfd04862df44a39061896ed6f65869e9e248e3Secunia Security Advisory - A vulnerability has been reported in WordPress, which can be exploited by malicious users to conduct script insertion attacks.
bc55ddee18c7ae7975f4000368505c41b49257df30341eed4b0ecd7548854c9bSecunia Security Advisory - Multiple vulnerabilities have been discovered in Streber, which can be exploited by malicious people to conduct cross-site scripting attacks.
b05a38dbad7103e8a1d089cf885042e8fd7bff3718a88b9136bcc8f5573de735Secunia Security Advisory - A vulnerability has been discovered in PHP-addressbook, which can be exploited by malicious users to conduct SQL injection attacks.
e56403d1790a0be80773ef748d0f751d8d20ce41da7db3452751e333ccaba1beSecunia Security Advisory - A vulnerability has been reported in Academic Web Tools, which can be exploited by malicious people to conduct cross-site scripting attacks.
e13e18c5261d8e10b01c342c64dc86b76e6d451f927adfc859fe5a6fe238ff61Mandriva Linux Security Advisory 2010-260 - A double free vulnerability in libxml2 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
87c0fd8a93b7c11d44f9ac4cbdb226583f286950747c052dadae170e3376c4efDebian Linux Security Advisory 2138-1 - Vladimir Kolesnikov discovered a SQL injection vulnerability in wordpress, a weblog manager. An authenticated users could execute arbitrary SQL commands via the Send Trackbacks field.
ceb21334b76b75b3de37930cc4872ab8ec653a51de71f29cea1b81c6f651cb5cHP Security Bulletin HPSBST02620 SSRT100356 2 - A potential security vulnerability has been identified with HP StorageWorks Modular Smart Array P2000 G3. This vulnerability could be exploited to allow remote unauthorized access. Revision 2 of this advisory.
0ad1306fbad08788172d4ea22c959655b1d87d42c86b7e0c9a5d7832433fc97bAd Muncher versions 4.81 and below suffer from cross site scripting vulnerabilities.
0fa1d8513b69bc1fc286ae4ef31437ee0f3760917a95bc68f2da8de87aa0bf1bDiscovery TorrentTrader version 2.6 suffers from cross site scripting, local file inclusion, and remote SQL injection vulnerabilities.
ad0688c78f2e66e900baeb06f4dc8cbab87853b449b7279500080c27319ce64cCoppermine version 1.5.10 suffers from reflective cross site scripting vulnerabilities.
be8b73580a130da9b082972278f6af1869440c879e56b3306245c47f80cea697Digital Music Pad version 8.2.3.4.8 SEH overflow exploit.
13c61e7a043d3a036cdb75753e6390a6e098f6948d02b4ae20043fd0da07cd8aKaiBB version 1.0.1 suffers from cross site scripting, path disclosure, and remote SQL injection vulnerabilities.
3609575d4a9376abeae2a1b81bd498e5d35875d4a5a031c3a59cf96a1a9e7511This Metasploit module exploits a stack-based buffer overflow in the handling of the 'pFragments' shape property within the Microsoft Word RTF parser. All versions of Microsoft Office prior to the release of the MS10-087 bulletin are vulnerable. This Metasploit module does not attempt to exploit the vulnerability via Microsoft Outlook. The Microsoft Word RTF parser was only used by default in versions of Microsoft Word itself prior to Office 2007. With the release of Office 2007, Microsoft began using the Word RTF parser, by default, to handle rich-text messages within Outlook as well. It was possible to configure Outlook 2003 and earlier to use the Microsoft Word engine too, but it was not a default setting.
c781a6b1c954888d98e9d2d99bf09fd7064aa318d76af4eac5e983b427860a6bDzTube suffers from a remote SQL injection vulnerability.
4c6c169a20a99a67a287274f5dd5a14708780f335abd860180e7f9922bdc9b50
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed