Gitorious Remote Command Execution
Saturday, January 28, 2012
Gitorious versions prior to 2.1.1 suffer from a remote command execution vulnerability. .. read more..
HP Diagnostics Server magentservice.exe Overflow
Saturday, January 28, 2012
This Metasploit module exploits a stack buffer overflow in HP Diagnostics Server magentservice.exe service. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Originally found and posted by AbdulAziz Harir via ZDI. .. read more..
MS12-004 midiOutPlayNextPolyEvent Heap Overflow
Saturday, January 28, 2012
This Metasploit module exploits a heap overflow vulnerability in the Windows Multimedia Library (winmm.dll). The vulnerability occurs when parsing specially crafted MIDI files. Remote code execution can be achieved by using Windows Media Player\'s ActiveX control. Exploitation is done by supplying a .. .. read more..
Studio Manolibera Listarivisteuk SQL Injection
Saturday, January 28, 2012
Studio Manolibera\'s listarivisteuk.php suffers from a remote SQL injection vulnerability. .. read more..
IBBY SQL Injection
Saturday, January 28, 2012
IBBY\'s nouvelles.php suffers from a remote SQL injection vulnerability. .. read more..
Adobe Cross Site Scripting
Friday, January 27, 2012
Adobe\'s forgotten password flow suffers from a cross site scripting vulnerability. .. read more..
Interactive Web Design SQL Injection
Friday, January 27, 2012
Interactive Web Design suffers from a remote SQL injection vulnerability. .. read more..
Global Media Service SQL Injection
Friday, January 27, 2012
Global Media Service suffers from a remote SQL injection vulnerability. .. read more..
vBSEO 3.6.0 proc_deutf() Remote PHP Code Injection
Friday, January 27, 2012
This Metasploit module exploits a vulnerability in the \'proc_deutf()\' function defined in /includes/functions_vbseocp_abstract.php. User input passed through \'char_repl\' POST parameter isn\'t properly sanitized before being used in a call to preg_replace() function which uses the \'e\' modifier. This c.. .. read more..
Peel SHOPPING 2.8 / 2.9 Cross Site Scripting / SQL Injection
Thursday, January 26, 2012
Peel SHOPPING versions 2.8 and 2.9 suffer from cross site scripting and remote SQL injection vulnerabilities. .. read more..
xClick Cart 1.0.1 / 1.0.2 Cross Site Scripting
Thursday, January 26, 2012
xClick Cart versions 1.0.1 and 1.0.2 suffer from a cross site scripting vulnerability. .. read more..
Register Plus 3.5.1 Cross Site Scripting / Code Execution
Thursday, January 26, 2012
Register Plus versions 3.5.1 and below for WordPress suffer from code execution, cross site scripting and path disclosure vulnerabilities. .. read more..
Sysax Multi Server 5.50 Create Folder Buffer Overflow
Thursday, January 26, 2012
This Metasploit module exploits a stack buffer overflow in the create folder function in Sysax Multi Server 5.50. This issue was fixed in 5.52. You must have valid credentials to trigger the vulnerability. Your credentials must also have the create folder permission and the HTTP option has to be ena.. .. read more..
PHPList 2.10.9 Cross Site Request Forgery / Cross Site Scripting
Thursday, January 26, 2012
PHPList version 2.10.9 suffers from cross site request forgery and cross site scripting vulnerabilities. .. read more..
VR GPub 4.0 Cross Site Request Forgery
Thursday, January 26, 2012
VR GPub version 4.0 suffers from a cross site request forgery vulnerability. .. read more..
Etsi.org Cross Site Scripting
Thursday, January 26, 2012
Multiple etsi.org subdomains suffer from cross site scripting vulnerabilities. .. read more..
WordPress Slideshow Gallery 2 Cross SIte Scripting
Thursday, January 26, 2012
The WordPress Slideshow Gallery 2 plugin suffers from a cross site scripting vulnerability. .. read more..
Joomla Products SQL Injection
Thursday, January 26, 2012
The Joomla Products component suffers from multiple remote SQL injection vulnerabilities. .. read more..
Joomla Motor SQL Injection
Thursday, January 26, 2012
The Joomla Motor component suffers from a remote SQL injection vulnerability. .. read more..
vBadvanced CMPS 3.2.2 Local File Inclusion / Remote File Inclusion
Wednesday, January 25, 2012
vBadvanced CMPS versions 3.2.2 and below suffer from local file inclusion and remote file inclusion vulnerabilities. .. read more..