HESK version 2.2 suffers from a cross site scripting vulnerability.
b407c62c329e834a9a10ae96e3c300a0c059cfc6e17fbd66601882e193114937
Agnitio is a tool to help developers and security professionals conduct manual security code reviews in a consistent and repeatable way. Agnitio aims to replace the adhoc nature of manual security code review documentation, create an audit trail and reporting.
18a1bcf1963c15d188db323fb6a8a80d7ee42e6adea551aaf3604896aee68587
Apple Security Advisory 2011-08-03-1 - QuickTime version 7.7 has been made available to address multiple code execution, cross-origin, integer overflow, memory corruption, and other vulnerabilities.
08c8a33c814803db93ff4136d87bacc64dfe68c5d11475ce6a6bccf0835835c9
ThreeDify Designer version 5.0.2 suffers from Active-X insecure method and buffer overflow vulnerabilities.
a9ef54977565ac62eb5fc5f2fbc83d8daf0981d58baae77d3116595349ead071
Etrinitee Web Worx suffers from a remote SQL injection vulnerability.
68578973298bb8f3215cb3af8440a3a287fe0a5f3a63f9f50abaf3d2c386a033
This paper describes the results of a thorough examination of Sophos Antivirus internals. The author presents a technical analysis of claims made by the vendor, and publishes the tools and reference material required to reproduce their results. Furthermore, they examine the product from the perspective of a vulnerability researcher, exploring the rich attack surface exposed, and demonstrating weaknesses and vulnerabilities.
57ecb0848e5b99ef5678dc00d7aabb2718195a8bb23f387f2d5ff429df854455
Flickr.com suffers from a cross site scripting vulnerability.
5d787ce98c04d5f851f67b8e1121ae327e0732594f9cdca268fbfd09086cfaf8
Telligent Community Server version 5.x suffers from multiple stored and reflected cross site scripting vulnerabilities.
34fa5fa62fc1c5f83cb2b324c3d252bc5d58128d95559f31576161f61015156b
The WordPress e-Commerce plugin version 3.8.5 suffers from a cross site scripting vulnerability.
f6db083a8fefeb5aef1c60ab5ef8a34c887bb04e1a50a4a1d5d65763f9666a74
This Metasploit module exploits a buffer overflow vulnerability found in Freeamp 2.0.7. The overflow occurs when an overly long string is parsed in the FAT file. This Metasploit module creates a txt file that has to be used in the creation of a FAT file. The FAT file then has to be imported as a theme. To create the FAT file you need to first decompress the basic theme template, MakeTheme -d freeamp.fat. Next create the new FAT file MakeTheme crash.fat theme.xml title.txt *.bmp.
6dfcaf1f8aff9ad6e428e3ae8e6f8b05df47336a37bbdba3dccbb68f5018292e
This Metasploit module logs in to an GlassFish Server 3.1 (Open Source or Commercial) instance using a default credential, uploads, and executes commands via deploying a malicious WAR. On Glassfish 2.x, 3.0 and Sun Java System Application Server 9.x this module will try to bypass authentication instead by sending lowercase HTTP verbs.
4035b3ff0884c803d4786b07e2e9bd10c14e0d67c4f6962ff8749b9e5761b58e
This Metasploit module exploits a buffer overflow vulnerability found in ABBS Electronic Flash Cards 2.1. The overflow occurs when an overly long string is passed in the fcd file. To execute this fcd file the victim has to start to start a new "random" test.
c4c8fb668311f736f3f219c385663db82dcd5d5a1b34b3619a99750fd3157744
Marc Merlin BAPPA suffers from a local file inclusion vulnerability.
be09f15339cf2bb29f8dd273242a53e9430ac87ae77a38aec53fa21e339d900a
Sites designed by Mueva.edu appear to suffer from a remote SQL injection vulnerability.
cf04009265babcea0229fdbd476317fb3db42346bfef979fc82be159e5694d01
This Metasploit module exploits a buffer overflow vulnerability found in ABBS Audio Media Player 3.0. The overflow occurs when an overly long string is passed in the lst file.
d9fb150c2b6446ec8d7abefc95849ea999085081199ed402a25c9a6ce1c1d893
Secunia Security Advisory - Secunia Research has discovered multiple vulnerabilities in Provideo ActiveX controls, which can be exploited by malicious people to compromise a user's system.
d1d337f48306b4153d47c0622b9db13c7d3e718f1c1a5a28dbfd25646f6e76bf
Secunia Security Advisory - A vulnerability has been reported in NC LinkList, which can be exploited by malicious people to conduct cross-site scripting attacks.
c5aed6bd1a0348c3065a601d480fc651b2082366c39ca596c0399ee0d3463866
Secunia Security Advisory - A vulnerability has been reported in FlexNet Publisher, which can be exploited by malicious people to compromise a vulnerable system.
a284d785daf98a37174421d07f07225374a922957b0e97dda0837fd0de40920a
Secunia Security Advisory - Matthew Jurczyk has reported a weakness in Microsoft Windows, which can be exploited by malicious, local users to disclose potentially sensitive information or cause a DoS (Denial of Service).
9ff017a417b5b01ecb9efabb1f2b6cd1a07c2cfaff7ba283c1b24941b91f8b3d
Secunia Security Advisory - A vulnerability has been discovered in AlphaLPD, which can be exploited by malicious people to cause a DoS (Denial of Service).
9e4c3c1e910bb0175cb0f6405066b5bd3210f3d49c438d0b404ccaccee93c490
Secunia Security Advisory - A vulnerability has been reported in Mongoose, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.
5188b76d12b15df2b7e2c733b4c14e9f761cd14eda967a94fd72a50ea0c91ad8
Secunia Security Advisory - A vulnerability has been reported in the Display Suite module for Drupal, which can be exploited by malicious users to conduct script insertion attacks.
97ec1d72749d6cbf9a4cabcd38beb44879418ae943f304a1db9f1eed0d4be39a
Secunia Security Advisory - A vulnerability has been reported in the iWebkit theme for Drupal, which can be exploited by malicious users to conduct script insertion attacks.
1d9c28c643797a139fc13d2bf15f040c13abdb58d5f55745e68d1b7e926360e0
Secunia Security Advisory - Some vulnerabilities have been reported in Wonderware Information Server, which can be exploited by malicious people to compromise a user's system.
ffe4e296a36706219af2f4b023f3c144fe173859abf9cbb22fd40f6b87eb902f
Secunia Security Advisory - A vulnerability has been reported in Zabbix, which can be exploited by malicious people to conduct cross-site scripting attacks.
3dac14b36b7d0091ff55ec7073af6f203a449ce6aa658fb939a424014887d5b1