news system project news system vulnerabilities and exploits

(subscribe to this query)

Mozilla Firefox prior to 2.0.0.6, Thunderbird prior to 1.5.0.13 and 2.x prior to 2.0.0.6, and SeaMonkey prior to 1.1.4 allow remote malicious users to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extensio...

Mozilla Firefox 2.0.0.5 Mozilla Seamonkey 1.1.3 Mozilla Thunderbird 2.0.0.5

1 EDB exploit

An issue exists in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.

Citrix Application Delivery Controller Firmware 10.5 Citrix Application Delivery Controller Firmware 11.1 Citrix Application Delivery Controller Firmware 12.0 Citrix Application Delivery Controller Firmware 12.1 Citrix Application Delivery Controller Firmware 13.0 Citrix Netscaler Gateway Firmware 10.5 Citrix Netscaler Gateway Firmware 11.1 Citrix Netscaler Gateway Firmware 12.0 Citrix Netscaler Gateway Firmware 12.1 Citrix Gateway Firmware 13.0

2 Metasploit modules64 Github repositories21 Articles

SQL injection vulnerability in NewsController.php in the News module 5.3.2 and previous versions for TYPO3 allows unauthenticated users to execute arbitrary SQL commands via vectors involving overwriteDemand for order and OrderByAllowed.

News System Project News System

Heap-based buffer overflow in Mozilla Thunderbird prior to 2.0.0.12 and SeaMonkey prior to 1.1.8 might allow remote malicious users to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message previ...

Mozilla Seamonkey Mozilla Thunderbird

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and previous versions allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Invisible-island Lynx Debian Debian Linux 3.1 Debian Debian Linux 3.0

1 EDB exploit

gkrellm-newsticker gkrellm plugin prior to 0.3-3.1 allows remote malicious users to execute arbitrary commands via shell metacharacters in the ticker title of a URI.

Gkrellm Newsticker Gkrellm Newsticker 0.3

gkrellm-newsticker gkrellm plugin prior to 0.3-3.1 allows remote malicious users to cause a denial of service (crash) via (1) link or (2) title elements that contain multiple lines.

Gkrellm Newsticker Gkrellm Newsticker 0.3

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...

5 Github repositories1 Article

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle malicious users...

2 Github repositories1 Article

A vulnerability classified as problematic has been found in SourceCodester Employee Payslip Generator 1.0. Affected is an unknown function of the file /classes/Master.php?f=save_position of the component Create News Handler. The manipulation of the argument name with the input &l...

Employee Payslip Generator System Project Employee Payslip Generator System 1.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook