adam baldwin vulnerabilities and exploits

(subscribe to this query)

The administrative interface in django.contrib.admin in Django prior to 1.1.3, 1.2.x prior to 1.2.4, and 1.3.x prior to 1.3 beta 1 does not properly restrict use of the query string to perform certain object filtering, which allows remote authenticated users to obtain sensitive i...

Djangoproject Django 0.95.1 Djangoproject Django 0.96 Djangoproject Django 0.91 Djangoproject Django 0.95 Djangoproject Django Djangoproject Django 1.1.0 Djangoproject Django 1.0 Djangoproject Django 1.0.1 Djangoproject Django 1.0.2 Djangoproject Django 1.1 Djangoproject Django 1.2.1 Djangoproject Django 1.2.2 Djangoproject Django 1.2.3 Djangoproject Django 1.2 Djangoproject Django 1.3

The password reset functionality in django.contrib.auth in Django prior to 1.1.3, 1.2.x prior to 1.2.4, and 1.3.x prior to 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote malicious users to cause a denial of service (resour...

Djangoproject Django 1.0 Djangoproject Django 1.0.1 Djangoproject Django 1.0.2 Djangoproject Django 0.95.1 Djangoproject Django 0.96 Djangoproject Django 1.1 Djangoproject Django Djangoproject Django 0.91 Djangoproject Django 0.95 Djangoproject Django 1.1.0 Djangoproject Django 1.2.3 Djangoproject Django 1.2 Djangoproject Django 1.2.1 Djangoproject Django 1.2.2 Djangoproject Django 1.3

SQL injection vulnerability in include/class.staff.php in osTicket prior to 1.6 RC5 allows remote malicious users to execute arbitrary SQL commands via the staff username parameter.

Osticket Osticket 1.6 Osticket Osticket

1 EDB exploit

Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 up to and including 1.6.6, and possibly earlier versions, allows remote malicious users to inject arbitrary web script or HTML via the avatar parameter.

Expressionengine Expressionengine 1.6.4 Expressionengine Expressionengine 1.6.5 Expressionengine Expressionengine 1.6.6

1 EDB exploit

Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss 2.3.3, and other versions prior to 2.5, allow remote malicious users to hijack the authentication of an administrator for (1) requests that reset user passwords via zport/dmd/ZenUsers/admin, and (2) requests tha...

Zenoss Zenoss 2.3.0 Zenoss Zenoss 2.4.0 Zenoss Zenoss 2.4.2 Zenoss Zenoss 2.3.3 Zenoss Zenoss

1 EDB exploit

Desktop Rover 3.0, and possibly earlier versions, allows remote malicious users to cause a denial of service (application crash) via a crafted packet to TCP port 61427, which causes an invalid memory access.

Nelso Software Desktop Rover

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook