w3af, is a Web Application Attack and Audit Framework. The w3af core and it's plugins are fully written in python. The project has more than 130 plugins, which check for SQL injection, cross site scripting (xss), local and remote file inclusion and much more.
0bf3cec513931b9bf20e6f753dedeaab57b5cad303489ab9ff365786c04d9444Joomla version 1.6.3 suffers from a cross site scripting vulnerability.
7ff6be846112bbdf01d1266eebe01c79144921568bc5135c71a8d0cf3a3bcccaSoda PDF Professional version 1.2.155 suffers from a restriction of service (RoS) vulnerability when handling PDF or WWF file formats which can be exploited by malicious people to cause a denial of service scenario.
257055bfc81320a64d0279ef65378e9bdb295a87847b2cad96b4bcf72ea9ceffJoomla ALFContact component version 1.9.3 suffers from a cross site scripting vulnerability.
a0f5b0e570e819c76a159a739660fa19d1b41c64bc922b15caaef77f5fc76a24Drupal version 6.20 with String Overrides version 6.x-1.8 and Drupal version 5.21 with String Overrides version 5.x-1.8 suffer from a cross site scripting vulnerability.
4886ee54f2d7167744489a6e50bdf6359d0772cfb3bb6eedc3e6b62a29164bf5glibc LD_AUDIT arbitrary DSO load local root exploit that leverages a race condition to escalate privileges.
8c9850741e5f8fca1981297aa3458369e2f156d2152d098c2e4d2f48ebf2a8c0This Metasploit module exploits VanDyke Software AbsoluteFTP by overflowing a filename buffer related to the LIST command. Versions 1.9.6 through 2.2.10 are affected.
9b92c4d4563e7164a285707e87ec400196b70ee1321e7f49852cfec597ec6133Secunia Security Advisory - Avaya has acknowledged multiple vulnerabilities in Avaya CMS, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
2480c3b56ccec5047c6e7917e786880008c36ec2db4be8637eb86494e23adfe2Secunia Security Advisory - Multiple vulnerabilities have been reported in Mozilla Firefox and Thunderbird, which can be exploited by malicious people to disclose potentially sensitive information, conduct cross-site scripting attacks, and compromise a user's system.
8d6219c2bc2c4759c9c0eddc7842a55578c0fd9647d8c57158cd241808f522b9Secunia Security Advisory - Multiple vulnerabilities have been reported in Mozilla Firefox and Thunderbird, which can be exploited by malicious people to disclose potentially sensitive information, conduct cross-site scripting attacks, bypass certain security restrictions, and potentially compromise a user's system.
04a50ccf6ce1e308be1223426c9d193d931c0f8cf7983c6e9550b9e775bd961eSecunia Security Advisory - A vulnerability has been reported in DTV Player, which can be exploited by malicious people to compromise a user's system.
f48a4c4cb03276fbf033af0348a61778c860aec5c11658ea2d7d87ebab0534c4Secunia Security Advisory - Red Hat has issued an update for thunderbird. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, conduct cross-site scripting attacks, and compromise a user's system.
a3c94f092e43b02d7b58510067dd48b3d02ce16df715082fe818d3a53acb0f7cSecunia Security Advisory - A security issue has been reported in OpenPAM, which can be exploited by malicious, local users to gain escalated privileges.
d6664ab28cb0b24cabc74b87319e63d2d2f50df37a02c3f6b338a9c311fc8f32Secunia Security Advisory - A security issue has been reported in Apache Tomcat, which can be exploited by malicious users to bypass certain security restrictions.
d229be548145889e7fb67fbb1fd2301ae80947441816677e8ed73f18f1bc5a5fSecunia Security Advisory - Ubuntu has issued an update for tomcat6. This fixes multiple vulnerabilities, which can be exploited by malicious, local users to disclose sensitive information, bypass certain security restrictions, or cause a DoS (Denial of Service) and by malicious people to disclose potentially sensitive information and bypass certain security restrictions.
e1f13702cb3d30f4c505686807b0fce32dd18435e743137299e15a05056cbc3eSecunia Security Advisory - Debian has issued an update for iceape. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, conduct cross-site scripting attacks, and compromise a user's system.
9c90a83a818231e1702c639a64710e72684067e3cd0f90d19f45463f224e8309Secunia Security Advisory - A vulnerability has been reported in ProFTPD, which can be exploited by malicious users to compromise a vulnerable system.
d08578332dc908ec94ae8dd945dd9239f4e2e3836515779c4f42ba5a9d3d4febSecunia Security Advisory - SUSE has issued an update for apache2. This fixes a weakness and some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions and cause a DoS (Denial of Service).
298d9757ada34fddd31e26c828da0a17f5b9a69981c6e08c999820237f929d41Secunia Security Advisory - Multiple vulnerabilities have been reported in the Webform CiviCRM Integration module for Drupal, which can be exploited by malicious people to conduct SQL injection attacks.
cddb3551f2fb8c67b92d021eb1407a263c043c7912c5b5bbf70d2e3e33cbba03Secunia Security Advisory - muuratsalo has discovered multiple vulnerabilities in OrderSys, which can be exploited by malicious people to conduct SQL injection attacks.
0773a8d7763465010bb9260f3e6258257af98479c8d9dc86ebbb5c47db1cc5dcSecunia Security Advisory - Stefan Schurtz has discovered a vulnerability in AShop, which can be exploited by malicious people to conduct cross-site scripting attacks.
233885e89b4dc1d8b40e91728ab5f2952d6898f22955f36844875a7662673e10Secunia Security Advisory - Secunia Research has discovered a weakness and multiple vulnerabilities in Support Incident Tracker, which can be exploited by malicious users to disclose sensitive information, conduct SQL injection attacks, and compromise a vulnerable system and by malicious people to conduct cross-site scripting attacks.
10fe08a5f4a38cafa63bf94902bdc8390b2b4f4dcdf6fa7a5abc940ed6f6ba40Secunia Security Advisory - Ubuntu has issued an update for libmodplug. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library.
7102c27eff46f81e58a9c20c78052bdc5223a1eafa712174118496cf4e155ac0Secunia Security Advisory - Some vulnerabilities have been reported in HP Network Node Manager, which can be exploited by malicious people to conduct cross-site scripting attacks.
b1793ebd021e1a13e9abc1fa20c89a378407f3a3ee64a6a41c083b741dc6a64bSecunia Security Advisory - A vulnerability has been discovered in GnuTLS, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library.
6d5b07da228c7ee36fb4259cc1a7c300bdd32c0bc2ffb9eff2c88bdbc821ff43
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed