Oracle MySQL Privilege Escalation

use DBI; $|=1; =for comment MySQL privilege elevation Exploit This exploit adds a new admin user. By Kingcope Tested on Debian Lenny mysql-5.0.51a OpenSuSE 11.4 5.1.53-log How it works: This exploit makes use of several things: The attacker is in possession of a mysql user with 'file' privileges...

CVE-2012-4964

The CVE-2012-4964 vulnerability affects Samsung printer firmware prior to 20121031 that ships with a hardcoded read-write SNMP community string. This enables remote attackers to obtain administrative access over SNMP, potentially taking full control of affected devices (including some Dell-brande...

D-Link DSR-250N Persistent Root Access

D-Link DSR-250N has a backdoor account that allows for persistent root access. D-Link DSR-250N Persistent Root Access Router: D-Link DSR-250N Hardware Version: A1 Firmware Version: 1.05B73WW Arch: armv6l, Linux Author: 0o -- nullnull nu11.nu11 at yahoo.com Date: 2012-11-25 Purpose: Persistently...

CVE-2012-5918

razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a directory...

MS12-066: Description of the security update for SharePoint Foundation 2010 Service Pack 1: October 9, 2012

Describes the security update for SharePoint Foundation 2010 Service Pack 1 that was released on October 9, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-066. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

Harvard Carr Center for Human Rights Policy Hacked, Password was "DOG" ?

Harvard's Carr Center for Human Rights Policy website www.hks.harvard.edu/cchrp/ was hacked last week and then silently fixed by the administrator without giving Reply/Credit to the Whitehat Hacker who reported the vulnerability. The Hack incident was performed in 3 Phases as described below: Pha...

CVE-2012-2153

Removed by vendor...

DEBIAN-CVE-2012-4448

Cross-site request forgery CSRF vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboardincominglinks edit action...

WordPress Krea3AllMedias SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

CVE-2012-2285

CVE-2012-2285 affects EMC Cloud Tiering Appliance (CTA) and CTA/VE versions up to 9.0 that allow remote attackers to obtain GUI administrative access by sending a crafted file during authentication. The root cause is an authentication bypass that can grant full GUI admin privileges, as detailed i...

CVE-2009-5116

McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account...

Authentication flaw

McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account...

PT-2012-1281

Name of the Vulnerable Software and Affected Versions McAfee LinuxShield versions 1.5.1 and earlier Description The issue is related to improper implementation of client authentication, allowing remote authenticated users to gain Admin access to the statistics server by leveraging a client accoun...

CVE-2009-5116: Improper Authentication

McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account...

CVE-2011-5097

chef-server-api/app/controllers/cookbooks.rb in Chef Server in Chef before 0.9.18, and 0.10.x before 0.10.2, does not require administrative privileges for the update and destroy methods, which allows remote authenticated users to 1 upload cookbooks via a knife cookbook upload command or 2 delete...

Joomla! Component com_niceajaxpoll 1.3.0 - SQL Injection

Joomla! Component comniceajaxpoll 1.3.0 - SQL Injection Title : Joomla comniceajaxpoll = 1.3.0 SQL Injection Vulnerability Author : Patrick de Brouwer - @knickz0r NLSecurity - www.nlsecurity.org Dork : inurl:"/index.php?option=comniceajaxpoll" Software : Joomla component Nice Ajax Poll = 1.3.0...

cmseasy xss+后台getshell

简要描述： xss盗取 cookie进后台，某处可注入代码，传webshell 详细说明： 1:页面搜索位置出现xss未进行任何过滤,本来应该是反射型的xss，但后台的 "热门搜索词" 功能记录了用户搜索的所有记录； 当管理员查看 内容-热门搜索词 版块时，被xss攻击盗cookie； 2:利用盗取的cookie进后台，进入 模板-当前模板编辑 模块； 在模板编辑处任何一个html文件插入php可执行代码 ；再次访问首页，出现phpinfo 页面； 由于我测试的版本是4.8,wooyun前几天也报了一个搜索型xss，应该跟我的一样吧; 不过看官方的xss补丁，只适用于5.x的升级；...

kernel: thp: __split_huge_page() mapcount != page_mapcount BUG_ON()

The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service host OS crash by leveraging administrative access to the guest OS, related to the pmdnoneorclearbad function and page faults for huge pages...

PT-2012-3609 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Windows XP versions SP2 and SP3 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 versions SP2, R2, and R2 SP1 Windows 7 versions Gold and SP1 Description: The issue arises from the improper handling of user-mode...

baserCMS vulnerable to session management

Overview baserCMS contains a vulnerability in session management. baserCMS is an open-source Contents Management System CMS. baserCMS contains a vulnerability in session management. Impact If a web server is hosting several websites, and baserCMS are installed on the respective websites, an...