Fedora 14 : openconnect-2.26-4.fc14 (2010-18055)

This update implements DTLS rekeying, elides the session cookie from debugging output by default, and fixes a potential crash on relative HTTP redirect during authentication. It also fixes a problem which occurs when changing VPN hosts in the NetworkManager auth-dialog, after the connection to th...

CVE-2010-3705

The sctpauthasocgethmac function in net/sctp/auth.c in the Linux kernel before 2.6.36 does not properly validate the hmacids array of an SCTP peer, which allows remote attackers to cause a denial of service memory corruption and panic via a crafted value in the last element of this array...

AWCM 2.2 SQL Injection

AWCM v2.2 Auth Bypass Vulnerabilities /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \\ \ \ \ \ \ \ \ \ \\ \ \ \ // // // ///////////L\ \ //...

some ooold Juniper bugs (was: [Full-disclosure] ZDI-10-231: Juniper Secure Access Series meeting_testjava.cgi XSS Vulnerability)

This reminded me of a bunch of problems I spotted in Juniper SSL VPN a while ago; they are apparently fixed, but I don't recall seeing any public vendor advisory / credit for reporting them - so here you go, even if just for the record... These were fixed by Juniper in IVE 6.3R1, 6.2R3, 6.1R5,...

Max Anket v1.0 - Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ================================================ Max Anket v1.0 - Multiple Remote Vulnerabilities ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

Chipmunk Pwngame SQL Injection

=================================================== Chipmunk Pwngame = Multiple SQL Vulnerabilities =================================================== My + Author : KnocKout Contact : [email protected] + Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB H4X0RE SECURITY PROJECT AQ. "Rüyalarýma bite...

SuSE 10 Security Update : squid (ZYPP Patch Number 6931)

The following vulnerabilities have been fixed in squid : - DoS via special crafted auth header CVE-2010-0308: DoS via invalid DoS header. CVE-2009-2855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

Chipmunk Pwngame Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications ======================================================= Chipmunk Pwngame Multiple SQL Injection Vulnerabilities ======================================================= My + Author : KnocKout Contact : email protected + Greatz : h4x0reSEC /...

VideoDB <= 3.0.3 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ================================================ VideoDB General Information Advisory/Exploit Title = VideoDB Multiple Vulnerabilities Author = Valentin Hoebel Contact = email protected :::::::::::::::::::::::::::::::::::::: 0x2...

VideoDB 3.0.3 - Multiple Vulnerabilities

VideoDB 3.0.3 - Multiple Vulnerabilities Exploit Title: VideoDB Multiple Vulnerabilities Date: 09.10.2010 Author: Valentin Category: webapps/0day Version: 3.0.3 and earlier Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Informatio...

VideoDB 3.0.3 - Multiple Vulnerabilities

Exploit Title: VideoDB Multiple Vulnerabilities Date: 09.10.2010 Author: Valentin Category: webapps/0day Version: 3.0.3 and earlier Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = VideoDB Multip...

Chipmunk Pwngame - Multiple SQL Injections

Chipmunk Pwngame - Multiple SQL Injections =================================================== Chipmunk Pwngame = Multiple SQL Vulnerabilities =================================================== My + Author : KnocKout Contact : [email protected] + Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB...

xWeblog v2.2 Auth Bypass Vulnerability

Exploit for php platform in category web applications ====================================== xWeblog v2.2 Auth Bypass Vulnerability ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

Chipmunk Pwngame - Multiple SQL Injections

=================================================== Chipmunk Pwngame = Multiple SQL Vulnerabilities =================================================== My + Author : KnocKout Contact : [email protected] + Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB H4X0RE SECURITY PROJECT AQ. "Rüyalarýma bite...

MS IIS 6.0 WebDAV Auth. Bypass Exploit

Exploit for windows platform in category remote exploits ====================================== MS IIS 6.0 WebDAV Auth. Bypass Exploit ====================================== Author : FoX HaCkEr Contact : email protected SiTe : www.sec4ever.com...

wpQuiz 2.7 SQL Injection

Powered by wpQuiz - Auth bypass Vulnerability My + Author : KnocKout + Greatz : DaiMon Contact : [email protected] Software info Script : wpQuiz Version : 2.7 Download : http://webscripts.softpedia.com/script/Quizz/wpQuiz-41098.html Vulnerability Style : Auth bypass Google Dork : "Powered by...

Shop Creator 4.0 Bypass Vulnerability

Exploit for asp platform in category web applications ===================================== Shop Creator 4.0 Bypass Vulnerability ===================================== --------------------------------------------------------- Portal Name: Shop Creator Version: 4.0 Vendor: http://www.etoshop.com...

Shop Creator 4.0 - SQL Injection

Shop Creator 4.0 - SQL Injection --------------------------------------------------------- Portal Name: Shop Creator Version: 4.0 Vendor: http://www.etoshop.com Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir Vulnerability : Auth Bypass SQL Injection Vulnerability...

Shop Creator 4.0 - SQL Injection

--------------------------------------------------------- Portal Name: Shop Creator Version: 4.0 Vendor: http://www.etoshop.com Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir Vulnerability : Auth Bypass SQL Injection Vulnerability...

NavanaSoft Auth Bypass vulnerability

Exploit for php platform in category web applications ==================================== NavanaSoft Auth Bypass vulnerability ==================================== ? My home: HacKTeach.org & Pal-Li0ns.com & sec-r1z.com ? For Ask: email protected ? Script: NavanaSoft ? home Script NavanaSoft.com ...