Online Password Manager 4.1 - Insecure Cookie Handling

Online Password Manager v4.1 Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 15.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com contact: [email protected] N0T: Herkes Hecker Olmus :S yav siktir...

Aqua CMS SQL Injection

================================================================================ Found : halkfild Dork : "Powered By Aqua Cms" Vendor: http://www.aquacms.net/ Advisory URL: http://crackfor.me/bugtraq/aquacms.v1.1.txt Visit : crackfor.me, forum.antichat.ru, raz0r.name Mail : bugtraqd0gcrackfor.me...

Aqua CMS (username) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== Aqua CMS username SQL Injection Vulnerability =============================================== ================================================================================ Found : halkfild...

XEngineSoft PMS/MGS/NM/AMS 1.0 (Auth Bypass) SQL Injection Vulns

No description provided by source. -----------------------------------------------------Iam MusLiM----------------------------------- ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF //...

RQMS (Rash) <= 1.2.2 Multiple SQL Injection Vulnerabilities

No description provided by source. Product : RQMS Version : 1.2.2 Dork : Rash Version: 1.2.1 Site: http://rqms.sourceforge.net Found by: Dimi4 Greetz: UASC http://uasc.org.ua, antichat Multiple Remote Vulnerabilities Need: magicquotesgpc = OFF 1Auth BYPASS http://127.0.0.1/rash-v1.2.2/?admin Logi...

Aqua CMS - 'Username' SQL Injection

================================================================================ Found : halkfild Dork : "Powered By Aqua Cms" Vendor: http://www.aquacms.net/ Advisory URL: http://crackfor.me/bugtraq/aquacms.v1.1.txt Visit : crackfor.me, forum.antichat.ru, raz0r.name Mail : bugtraqd0gcrackfor.me...

RQms (Rash) 1.2.2 - Multiple SQL Injections

RQms Rash 1.2.2 - Multiple SQL Injections Product : RQMS Version : 1.2.2 Dork : Rash Version: 1.2.1 Site: http://rqms.sourceforge.net Found by: Dimi4 Greetz: UASC http://uasc.org.ua, antichat Multiple Remote Vulnerabilities Need: magicquotesgpc = OFF 1Auth BYPASS http://127.0.0.1/rash-v1.2.2/?adm...

My Dealer CMS 2.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------- ----------------------------------------------------- My Dealer Cms 2.0 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive...

WebFileExplorer 3.1 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Product Name: WebFileExplorer Version : 3.1 URL : http://www.webfileexplorer.com/ Price : 99 $ USD Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg WebFileExplorer v3.1, is prone to multiple vulnerabilities. At first, an attacker can inject his evi...

Absolute Form Processor XE-V 1.5 (Auth Bypass) SQL Injection Vuln

No description provided by source. ----------------------------------------------------- ----------------------------------------------------- Absolute Form Processor XE-V 1.5 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home:...

Simbas CMS 2.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------- ----------------------------------------------------- Simbas Content Management System auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home:...

WebFileExplorer 3.1 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= WebFileExplorer 3.1 Auth Bypass SQL Injection Vulnerability ============================================================= Product Name: WebFileExplorer Version : 3.1 URL :...

Simbas CMS 2.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Simbas CMS 2.0 Auth Bypass SQL Injection Vulnerability ======================================================== ----------------------------------------------------- Simbas Content...

My Dealer CMS 2.0 SQL Injection

----------------------------------------------------- ----------------------------------------------------- My Dealer Cms 2.0 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive Algerie demo :...

Absolute Form Processor SQL Injection

----------------------------------------------------- ----------------------------------------------------- Absolute Form Processor XE-V 1.5 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive Algerie demo :...

Arcadwy Games CMS SQL Injection

--------------------------------------------------------------------------------------------- scriptname: Arcadwy Games Cms Arcadwy Games Cms Auth Bypass SQL Injection Vulnerability Author: PLATEN contact: PLATEN.SecureatGmail.com web: Www.ata-turk.tk & www.deltahacking.net big tnx: b3hz4d...

SIP Username Enumerator (UDP)

Scan for numeric username/extensions using OPTIONS/REGISTER requests This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SIP Username Enumerator UDP', 'Description' = 'Scan for numeric...

IBM DB2 9.5 Pre-Auth Denial Of Service

Discovered by Dennis Yurichev DB2TEST database should be present on target system from sys import from socket import sockobj = socketAFINET, SOCKSTREAM sockobj.connect argv1, 50000 sockobj.send "\x00\xBE\xD0\x41\x00\x01\x00\xB8\x10\x41\x00\x7F\x11\x5E\x97\xA8"...

Gentoo Security Advisory GLSA 200903-39 (pam_krb5)

The remote host is missing updates announced in advisory GLSA 200903-39. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-39 (pam_krb5)

The remote host is missing updates announced in advisory GLSA 200903-39. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...