FreeBSD - mbufs() sendfile Cache Poisoning Privilege Escalation

FreeBSD - mbufs sendfile Cache Poisoning Privilege Escalation / freebsd x86/x64 sendfile cache local root xpl v2 by Kingcope 2010 -- should h4x any freebsd 8. and 7. prior to 12Jul2010 tampers /bin/sh to contain a shellcode which does ' chmod a+s /tmp/sh chown root /tmp/sh execve /tmp/sh2 ' how t...

CVE-2010-2923

SQL injection vulnerability in the YouTube comyoutube component 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the idcate parameter to index.php...

Sql injection

SQL injection vulnerability in the YouTube comyoutube component 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the idcate parameter to index.php...

CVE-2010-2923

SQL injection vulnerability in the YouTube comyoutube component 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the idcate parameter to index.php...

CVE-2010-2923

The CVE-2010-2923 entry is a concrete issue: a SQL injection in the Joomla! YouTube (com_youtube) 1.5 component, exploitable via the id_cate parameter to index.php. This remote vulnerability allows arbitrary SQL commands to be executed on affected installations. The root cause is improper input h...

MDVA-2010:171 : libgdata

This update contains an important fix for YouTube video parsing, fixing a problem which was introduced when YouTube introduced new rating elements. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

MDVA-2010:126 : totem

A change on the youtube web page has stopped the youtube plugin from working. This update adapts totem to these changes. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, In...

MDVA-2010:063 : totem

The youtube plugin in totem has stopped working. This was caused by changes on the youtube web site. This new version updates to those changes to make youtube playback in totem work again. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

CVE-2010-2923: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the YouTube comyoutube component 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the idcate parameter to index.php...

Social Media v2.0.0 LFI Vulnerabilities

Exploit for php platform in category web applications ======================================= Social Media v2.0.0 LFI Vulnerabilities =======================================...

Youtube Cross Site Scripting

See http://www.youtube.com/watch?v=0xFbldgYVwQ for an example. It would appear that including something along the lines of " IFHTMLFUNCTION?" followed by your payload in a comment bypasses youtube's xss defenses. Pretty big hole eh? - Chris...

Mandriva Update for libgdata MDVA-2010:171 (libgdata)

Check for the Version of libgdata OpenVAS Vulnerability Test Mandriva Update for libgdata MDVA-2010:171 libgdata Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for libgdata MDVA-2010:171 (libgdata)

Check for the Version of libgdata OpenVAS Vulnerability Test Mandriva Update for libgdata MDVA-2010:171 libgdata Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

2daybiz Video Community Portal SQL Injection / Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Malware Sites Use YouTube to Hide Trojan

Unsuspecting users looking for videos on recent events like the Gulf of Mexico oil spill and the NBA playoffs are being directed to maliciously crafted websites with videos that appear to be identical to YouTube postings. Read the full article. InfoSecurity...

Facebook Security Hole Exposes Live Chat, Private Data

The problems with security and privacy on Facebook hit a new gear today with news that a web site vulnerability exposed live chat sessions and other private user data. According to a TechCrunch Europe report, the gaping security security on the Facebook site allowed any user to view the live chat...

iScripts VisualCaster - SQL Injection

iScripts VisualCaster - SQL Injection Exploit Title:SQli Vulnerability in iScripts VisualCaster Version: Web Application vendor :www.iscripts.com/ Date: 29 apr,2010 Dork: Powered by iScripts VisualCaster Author:Sid3^effects Code :...

iScripts VisualCaster - SQL Injection

Exploit Title:SQli Vulnerability in iScripts VisualCaster Version: Web Application vendor :www.iscripts.com/ Date: 29 apr,2010 Dork: Powered by iScripts VisualCaster Author:Sid3^effects Code : -------------------------------------------------------------------------------------- Sid3^effects aKa...

PHP Video Battle SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ PHP Video Battle SQL Injection Vulnerability ============================================ Author : v3n0m Site : http://yogyacarderlink.web.id/ Date : April, 29-2010 Location : Jakarta, Indonesia Tim...

Mandriva Update for totem MDVA-2010:126 (totem)

Check for the Version of totem OpenVAS Vulnerability Test Mandriva Update for totem MDVA-2010:126 totem Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...