ProjectButler 1.5.0 Remote File Inclusion

projectbutler - 1.5.0 offset RFI Vulnerability Author: cr4wl3r Contact: cr4wl3r4tlinuxmaildotorg Download: http://sourceforge.net/projects/projectbutler/files/projectbutler/1.5.0/ProjectButler.tar.gz Vuln : requireonce$offset."class.project.inc"; PoC :...

metasploit autopwn with mysql simple version of the [shadow-T-write]-vulnerability warning-the black bar safety net

Before according to the foreign method, although able to successfully run the autopwn,but set up ash is often in trouble right now according to their own summary of the simple method, stick out a detailed set up steps. First, we find creating a data table of the sql file...

DSA-1846-1 kvm - denial of service

Bulletin has no description...

CVE-2009-1893: Improper Link Resolution Before File Access

The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux RHEL 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the "dhcpd -t" command...

[GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3....

One bug to rule them all IE5,IE6,IE7,IE8,Netscape,Firefox,Safari,Opera,Konqueror, Seamonkey,Wii,PS3,iPhone,iPod,Nokia,Siemens.... and more. Don't wet your pants - it's DoS only Release mode: Tried hard to coordinate - gave up Reference : GSEC-TZO-26-2009 - One bug to rule them all WWW :...

Directory traversal

Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// dot dot slash slash in the t parameter...

CVE-2009-2398: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// dot dot slash slash in the t parameter...

Unfixed XSS vulnerability at www.t-series.com

Security researcher tr0n, has submitted on 07/09/2009 a cross-site-scripting XSS vulnerability affecting www.t-series.com, which at the time of submission ranked 11187848 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010. It is current...

T-Mobile data on Full Disclosure is real

T-Mobile is now saying that the information that was posted to the Full Disclosure security mailing list this weekend is in fact the company’s data. But the company stopped short of confirming that the anonymous hackers have access to customer data and other sensitive information, as they have...

CVE-2009-1853: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA aka 2.0.0b and earlier allow remote attackers to execute arbitrary SQL commands via the 1 f and 2 t parameters in a showforum action...

CVE-2009-1819

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1819

CVE-2009-1819 is a SQL injection vulnerability in the 2daybiz Custom T-shirt Design Script (product.php) that allows remote attackers to execute arbitrary SQL commands via the id parameter. Root cause: unsanitized input in a PHP script leading to injection. The exploitation vector is network-base...

CVE-2009-1819

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1820

CVE-2009-1820 describes a cross-site scripting (XSS) vulnerability in the 2daybiz Custom T-shirt Design Script, specifically in the file product.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the id parameter. The provided references confirm the vulnerability des...

CVE-2009-1819: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1820: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to inject arbitrary web script or HTML via the id parameter...

[Full-disclosure] [ MDVSA-2009:114 ] ipsec-tools

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:114 http://www.mandriva.com/security/ Package : ipsec-tools Date : May 18, 2009 Affected: Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Multiple memory leaks in Ipsec-tools before 0.7.2 allo...

2daybiz Custom T-shirt Design (SQL/XSS) Multiple Remote Vulns

No description provided by source. -------------------------AllaH AkbaR------------------------------- Custom T-shirt Design SQL & xss MULTIPLE Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail:...

2daybiz Custom T-shirt Design (SQL/XSS) Multiple Remote Vulns

Exploit for unknown platform in category web applications ============================================================= 2daybiz Custom T-shirt Design SQL/XSS Multiple Remote Vulns ============================================================= -------------------------AllaH...

2DayBiz Custom T-shirt Design - SQL Injection / Cross-Site Scripting

-------------------------AllaH AkbaR------------------------------- Custom T-shirt Design SQL & xss MULTIPLE Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...