vBSkinWorks SQL Injection

Exploit Title: vBSkinWorks "VCPanel" Sql Injection Vulnerability member.php Date: 17/02/2012 - 19:18 Author: 3spi0n Software Website: http://www.forumflux.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: members.php $ Demo ; ibh.vcp.ir/forum/members.php?member=1' MySQL...

almnzm 2.4 - Cross-Site Request Forgery (Add Admin)

Title: almnzm 2.4 Priv8 Almnzm 2.4 CSRF Exploit!! Add New Admin :D By: HaNniBaL KsA HK www.r00t-s3c.com UserName: PassWord: E-mail: ! -- NOTE!: The value id'z for admin privileges can be change in any site :D "down in checkbox'z!" ^ so ? .. ma...

Unfixed XSS vulnerability at jogjacamp.org

Security researcher xwungu, has submitted on 17/02/2012 a cross-site-scripting XSS vulnerability affecting jogjacamp.org, which at the time of submission ranked 398931 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. It is currently...

Unfixed XSS vulnerability at serc.carleton.edu

Security researcher wingb0t, has submitted on 16/02/2012 a cross-site-scripting XSS vulnerability affecting serc.carleton.edu, which at the time of submission ranked 40727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Unfixed Redirect vulnerability at enable.ftd.de

Security researcher owege, has submitted on 14/02/2012 a Redirect vulnerability affecting enable.ftd.de, which at the time of submission ranked 2675 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currently unfixed. If you...

CVE-2012-1210

creationtimestamp| type| source ---|---|--- 2012-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36766...

Scientific Toolworks Understand 'wintab32.dll' DLL Loading Arbitrary Code Execution

The version of Scientific Toolworks Understand installed on the remote Windows host is earlier than 2.6 Build 600. As such, it insecurely looks in its current working directory when resolving DLL dependencies, such as for 'wintab32.dll'. Attackers may exploit this issue by placing a specially...

SuSE 11.1 Security Update : Mozilla XULrunner (SAT Patch Number 5764)

Mozilla XULrunner was updated to 1.9.2.26 security update, fixing security issues and bugs. The following security bugs have been fixed : - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs...

RabidHamster R4 Log Entry sprintf() Buffer Overflow

This module exploits a vulnerability found in RabidHamster R4's web server. By supplying a malformed HTTP request, it is possible to trigger a stack-based buffer overflow when generating a log, which may result in arbitrary code execution under the context of the user. Module Options msf use...

Google Service Reward #1 - ClickJacking Vulnerability

Document Title: =============== Google Service Reward 1 - ClickJacking Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/416.wmv View: http://www.youtube.com/watch?v=6N0YS9cTRHw Release Date: ============= 2012-02-06 Vulnerability Laboratory ID VL-I...

Unfixed XSS vulnerability at quazen.com

Security researcher nullbyt3, has submitted on 02/04/2012 a cross-site-scripting XSS vulnerability affecting quazen.com, which at the time of submission ranked 80735 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/04/2012. It is currently...

PHP 5.4SVN-2012-02-03 - htmlspecialchars/entities Buffer Overflow

From: cataphract Operating system: Any PHP version: 5.4SVN-2012-02-03 SVN Package: Reproducible crash Bug Type: Bug Bug description:Buffer overflow on htmlspecialchars/entities with $double=false Description: ------------ Long entities can cause a buffer overflow because the loop only guarantees ...

PHP 5.4SVN-2012-02-03 - htmlspecialcharsentities Buffer Overflow

PHP 5.4SVN-2012-02-03 - htmlspecialcharsentities Buffer Overflow From: cataphract Operating system: Any PHP version: 5.4SVN-2012-02-03 SVN Package: Reproducible crash Bug Type: Bug Bug description:Buffer overflow on htmlspecialchars/entities with $double=false Description: ------------ Long...

PHP 5.4SVN-2012-02-03 htmlspecialchars/entities Buffer Overflow

Exploit for php platform in category dos / poc From: cataphract Operating system: Any PHP version: 5.4SVN-2012-02-03 SVN Package: Reproducible crash Bug Type: Bug Bug description:Buffer overflow on htmlspecialchars/entities with $double=false Description: ------------ Long entities can cause a...

CVE-2012-1005

creationtimestamp| type| source ---|---|--- 2012-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18451...

Fedora 16 : wireshark-1.6.5-1.fc16 (2012-0435)

The following vulnerabilities have been fixed. wnpa-sec-2012-01 Laurent Butti discovered that Wireshark failed to properly record sizes for many packet capture file formats. wnpa-sec-2012-02 Wireshark could dereference a NULL pointer and crash wnpa-sec-2012-03 The RLC dissector could overflow a...

Novell Netware - XNFS.NLM NFS Rename Remote Code Execution

Novell Netware - XNFS.NLM NFS Rename Remote Code Execution Application: Novell Netware XNFS.NLM NFS Rename Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-06 PRL: 2012-02 Author: Francis Provench...

Novell Netware XNFS.NLM NFS Rename Remote Code Execution

Exploit for novell platform in category dos / poc Application: Novell Netware XNFS.NLM NFS Rename Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-06 PRL: 2012-02 Author: Francis Provencher Protek...

MyStore Tienda Virtual SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================================================== | Title : SQL Injection MyStore Tienda Virtual | | Author : Arturo Zamora | | email : email protected | | DAte : 02/01/2012 | | Verified : yes | | Risk :...

AShop 5.1.3 Cross Site Scripting / Open Redirect

Advisory: Multiple security vulnerabilities in AShop 5.1.3 Advisory ID: INFOSERVE-ADV2011-02 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on AShop513 Vendor URL: http://www.ashopsoftware.com/ Vendor Status: fixed in Version 5.1.4...