WordPress SearchAutocomplete 1.0.8 SQL Injection

Exploit Title: WordPress SearchAutocomplete plugin getresults"SELECT posttitle As name, ID as postid, guid AS url, 1 cnt FROM ".$wpdb-prefix."posts t WHERE poststatus='publish' and posttype='post' OR posttype='page' and postdate NOW and posttitle LIKE '%".$GET'term'."%' ORDER BY posttitle";...

WordPress Plugin SearchAutocomplete 1.0.8 - SQL Injection

WordPress Plugin SearchAutocomplete 1.0.8 - SQL Injection Exploit Title: WordPress SearchAutocomplete plugin getresults"SELECT posttitle As name, ID as postid, guid AS url, 1 cnt FROM ".$wpdb-prefix."posts t WHERE poststatus='publish' and posttype='post' OR posttype='page' and postdate NOW and...

WordPress Plugin SearchAutocomplete 1.0.8 - SQL Injection

Exploit Title: WordPress SearchAutocomplete plugin getresults"SELECT posttitle As name, ID as postid, guid AS url, 1 cnt FROM ".$wpdb-prefix."posts t WHERE poststatus='publish' and posttype='post' OR posttype='page' and postdate NOW and posttitle LIKE '%".$GET'term'."%' ORDER BY posttitle";...

Wireshark Multiple Vulnerabilities (wnpa-sec-2010-08) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Ninja RSS Syndicator v1.0.8 Local File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ Ninja RSS Syndicator v1.0.8 Local File Include Vulnerability ============================================================ Joomla component Ninja RSS Syndicator 1.0.8 Local File...

AEF Version 1.0.8 CMS Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ======================================================== AEF Version 1.0.8 CMS Cross Site Scripting Vulnerability ======================================================== Topic : AEF Version 1.0.8 Bug Type : Cross Site Scripting Credit :...

AEF 1.0.8 Cross Site Scripting

Dear Sir / Madam The Itsecteam has discovered a new bug in AEF Version 1.0.8 CMS and will be glad to report and public it . more information about this bug is listed below : Topic : AEF Version 1.0.8 Bug Type : Cross Site Scripting Credit : ItSecTeam Remote : Yes Status : Bug Download Link...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

Wireshark OpcUa Dissector Denial of Service Vulnerability - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

avast! AntiVirus <= 1.0.8-2 Multiple BOF Vulnerabilities - Linux

avast! AntiVirus is prone to multiple buffer overflow BOF vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

RedHat Security Advisory RHSA-2009:1100

The remote host is missing updates announced in advisory RHSA-2009:1100. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. A format string flaw was found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump...

Mandrake Security Advisory MDVSA-2009:125 (wireshark)

The remote host is missing an update to wireshark announced via advisory MDVSA-2009:125. OpenVAS Vulnerability Test $Id: mdksa2009125.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:125 wireshark Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-5382 (wireshark)

The remote host is missing an update to wireshark announced via advisory FEDORA-2009-5382. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Wireshark PCNFSD Dissector Denial of Service Vulnerability - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

CVE-2008-5185

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service infinite loop via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using ""...

GeSHi 1.0.x - XML Parsing Remote Denial of Service

GeSHi 1.0.x - XML Parsing Remote Denial of Service source: https://www.securityfocus.com/bid/32377/info GeSHi is prone to a remote denial-of-service vulnerability. Remote attackers can exploit this issue to cause the vulnerable application to enter an infinite loop, consuming excessive resources...

Design/Logic Flaw

perl.robot in realtimebattle 1.0.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl.robot.log temporary file...

CVE-2008-4981

perl.robot in realtimebattle 1.0.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl.robot.log temporary file...

Alumni 1.0.8/1.0.9 - 'info.php?id' SQL Injection

source: https://www.securityfocus.com/bid/29019/info Project Alumni is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based...

bcoosexoops-xss.txt

bcoos & E-xoops DevTracker module two variables XSS vendor url: http://www.bcoos.net Vendor url: http://www.e-xoops.com Advisore: http://lostmon.blogspot.com/2008/02/ bcoos-and-e-xoops-devtracker-module-two.html vendor notify:yes exploits available: YES bcoos and E-xoops are two content-community...