NPDS CMS Revolution-13 SQL Injection

Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability Credits & Author: Narendra Bhati R00t Sh3ll www.websecgeeks.com References Source: ==================== http://www.npds.org/viewtopic.php?topic=26233&forum=12 http://websecgeeks.com/npds-cms-sql-injection/ Release Date: =============...

Adobe Flash Player Unspecified Memory Corruption Vulnerability (Jan 2015) - Windows

Adobe Flash Player is prone to unspecified memory corruption vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

NPDS CMS REvolution-13 - SQL Injection

Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability Credits & Author: Narendra Bhati R00t Sh3ll www.websecgeeks.com References Source: ==================== http://www.npds.org/viewtopic.php?topic=26233&forum=12 http://websecgeeks.com/npds-cms-sql-injection/ Release Date: =============...

NPDS CMS REvolution-13 - SQL Injection

NPDS CMS REvolution-13 - SQL Injection Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability Credits & Author: Narendra Bhati R00t Sh3ll www.websecgeeks.com References Source: ==================== http://www.npds.org/viewtopic.php?topic=26233&forum=12...

MyBB 1.8.1 /report.php 跨站脚本漏洞

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register This poc requires a valid username and it's password to work Users can register one manually. class...

chicken -- buffer overrun in substring-index[-ci]

chicken developer Moritz Heidkamp reports: The substring-index-ci procedures of the data-structures unit are vulnerable to a buffer overrun attack when passed an integer greater than zero as the optional START argument. As a work-around you can switch to SRFI 13's string-contains procedure which...

Adobe Shockwave Player <= 11.6.4.634 Multiple Memory Corruption Vulnerabilities (APSB12-13) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.6.4.634 or earlier. It is, therefore, affected by multiple unspecified memory corruption vulnerabilities. A remote attacker can exploit these issues by tricking a user into viewing a malicious Shockwave file, resulti...

Jaangle 0.98i.977 Denial Of Service

jaangle 0.98i.977 Denial of Service Vulnerability Author: hadji samir , [email protected] Download : http://www.jaangle.com/downloading?block Tested : Windows 7 fr DATE : 2012-12-13 EAX 000000C0 ECX 00000000 EDX 00000000 EBX 00000003 ESP 01C5FE28 EBP 01C5FF88 ESI 00000002 EDI 002B4A98 EIP 776964F4...

jaangle 0.98i.977 - Denial of Service

jaangle 0.98i.977 Denial of Service Vulnerability Author: hadji samir , [email protected] Download : http://www.jaangle.com/downloading?block Tested : Windows 7 fr DATE : 2012-12-13 EAX 000000C0 ECX 00000000 EDX 00000000 EBX 00000003 ESP 01C5FE28 EBP 01C5FF88 ESI 00000002 EDI 002B4A98 EIP 776964F4...

jaangle 0.98i.977 - Denial of Service

jaangle 0.98i.977 - Denial of Service jaangle 0.98i.977 Denial of Service Vulnerability Author: hadji samir , [email protected] Download : http://www.jaangle.com/downloading?block Tested : Windows 7 fr DATE : 2012-12-13 EAX 000000C0 ECX 00000000 EDX 00000000 EBX 00000003 ESP 01C5FE28 EBP 01C5FF88 E...

Tuleap PHP Unserialize Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Tuleap PHP Unserialize Code Execution', 'Description' = %q This module exploits a PHP object injection vulnerability in Tuelap...

Mandriva Linux Security Advisory : phpmyadmin (MDVSA-2014:228)

Multiple vulnerabilities has been discovered and corrected in phpmyadmin : - Multiple XSS vulnerabilities CVE-2014-8958. - Local file inclusion vulnerability CVE-2014-8959. - XSS vulnerability in error reporting functionality CVE-2014-8960. - Leakage of line count of an arbitrary file...

All-in-One WP Migration 2.0.2 Remote Code Execution Vulnerability

Exploit for php platform in category web applications In Ai1wmImportController::import admin priveleges ARE NOT checked. Function is imported as action: addaction‘wpajaximport’, ‘Ai1wmImportController::import’ in class-ai1wm-main-controller.php It’s possible to use it through...

Design/Logic Flaw

The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8 before 1.8.28-cert8 and 11.6 before 11.6-cert8 allows remote authenticated users to gain privileges via a call from an external protoco...

Xxe

ConfBridge in Asterisk 11.x before 11.14.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 11.6 before 11.6-cert8 allows remote authenticated users to 1 gain privileges via vectors related to an external protocol to the CONFBRIDGE dialplan function or 2 execute arbitrary system...

CVE-2014-8415

CVE-2014-8415 is a race condition in the chan_pjsip channel driver of Asterisk Open Source, affecting 12.x before 12.7.1 and 13.x before 13.0.1. A remote attacker can trigger a denial of service (assertion failure and crash) by sending a cancel request for a SIP session with a queued action to ei...

CVE-2014-8415

Race condition in the chanpjsip channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 allows remote attackers to cause a denial of service assertion failure and crash via a cancel request for a SIP session with a queued action to 1 answer a session or 2 send ringing...

FlatNuke 3.1.x Cross Site Scripting

------------------------------------------------------------------------- + FlatNuke alertdocument.cookie&body=This is my comment ------------------------------------------------------------------------------------------------...

FlatNuke 3.1.4 (FlatPoll) Persistent XSS Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------- + FlatNuke alertdocument.cookie&body=This is my comment ------------------------------------------------------------------------------------------------ 0day.today...

Threat Outbreak Alert RuleID12415: Email Messages Distributing Malicious Software on November 13, 2014

Medium Alert ID: 36420 First Published: 2014 November 14 16:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12415 may contain the following files: Name |...