CVE-2010-4159

CVE-2010-4159 describes an untrusted search path vulnerability in the Mono runtime up to version 2.8, where metadata/loader.c could load a Trojan horse native library from the current working directory, allowing local privilege escalation. The root cause is insecure loading of libraries from the ...

Fedora 13 : drupal-cck-6.x.2.8-1.fc13 (2010-15707)

Contains fix for DRUPAL-SA-CONTRIB-2010-088. http://drupal.org/node/880736 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducin...

SA-CONTRIB-2010-088 - Content Construction Kit (CCK) - Access Bypass

The Content Construction Kit CCK project is a set of modules that allows you to add custom fields to nodes using a web browser. The CCK "Node Reference" module provides a backend URL that is used for asynchronous requests by the "autocomplete" widget to locate nodes the user can reference. In som...

Cross site scripting

Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages...

CVE-2010-1104

Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages...

Mongoose version 2.8 source disclosure vulnerability

Exploit for unknown platform in category web applications ==================================================== Mongoose version 2.8 source disclosure vulnerability ==================================================== Application Info: Name: mongoose Version: 2.8 Download:...

Mongoose 2.8 - Space String Remote File Disclosure

Mongoose 2.8 - Space String Remote File Disclosure source: https://www.securityfocus.com/bid/38145/info Mongoose is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of file...

Mongoose 2.8 - Space String Remote File Disclosure

source: https://www.securityfocus.com/bid/38145/info Mongoose is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process, which may a...

Fedora 11 : drupal-date-6.x.2.4-0.fc11 (2009-9736)

Advisory ID: DRUPAL-SA-CONTRIB-2009-057 http://drupal.org/node/579144 - Project: Date third-party module Version: 5.x, 6.x Date: 2009-September-16 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Cross Site Scripting -------- DESCRIPTION...

BaBB 2.8 Remote Code Injection Exploit

No description provided by source. !usr/bin/python BaBB 2.8 Full Code Injection Exploit AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina...

BaBB 2.8 Remote Code Injection Exploit

Exploit for unknown platform in category web applications ====================================== BaBB 2.8 Remote Code Injection Exploit ====================================== !usr/bin/python BaBB 2.8 Full Code Injection Exploit Download :...

BaBB 2.8 - Remote Code Injection

!usr/bin/python BaBB 2.8 Full Code Injection Exploit AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download :...

Arcadem Pro 2.8 SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " Arcadem Pro 2.8 Blind SQL Injection Exploit \n"; print " \n"; print " index.php article \n"; print "...

BaBB 2.8 - Remote Code Injection

BaBB 2.8 - Remote Code Injection !usr/bin/python BaBB 2.8 Full Code Injection Exploit AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina...

BaBB 2.8 Code Injection

!usr/bin/python BaBB 2.8 Full Code Injection Exploit AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download :...

Arcadem Pro 2.8 - article Blind SQL Injection

Arcadem Pro 2.8 - article Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " Arcadem Pro 2.8 Blind SQL Injection Exploit \n"; print " \n"; print " index.php...

Arcadem Pro 2.8 - 'article' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " Arcadem Pro 2.8 Blind SQL Injection Exploit \n"; print " \n"; print " index.php article \n"; print "...

CVE-2009-2313

Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the name parameter...

CVE-2009-2313

The CVE-2009-2313 issue affects Jinzora Media Jukebox (2.8 and earlier), where a directory traversal flaw in index.php allows remote attackers to include and execute local files via a dot-dot in the name parameter. Public references (including Exploit-DB entry 8278) indicate this is a local file ...

StrongSwan/Openswan Denial Of Service Vulnerability June-09

The host is installed with strongSwan/Openswan and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodstrongswannopenswandosvulnjun09.nasl 6515 2017-07-04 11:54:15Z cfischer $ StrongSwan/Openswan Denial Of Service Vulnerability June-09 Authors: Sharath S Copyright:...