Joomla Component com_ezstore Remote SQL Injection (CVE-2008-3586)

An SQL injection vulnerability has been reported in Joomla Com Ezstore. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Amevents SQL Injection (CVE-2008-5768)

An SQL injection vulnerability has been reported in Sirium Am Events Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module makale Remote SQL Injection (CVE-2008-4653)

An SQL injection vulnerability has been reported in Xoops Makale. An attacker could exploit this vulnerability via the id parameter. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_content SQL Injection (CVE-2008-6923)

SQL injection vulnerability has been reported in Joomla Com Content. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_brightweblinks SQL Injection (CVE-2008-3083)

An SQL injection vulnerability has been reported in Joomla Com BrightweblinksJoomla Com Brightweblinks. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_ice SQL Injection (CVE-2008-6852)

An SQL injection vulnerability has been reported in Joomla Com Ice. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_ionfiles File Disclosure (CVE-2008-6080)

An information disclosure vulnerability has been reported in Joomla Com Ionfiles. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Joomla Component com_beamospetition Remote SQL Injection (CVE-2008-3132)

An SQL injection vulnerability has been reported in Joomla Com Beamospetition. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_ownbiblio SQL Injection (CVE-2008-6184)

An SQL injection vulnerability has been reported in Medialab-karlsruhe Ownbiblio. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Windows TrackPopupMenu Win32k NULL Pointer Dereference Exploit

This Metasploit module exploits a NULL Pointer Dereference in win32k.sys, the vulnerability can be triggered through the use of TrackPopupMenu. Under special conditions, the NULL pointer dereference can be abused on xxxSendMessageTimeout to achieve arbitrary code execution. This Metasploit module...

Windows TrackPopupMenu Win32k NULL Pointer Dereference

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 'Windows TrackPopupMenu Win32k NULL Pointer Dereference',...

Microsoft Windows - TrackPopupMenu Win32k Null Pointer Dereference (MS14-058) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 'Windows TrackPopupMenu Win32k NULL Pointer Dereference',...

Microsoft EAP Implementation TLS Information Disclosure Vulnerability (2977292)

This host is missing an important security update according to Microsoft Security Advisory 2977292. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the 1 callback parameter in a colorselector action, 2 field parameter in a dateformat action, or 3 companyname parameter in an addedit action to index.php...

HP Data Protector EXEC_INTEGUTIL Remote Code Execution Exploit

This exploit abuses a vulnerability in the HP Data Protector. The vulnerability exists in the Backup client service, which listens by default on TCP/5555. The EXECINTEGUTIL request allows to execute arbitrary commands from a restricted directory. Since it includes a perl executable, it's possible...

HP Data Protector EXEC_INTEGUTIL Remote Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Data Protector EXECINTEGUTIL Remote Code Execution', 'Description' = %q This exploit abuses a vulnerability in the HP Data...

MS14-064 Microsoft Windows OLE Package Manager Code Execution

This module exploits a vulnerability found in Windows Object Linking and Embedding OLE allowing arbitrary code execution, publicly exploited in the wild as MS14-060 patch bypass. The Microsoft update tried to fix the vulnerability publicly known as "Sandworm". Platforms such as Windows Vista SP2...

MS14-060 Microsoft Windows OLE Package Manager Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS14-060 Microsoft Windows OLE Package Manager Code Execution", 'Description' = %q This module exploits a vulnerability found in...

Lime Survey 2-05+ Multiple Vulnerabilities

Lime Survey Multiple Vulnerabilities ======================================================================= ADVISORY INFORMATION Title: Lime Survey Multiple Vulnerabilities Discovery date: 02/07/2014 Release date: 03/07/2014 Vendor Homepage: www.limesurvey.org Version: Lime Survey 2.05+ Build...

Microsoft Extends SHA-2, TLS Support for Windows

One by one, tech companies have been tossing aside the SHA-1 cryptographic algorithm like the unreliable collision-prone mess that it is. Microsoft was among the first to steer its customers away from SHA-1 and established an internal edict that its developers would no longer use it for...