TutorialCMS 1.02 (userName) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = 'SSV-7841' vul ID version = '1' author = 'hh' vulDate = '2008-01-12' createDate =...

MMSLamp (idpro) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== MMSLamp idpro Remote SQL Injection Vulnerability ================================================== Name : mmsLamp SQL Injection Vulnerability. Author : x0kster Date : 22/12/2007 Bug in :...

Wordpress Plugin PictPress <= 0.91 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Wordpress Plugin PictPress = 0.91 Remote File Disclosure Vulnerability ======================================================================= Wordpress Plugin PictPre...

VigileCMS &lt;= 1.8 Stealth Remote Command Execution Exploit

No description provided by source. !/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit. 22/10/2007...

Unfixed XSS vulnerability at fedho.com

Security researcher Uber0n, has submitted on 22/11/2007 a cross-site-scripting XSS vulnerability affecting fedho.com, which at the time of submission ranked 250260 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...

Unfixed XSS vulnerability at www.levhayaar.co.il

Security researcher CCC, has submitted on 22/11/2007 a cross-site-scripting XSS vulnerability affecting www.levhayaar.co.il, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently...

Oracle 10g - LT.FINDRICSET SQL Injection (IDS Evasion)

Oracle 10g - LT.FINDRICSET SQL Injection IDS Evasion // / Oracle 10g LT.FINDRICSET SQL Injection Exploit / // / sploit grant DBA to scott / / evil cursor injection / / No "create procedure" privileg needed! / / + Funny IDS evasion vith base64 / // / tested on oracle 10.1.0.2.0 / // // / Date of...

Litespeed Web Server 3.2.3 - Source Code Disclosure

Litespeed Web Server 3.2.3 - Source Code Disclosure | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats...

Unfixed XSS vulnerability at ccnet.utoronto.ca

Security researcher kusomiso.com, has submitted on 22/10/2007 a cross-site-scripting XSS vulnerability affecting ccnet.utoronto.ca, which at the time of submission ranked 3058 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007. It is...

Solaris 9 (x86) : 125438-22

Oracle iPlanet Web Server 7.0.12 Solarisx86: Update Release patch. Date this patch was last updated by Sun : Aug/26/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 8 (sparc) : 125437-22

Oracle iPlanet Web Server 7.0.12 Solaris: Update Release patch. Date this patch was last updated by Sun : Aug/19/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 125437-22

Oracle iPlanet Web Server 7.0.12 Solaris: Update Release patch. Date this patch was last updated by Sun : Aug/19/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (x86) : 115554-26

SunOS 5.9x86: USB Drivers and Framework Patch. Date this patch was last updated by Sun : Jun/22/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Unfixed XSS vulnerability at www.linkz.net

Security researcher Babaconda, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting www.linkz.net, which at the time of submission ranked 271309 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is current...

Unfixed XSS vulnerability at www.everyclick.com

Security researcher kusomiso.com, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting www.everyclick.com, which at the time of submission ranked 22828 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at md5encryption.com

Security researcher Uber0n, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting md5encryption.com, which at the time of submission ranked 308707 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is...

Unfixed XSS vulnerability at www.floorball-shop.eu

Security researcher www.r3t.n3t.nl, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting www.floorball-shop.eu, which at the time of submission ranked 8546178 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007...

Unfixed XSS vulnerability at www.marsflag.com

Security researcher kusomiso.com, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting www.marsflag.com, which at the time of submission ranked 93196 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is...

Fedora Core 6 : krb5-1.5-22.fc6 (2007-690)

This update incorporates fixes for a stack overflow in the rpcsecgss implementation in libgssrpc CVE-2007-3999 and a potential write through an uninitialized pointer in kadmind CVE-2007-4000. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Overflow Exploit

Exploit for unknown platform in category remote exploits =============================================================== Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Overflow Exploit =============================================================== / Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote...