Solaris 9 (sparc) : 117586-22

IS 6.1: Sun ONE Identity Server. Date this patch was last updated by Sun : Jan/17/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

ipswitch61-overflow.txt

IpSwitch WSFTPSERVER with SSH remote Buffer Overflow Website:http://www.wsftp.com/products/wsftpserver/ Version:6.1.0.0 last one,others might be vuln too Bug: Remote Buffer Overflow CD 8e8.a78: Access violation - code c0000005 first chance First chance exceptions are reported before any exception...

GLSA-200801-22 : PeerCast: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200801-22 PeerCast: Buffer overflow Luigi Auriemma reported a heap-based buffer overflow within the 'handshakeHTTP' function when processing HTTP requests. Impact : A remote attacker could send a specially crafted request to the...

aflog 1.01 comments.php XSS / SQL Injection Vulnerability

No description provided by source. Name: aflog 1.01 and possibly earlier Webiste: http://aflog.org/ Vulnerability type: SQL Injection comments.php and XSS Author: shinmai, 2008-01-22 Description: SQL INJECTION: SQL injection is possible in comments.php for the GET variable 'id', like this:...

TutorialCMS 1.02 (userName) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = 'SSV-7841' vul ID version = '1' author = 'hh' vulDate = '2008-01-12' createDate =...

MMSLamp (idpro) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== MMSLamp idpro Remote SQL Injection Vulnerability ================================================== Name : mmsLamp SQL Injection Vulnerability. Author : x0kster Date : 22/12/2007 Bug in :...

Wordpress Plugin PictPress <= 0.91 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Wordpress Plugin PictPress = 0.91 Remote File Disclosure Vulnerability ======================================================================= Wordpress Plugin PictPre...

VigileCMS &lt;= 1.8 Stealth Remote Command Execution Exploit

No description provided by source. !/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit. 22/10/2007...

Unfixed XSS vulnerability at www.levhayaar.co.il

Security researcher CCC, has submitted on 22/11/2007 a cross-site-scripting XSS vulnerability affecting www.levhayaar.co.il, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently...

Unfixed XSS vulnerability at fedho.com

Security researcher Uber0n, has submitted on 22/11/2007 a cross-site-scripting XSS vulnerability affecting fedho.com, which at the time of submission ranked 250260 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...

Oracle 10g - LT.FINDRICSET SQL Injection (IDS Evasion)

Oracle 10g - LT.FINDRICSET SQL Injection IDS Evasion // / Oracle 10g LT.FINDRICSET SQL Injection Exploit / // / sploit grant DBA to scott / / evil cursor injection / / No "create procedure" privileg needed! / / + Funny IDS evasion vith base64 / // / tested on oracle 10.1.0.2.0 / // // / Date of...

Litespeed Web Server 3.2.3 - Source Code Disclosure

Litespeed Web Server 3.2.3 - Source Code Disclosure | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats...

Unfixed XSS vulnerability at ccnet.utoronto.ca

Security researcher kusomiso.com, has submitted on 22/10/2007 a cross-site-scripting XSS vulnerability affecting ccnet.utoronto.ca, which at the time of submission ranked 3058 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007. It is...

Solaris 9 (x86) : 115554-26

SunOS 5.9x86: USB Drivers and Framework Patch. Date this patch was last updated by Sun : Jun/22/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (x86) : 125438-22

Oracle iPlanet Web Server 7.0.12 Solarisx86: Update Release patch. Date this patch was last updated by Sun : Aug/26/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 125437-22

Oracle iPlanet Web Server 7.0.12 Solaris: Update Release patch. Date this patch was last updated by Sun : Aug/19/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 8 (sparc) : 125437-22

Oracle iPlanet Web Server 7.0.12 Solaris: Update Release patch. Date this patch was last updated by Sun : Aug/19/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Unfixed XSS vulnerability at md5encryption.com

Security researcher Uber0n, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting md5encryption.com, which at the time of submission ranked 308707 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is...

Unfixed XSS vulnerability at www.everyclick.com

Security researcher kusomiso.com, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting www.everyclick.com, which at the time of submission ranked 22828 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at www.linkz.net

Security researcher Babaconda, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting www.linkz.net, which at the time of submission ranked 271309 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is current...