CVE-2010-5033

creationtimestamp| type| source ---|---|--- 2010-05-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12786...

Eremetia (news.php and faq2.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ Eremetia news.php and faq2.php SQL Injection Vulnerability ============================================================...

MidWeb CMS (top.asp) XSS Vulnerability

Exploit for php platform in category web applications ====================================== MidWeb CMS top.asp XSS Vulnerability ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...

ddrLPD 1.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/39904/info ddrLPD is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. ddrLPD 1.0 is vulnerable; other versions may also be affected...

CVE-2010-1583

creationtimestamp| type| source ---|---|--- 2010-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12452...

MYRE Classified SQL Injection

MYRE Classified SQL injection vulnerability - cat Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : January 29, 2010 Software Information + Vendor : http://myrephp.com/ + Download : - + version : - + Vulnerability : SQL injection + Dork : "syalalala" + Price :...

EMC ApplicationXtender (KeyWorks) ActiveX Control Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'EMC...

WS-FTP Server 5.03 MKD Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'WS-FTP Serve...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-6347)

Mozilla Thunderbird was updated to the 2.0.0.22 security release. It fixes various bugs and security issues : - MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304 CVE-2009-1305 Crashes with evidence of memory corruption rv:1.9.0.9 - MFSA 2009-17/CVE-2009-1307 bmo481342 Same-origin violations...

PT-2009-5742 · Bakbone · Bakbone Netvault Backup

Name of the Vulnerable Software and Affected Versions: BakBone NetVault Backup version 8.22 Build 29 Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This can be achieved by sending a packet to either TCP or UDP port 20031 with a large valu...

Kaspersky AV 2010 9.0.0.463 Local DoS

Exploit for unknown platform in category dos / poc ===================================== Kaspersky AV 2010 9.0.0.463 Local DoS ===================================== Title: Kaspersky AV 2010 9.0.0.463 Local DoS CVE-ID: OSVDB-ID: Author: Heurs Published: 2009-09-29 Verified: yes view source print?...

Linux Kernel < 2.6.31-rc7 AF_IRDA 29-Byte Stack Disclosure Exploit

No description provided by source. / cve-2009-3002.c Linux Kernel 2.6.31-rc7 AFIRDA getsockname 29-Byte Stack Disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3002 The Linux kernel before 2.6.31-rc7 does not...

Unfixed XSS vulnerability at www.clal.it

Security researcher Dark.Man, has submitted on 29/08/2009 a cross-site-scripting XSS vulnerability affecting www.clal.it, which at the time of submission ranked 2009744 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/05/2010. It is currently...

CMS Made Simple <= 1.6.2 Local File Disclosure Vulnerability

No description provided by source. CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download:...

PaymentProcessorScript SQL Injection

/ PaymentProcessorScript cid Remote SQL Injection Vulnerability Discovered by : MizoZ Contact : [email protected] Team : EvilWay Date : July 29 2009 Greetings : Moudi , Zuka, All friends / SQL Injection shop.php GET : cid : HOST/PATH/shop.php?cid=SQL CODE SQL CODE : -1+union+select+1,2,version-- Ex :...

Softbiz Dating Script SQL Injection

/ SOFTBIZ Dating Script cid Remote SQL Injection Vulnerability Discovered by : MizoZ Contact : [email protected] Date : July 29 2009 Greetings : Moudi , Zuka, All friends / SQL Injection catproducts.php GET : cid : HOST/PATH/catproducts.php?cid=SQL INJ SQL INJ : -1+union+select+1,2,3,4,5--...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1000)

The Mozilla Firefox browser was updated to version 3.0.11, fixing various bugs and security issues : - MFSA 2009-24/CVE-2009-1392/CVE-2009-1832/CVE-2009-1833 Crashes with evidence of memory corruption rv:1.9.0.11 - MFSA 2009-25/CVE-2009-1834 bmo479413 URL spoofing with invalid unicode characters ...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-1091)

Mozilla Thunderbird was updated to the 2.0.0.22 security release. It fixes various bugs and security issues : - MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304 CVE-2009-1305 Crashes with evidence of memory corruption rv:1.9.0.9 - MFSA 2009-17/CVE-2009-1307 bmo481342 Same-origin violations...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1000)

The Mozilla Firefox browser was updated to version 3.0.11, fixing various bugs and security issues : - MFSA 2009-24/CVE-2009-1392/CVE-2009-1832/CVE-2009-1833 Crashes with evidence of memory corruption rv:1.9.0.11 - MFSA 2009-25/CVE-2009-1834 bmo479413 URL spoofing with invalid unicode characters ...

Unfixed XSS vulnerability at www.sipc.org

Security researcher LostBrilliance, has submitted on 29/06/2009 a cross-site-scripting XSS vulnerability affecting www.sipc.org, which at the time of submission ranked 622727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2009. It is...