SuSE9 Security Update : IBM Java 1.5.0 (YOU Patch Number 12623)

This update of IBM Java 1.5.0 to SR11 FP2 to fixes the following security issues : - Various unspecified and undocumented vulnerabilities that allows remote attackers to affect confidentiality, integrity and availability via various unknown vectors. CVE-2010-0084, CVE-2010-0085, CVE-2010-0087,...

Bugzilla 'time-tracking' Information Disclosure Vulnerability

Bugzilla is prone to an information-disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. This issue affects the following: Bugzilla 2.17.1 through 3.2.6 Bugzilla 3.3.1 through 3.4.6 Bugzilla 3.5.1 through 3.6 Bugzilla 3....

Microsoft IIS 5.0 - Authentication Bypass (MS10-065)

Microsoft IIS 5.0 - Authentication Bypass MS10-065 MS10-065 - Directory Authentication Bypass Vulnerability Description: This vulnerability is because of using Alternate Data Stream to open a protected folder. All of IIS authentication methods can be circumvented. In this technique, we can add a...

Interscan Web Security 5.0 - Persistent Cross-Site Scripting

Interscan Web Security 5.0 - Persistent Cross-Site Scripting Exploit Title: Permanent XSS in InterScan Web Security Virtual Appliance 5.0 Author: Ivan Huertas Software Link: http://downloadcenter.trendmicro.com/index.php?clk=tbl&clkval=249&regs=NABU&langloc=1 Version: 5.0 Tested on: Red Hat Nash...

BBSGood论坛程序labelsave.asp页面SQL注入漏洞

BBSGOOD是国内首创使用缓存技术的论坛，BBSGOOD的帖子和列表首页是可以生成静态HTML文件的。 在文件labelsave.asp中： sql="select top 1 Admin,UserName,Password from BBSGoodAdmin where UserName='"&Request.Cookiesbbsinfo&"adminuser"&"' " //第115行 程序没有验证用户是否登陆，导致cookies的值没有过滤而产生注入漏洞。 BBSGood 5.0/5.0.2 厂商补丁： BBSGood.Speed -------...

Job Search Engine Script SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Job Search Engine Script - SQL Injection

Job Search Engine Script - SQL Injection 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Job Search Engine Script SQL Injection Vendor...

Job Search Engine Script SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== Job Search Engine Script SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

BBSGood论坛程序indexedit.asp页面SQL注入漏洞

在文件indexedit.asp中： sql="select top 1 Admin,UserName,Password from BBSGoodAdmin where UserName='"&Request.Cookiesbbsinfo&"adminuser"&"' " //第484行 Set rs = Server.CreateObject"ADODB.Recordset" 程序没有验证用户是否登陆，导致cookies的值没有过滤而产生注入漏洞 BBSGood 5.0/5.0.2 厂商补丁： BBSGood.Speed -------...

Microsoft IIS 5.0 - IDQ Path Overflow (MS01-033) (Metasploit)

$Id: ms01033idq.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Full Site For Restaurant SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Full Site for Restaurant SQL Injection Vulnerability Vendor url:http://www.mformula.com.br/ Version:n/a Price:100$ Published: 2010-06-11 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW & AH member...

Restaurant SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================== Restaurant SQL Injection Vulnerability ====================================== Author: L0rd CrusAd3r aka VSN email protected Exploit Title: Full Site for Restaurant SQL Injection Vulnerability Vendor...

Safari 5.0 Remote Buffer OverFlow/Pc Memory Overload

Exploit for windows platform in category dos / poc ==================================================== Safari 5.0 Remote Buffer OverFlow/Pc Memory Overload ==================================================== Title:Safari 5.0 Remote Buffer OverFlow/Pc Memory Overload EDB-ID: CVE-ID: OSVDB-ID:...

Full Site for Restaurant - SQL Injection

Vendor url:http://www.mformula.com.br/ Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW & AH members. Spl Greetz to:inj3ct0r.com Team Description: Full Site for Restaurant SQL Injection Vulnerability Internal system for total administration of the site, Available...

Full Site for Restaurant - SQL Injection

Full Site for Restaurant - SQL Injection Vendor url:http://www.mformula.com.br/ Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW & AH members. Spl Greetz to:inj3ct0r.com Team Description: Full Site for Restaurant SQL Injection Vulnerability Internal system for tot...

Debian: Security Advisory (DSA-2057-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392)

About the security content of Safari 5.0 and Safari 4.1 Last Modified: June 07, 2010 Article: HT4196 Email this article Print this page Summary This document describes the security content of Safari 5.0 and Safari 4.1. For the protection of our customers, Apple does not disclose, discuss, or...

Debian DSA-2057-1 : mysql-dfsg-5.0 - several vulnerabilities

Several vulnerabilities have been discovered in the MySQL database server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1626 MySQL allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in...

[SECURITY] [DSA 2057-1] New mysql-dfsg-5.0 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2057-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano June 07, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2057-1] New mysql-dfsg-5.0 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2057-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano June 07, 2010 http://www.debian.org/security/faq -...