Free Realty v3.1-0.6 Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== Free Reality v3.1-0.6 - Multiple Web Vulnerabilities Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Free Realty is primarily designed for real estate agents and offices t...

Free Reality v3.1-0.6 - Multiple Web Vulnerabilities

Document Title: =============== Free Reality v3.1-0.6 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=513 Release Date: ============= 2012-05-06 Vulnerability Laboratory ID VL-ID: ==================================== 513...

CVE-2012-0730

Multiple cross-site request forgery CSRF vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2012-0730

Multiple cross-site request forgery CSRF vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

Citing Terms Of Service, Google Takes Down Blog Of Iranian Security Researcher

An Iranian man who revealed a vulnerability in a widely used point of sale POS system in Iran had his blog confiscated by Google, which cited violations of its Terms of Service. A Google spokesman acknowledged that the company pulled down the Blogger site that Khosrow Zarefarid, an Iranian IT...

Important: Red Hat Security Advisory: samba and samba3x security update

Updated samba3x and samba packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

正方教务管理系统web端补考成绩录入漏洞

简要描述： web端成绩录入可绕过密码验证录入补考成绩。 详细说明： 此漏洞与 WooYun: 正方教务管理系统web端成绩录入漏洞 类似。 web端在进行成绩录入时可以通过直接将动态页面从jscjmm.aspx修改为xfjsbkcjlr.aspx进行绕过，只要具有教师的登录权限，不需要验证成绩录入密码即可直接进入成绩的录入和提交页面。 我写了一个脚本用于测试我所在学校的教师账户，发现有几百个教师账户仍旧使用默认账户密码，如果通过此漏洞将造成巨大影响，我也准备将所收集的资料上报校方处理。 漏洞证明： 此漏洞与 WooYun: 正方教务管理系统web端成绩录入漏洞 类似，就不再截图证明了。...

Car Maker Nissan Admits To Virus Infection, Loss of Employee Accounts

Car maker Nissan became the latest high profile firm to acknowledge being hacked. The company issued a statement last week saying that it detected a virus infection on its network that resulted int he theft of employee login credentials from a company data store. The intrusion was detected on Apr...

Microsoft MSN Hotmail - Password Reset Vulnerability

Document Title: =============== Microsoft MSN Hotmail - Password Reset Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=529 Media Partners:...

Microsoft MSN Hotmail - Password Reset Vulnerability

Document Title: =============== Microsoft MSN Hotmail - Password Reset Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=529 Media Partners:...

Incomplete protection of Oracle Database locked accounts (CVE-2012-0510)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory Incomplete protection of Oracle Database locked accounts. Risk Level: Low Affected versions: Oracle Database Server version 10gR1, 10gR2 10.2.0.5 and previous patchsets and 11gR1 11.1.0.7 and previous patchsets...

Rootdabitch version 0.1 - Multithreaded Linux root password Bruteforcer

Rootdabitch version 0.1 - Multithreaded Linux root password Bruteforcer r00tw0rm hacker "th3breacher!" release Rootdabitch v0.1 ,which is a Multithreaded Linux/UNIX tool to brute-force cracking local root through su using sucrack. sucrack is a multithreaded Linux/UNIX tool for brute-force crackin...

Iranian Takes Credit For POS Hack That Spills Three Million Bank Accounts

An Iranian national exposed confidential account details for some three million bank accounts in that country, prompting warnings from banking officials. Khosrow Zare Farid acquired the account information using a vulnerability in a widely deployed Iranian point-of-sale POS system used by banks...

CVE-2011-3846

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

Code injection

The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2011-3846

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2011-3846

CVE-2011-3846 is a CSRF vulnerability in HP System Management Homepage (SMH) 6.2.2.7 that allows remote attackers to hijack administrator sessions and create new admin accounts. Affected component: SMH 6.2.2.7. Impact: partial confidentiality, integrity, and availability affected per CVSS2 vector...

Iran replacing Google, Hotmail with its own internal search engines and email services

Iran replacing Google, Hotmail with its own internal search engines and email services Iran has denied the report that it plans to cut itself off from the Internet. In a statement, the ministry said "The report is in no way confirmed by the ministry". It added that it was "completely baseless," a...

Koprana CMS SQL Injection

http://www.mediafire.com/?ij9rfpfw6s7uzxf for windows only / load exploits/webapp/omiworldinjection.php set HOST target set MODE 1 for admin accounts/2 for all accounts set FILE save format TXT/SQL exploit !KopranaInjection @ HOST = localhost = Target URL @ PORT = 80 = Target Port @ PATH = / = We...