9121 matches found
Satellite: information disclosure via manzier.pxt RPC script
manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key, which allows remote attackers to connect to the server and obtain sensitive information about user accounts and entitlements...
openSUSE 10 Security Update : moodle (moodle-5488)
Moodle was prone to a Cross-Site scripting flaw which could potentially be exploited to compromise arbitrary accounts CVE-2008-3326. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-5488...
PCI DSS compliance
Binary data pcicompliance.nbin...
openSUSE 10 Security Update : moodle (moodle-5487)
Moodle was prone to CSRF CVE-2008-3325 / XSS CVE-2008-3326 flaws which could potentially be exploited to compromise arbitrary accounts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
Pligg Auto-Voter Using XSS to Bypass CSRF Protection
Explanation: Pligg Suffers from a Reflective Cross Site Scripting vulnerability in index.php. For the $GET'category' variable. Exploit code was written that uses this flaw to bypass the CSRF protection to then vote on any pligg article of the attackers choosing. I took inspiration from the Myspac...
E-topbiz Dating 3 PHP Script (mail_id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================================= E-topbiz Dating 3 PHP Script mailid Remote SQL Injection Vulnerability =========================================================================...
Default configuration
The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a 1 locked or 2 expired account by entering the account name on the command line, related to improper use of the pamsucceedif.so module...
Greatclone GC Auction Platinum - category.php SQL Injection
Greatclone GC Auction Platinum - category.php SQL Injection source: https://www.securityfocus.com/bid/30389/info GC Auction Platinum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
phpfootball-sql.txt
Viva IslaM Viva IslaM Remote SQL injection Vulnerability PHPFootball 1.6 show.php dbtable AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...
smartppc-sql.txt
+---------------------------------------+ | Blind SQL Injection Vulnerability | | in Pay Per Click Script | | found by Hamtaro aka CorVu5 | |there must be 50 ways to learn to hover| +---------------------------------------+ gdork: "Pay Per Click Script powered by SmartPPC.com." vuln:...
Maxtrade AIO 1.3.23 (categori) Remote SQL Injection Vulnerability
No description provided by source. Remote SQL Injection Maxtrade AIO 1.3.23 ... HaCkerEgy Contact : [email protected] Home : pal-hacker.com & atsdp.com =============================================== Script : Maxtrade Version : 1.3.23 Download : http://softdivision.com...
Maxtrade AIO 1.3.23 (categori) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= Maxtrade AIO 1.3.23 categori Remote SQL Injection Vulnerability ================================================================= Remote SQL Injection Maxtrade AIO 1.3.23...
DCFM Blog 0.9.4 (comments) Remote SQL Injection Vulnerability
No description provided by source. / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | ...
The decomposition of the back door to check the heart-to build antivirus PASS Backdoor-vulnerability warning-the black bar safety net
In the security concept of growing today, want to get a station of their own chickens is easy, if say because the administrator found himself left in the broiler on the back door account and lead to broiler missing words, that is the world the most painful thing, I believe everyone will not want...
Code injection
admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts...
CVE-2008-2488
admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts...
CVE-2008-2488
CVE-2008-2488 affects RoomPHPlanning 1.5. The issue is in admin/userform.php, where no administrative credentials are required, allowing remote authenticated users to create new admin accounts. This is the root cause and directly leads to privilege escalation within the application. The available...
CVE-2008-2488
admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts...
CVE-2008-2348
The CVE-2008-2348 entry describes a vulnerability in MeltingIce File System 1.0 where remote attackers can bypass authentication and perform administrative actions (create new user accounts and exceed application quotas) via a direct request to admin/adduser.php. The associated data indicate netw...
Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit (ruby)
No description provided by source. !/usr/bin/ruby Debian SSH Key Tester L4teral l4teral at gmail com This tool helps to find user accounts with weak SSH keys that should be regenerated with an unaffected version of openssl. You will need the precalculated keys provided by HD Moore...