TeamSHATTER Security Advisory: Oracle Enterprise Manager vulnerable to XSS (metricDetail$type page)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory Oracle Enterprise Manager vulnerable to Cross-site scripting metricDetail$type page July 26, 2011 Risk Level: Medium Affected versions: Oracle Enterprise Manager Grid Control versions 10.1.0.6, 10.2.0.5 Oracle Enterprise...

VLC Media Player '.AVI' File BOF Vulnerability (Linux)

The host is installed with VLC Media Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayeravibofvulnlin.nasl 7052 2017-09-04 11:50:51Z teissa $ VLC Media Player '.AVI' File BOF Vulnerability Linux Authors: Madhuri D Copyright: Copyright c 2011...

OpenX Ad Server 2.8.7 Cross Site Request Forgery

Exploit for php platform in category web applications ======================================================================= Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed version: N/A Impact: High Homepage:...

Synergy Software - id SQL Injection

Synergy Software - id SQL Injection source: https://www.securityfocus.com/bid/48835/info Synergy Software is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...

AJ Classifieds - listingid SQL Injection

AJ Classifieds - listingid SQL Injection source: https://www.securityfocus.com/bid/48702/info AJ Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Joomla! Component com_hospital - SQL Injection

source: https://www.securityfocus.com/bid/48689/info The 'comhospital' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Pandora Fms 3.2.1 - Cross-Site Request Forgery

Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1 Tested on: v = Pandora XSRF exploit Click submit input...

Gilnet News - read_more.php SQL Injection

Gilnet News - readmore.php SQL Injection source: https://www.securityfocus.com/bid/48966/info Gilnet News is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Sony Hiring Information Security Engineers & Facebook Hire George Hotz

Sony Hiring Information Security Engineers After 14 Hacks, Finally Sony open job recruitment for "Sr Application Security Analyst". Sony Estimates 171 Million Dollar Loss due to PSN Hack. Also Sony CEO sorry for PSN hack, offers data theft insurance. Social network Facebook has hired a computer...

Sony Hiring Information Security Engineers & Facebook Hire George Hotz

Sony Hiring Information Security Engineers After 14 Hacks, Finally Sony open job recruitment for "Sr Application Security Analyst ". Sony Estimates 171 Million Dollar Loss due to PSN Hack. Also Sony CEO sorry for PSN hack, offers data theft insurance. Social network Facebook has hired a computer...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Nibbleblog 3 - Multiple SQL Injections

Nibbleblog 3 - Multiple SQL Injections source: https://www.securityfocus.com/bid/48339/info Nibbleblog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an...

Tele Data Contact Management Server Directory Traversal Vulnerability

The host is running Tele Data Contact Management Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbteledatacontactmanagementserverdirtravvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Tele Data Contact Management Server Directory Traversal Vulnerability...

Oracle HTTP Server XSS Header Injection

Exploit for multiple platform in category web applications Attack Pattern ID : CAPEC-86 CWE ID : CI-79 OWASP IDs : A1-Injections, A2-Cross Site Scripting XSS CVE ID : not yet Related CVEs : CVE-2006-3918, CVE-2007-0275 A.K.A : Unfiltered Header Injection Product Type : Application Vendor : Oracle...

9 9 5 9 shop system v5. 0 Blind SQL injection-vulnerability warning-the black bar safety net

Author: stuffy bean ? php printr' +---------------------------------------------------------------------------+ 9 9 5 9 shop system v5. 0 Blind SQL injection exploit by mendou Official website: www.9959shop.com +---------------------------------------------------------------------------+ '; if...

AlegroCart <= 1.2. x (category_next) blind defect and repair-vulnerability warning-the black bar safety net

Title : AlegroCart = 1.2. x categorynext Blind SQL Injection Vulnerability Author : KedAns-Dz E-mail : [email protected] [email protected] | [email protected] Home : HMD/AM 30008/04300 - Algeria -0 0 2 1 3 5 5 5 2 4 8 7 0 1 Web Site : www.1337day.com www.exploit-id.com www.09exploit.com Twitte...

ApPHP Shopping Cart <= XSRF (Change Admin Password)

Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...

Gadu-Gadu 10.5 - Remote Code Execution

Gadu-Gadu 10.5 - Remote Code Execution source: https://www.securityfocus.com/bid/48030/info Gadu-Gadu is prone to a remote code-execution vulnerability. Successful exploits will allow remote attackers to execute arbitrary code within the context of the affected application. Gadu-Gadu 10.5 is...

Joomla! Component com_shop - SQL Injection

source: https://www.securityfocus.com/bid/47971/info The 'comshop' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Arachni v.0.2.3 - Open Source Web Application Security Scanner Framework

Arachni v.0.2.3 - Open Source Web Application Security Scanner Framework Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.Arachni is smart, it trains itself by learning from...