JBLOG 1.5.1 - SQL Table Backup

JBLOG 1.5.1 - SQL Table Backup !/usr/bin/perl =about VENDOR JBLOG 1.5.1 maybe earlier versions vulnerable too http://www.lisijie.org AUTHOR discovered & written by Ams ax330d doggy gmail dot com http://www.0x416d73.name/ VULNERABILITY DESCRIPTION Both 'index.php' and 'admin.php' includes file...

JBLOG 1.5.1 Remote SQL Table Backup Exploit

Exploit for unknown platform in category web applications =========================================== JBLOG 1.5.1 Remote SQL Table Backup Exploit =========================================== !/usr/bin/perl =about VENDOR JBLOG 1.5.1 maybe earlier versions vulnerable too http://www.lisijie.org AUTHO...

CMS Made Simple <= 1.6.2 Local File Disclosure Vulnerability

No description provided by source. CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download:...

Arab Portal 2.2 SQL Injection

!/usr/bin/ruby ============================================= Arab Portal v2.2 Exploit , Blind SQL Injection / Authentication Bypass Discovered & written by: Jafer Al-Zidjali Email: [email protected] Website: www.scorpionds.com ============================================= require "net/http"...

CMS Made Simple <= 1.6.2 Local File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ CMS Made Simple = 1.6.2 Local File Disclosure Vulnerability ============================================================ CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009...

Arab Portal 2.2 - Blind Cookie Authentication Bypass

Arab Portal 2.2 - Blind Cookie Authentication Bypass !/usr/bin/ruby ============================================= Arab Portal v2.2 Exploit , Blind SQL Injection / Authentication Bypass Discovered & written by: Jafer Al-Zidjali Email: [email protected] Website: www.scorpionds.com...

DEBIAN-CVE-2009-2463

Multiple integer overflows in the 1 PLBase64Decode and 2 PLBase64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service memory corruption and application crash...

Mozilla Base64 decoding crash

Multiple integer overflows in the 1 PLBase64Decode and 2 PLBase64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service memory corruption and application crash...

Mozilla Base64 decoding crash

Multiple integer overflows in the 1 PLBase64Decode and 2 PLBase64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service memory corruption and application crash...

openSUSE Security Update : glib2 (glib2-815)

Large strings could lead to a heap overflow in the base64 encoding and decoding functions. Attackers could potentially exploit that to execute arbitrary code CVE-2008-4316. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : glib2 (glib2-815)

Large strings could lead to a heap overflow in the base64 encoding and decoding functions. Attackers could potentially exploit that to execute arbitrary code CVE-2008-4316. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

GLSA-200907-09 : Cyrus-SASL: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-09 Cyrus-SASL: Execution of arbitrary code James Ralston reported that in certain situations, Cyrus-SASL does not properly terminate strings which can result in buffer overflows when performing Base64 encoding. Impact : A...

Cyrus-SASL: Execution of arbitrary code

Background Cyrus-SASL is an implementation of the Simple Authentication and Security Layer. Description James Ralston reported that in certain situations, Cyrus-SASL does not properly terminate strings which can result in buffer overflows when performing Base64 encoding. Impact A remote...

USN-790-1: Cyrus SASL vulnerability

James Ralston discovered that the Cyrus SASL base64 encoding function could be used unsafely. If a remote attacker sent a specially crafted request to a service that used SASL, it could lead to a loss of privacy, or crash the application, resulting in a denial of service...

Kasseler CMS File Disclosure / XSS

X X X X A K KK NN N EEEEEE TTTTTTTT X X A A K K N N N E TT XX AAAAA KK N N N EEE TT X X A A K K N N N E TT X X A A K KK N NN EEEEEE TT X X Author: Sr1pt - xaknet.ru GreetZ to all users xaknet.ru, especial: baltazar, Saint, X1mer@, Trash, Ic3, G1yuk, NEXGEN, ErrNick, deface and other .. Kasseler-C...

Kasseler CMS (FD/XSS) Multiple Remote Vulnerabilities

No description provided by source. X X X X A K KK NN N EEEEEE TTTTTTTT X X A A K K N N N E TT XX AAAAA KK N N N EEE TT X X A A K K N N N E TT X X A A K KK N NN EEEEEE TT X X Author: Sr1pt - xaknet.ru GreetZ to all users xaknet.ru, especial: baltazar, Saint, X1mer@, Trash, Ic3, G1yuk, NEXGEN,...

Cross site scripting

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

CVE-2009-2119

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

CVE-2009-2119: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

Free Download Manager 2.5/3.0 (Control Server) Remote BOF Exploit

No description provided by source. !/usr/bin/python Usage : fdm.py victimeip Bug : Free Download Manager 2.5/3.0 Control Server Remote BOF Exploit Fix : update Founder : Praveen Darshanam Tested on : Xp sp3 en Exploited by : His0k4 Greetings : All friends & muslims HaCkErs DZ import sys, socket...