PenPals - Authentication Bypass

PenPals - Authentication Bypass Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: PenPals Authentication Bypass Vendor url:http://www.anblik.com Version:1.0 Price:1200$ Published: 2010-06-17 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW members...

2daybiz Network Community Script SQL Injection / XSS Vulnerability

Exploit for php platform in category web applications ================================================================== 2daybiz Network Community Script SQL Injection / XSS Vulnerability ==================================================================...

Joomla VideoWhisper 2 Way Video Chat Cross Site Scripting

====================================================== Joomla VideoWhisper 2 Way Video Chat XSS Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

Joomla VideoWhisper 2 Way Video Chat XSS Vulnerability

Exploit for php platform in category web applications ====================================================== Joomla VideoWhisper 2 Way Video Chat XSS Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

CVE-2010-2256

Multiple cross-site scripting XSS vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/memberviewdetails.php and the 2 model parameter to videos.php...

CVE-2010-2257

SQL injection vulnerability in indexie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in indexie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-2257

Pay Per Minute Video Chat Script 2.0/2.1 suffers a SQL injection in index_ie.php via the page parameter, allowing remote attackers to execute arbitrary SQL commands. The CVE entry lists this vulnerability with a high base score (7.5) under NVD metrics. Exploitation details (specific proofs-of-con...

CVE-2010-2256

Pay Per Minute Video Chat Script 2.0 and 2.1 are affected by CVE-2010-2256, a cross-site scripting (XSS) vulnerability. The issue arises from user-supplied input in two parameters: the id parameter to admin/memberviewdetails.php and the model parameter to videos.php. Exploitation would allow remo...

phpBazar 2.1.1 Remote File Inclusion

Title: phpBazar V2.1.1 stable rfi Vulnerability Author: Sid3^effects Published: 2010-06-03 Verison: 2.1.1 stable vendor: SmartISoft ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888 888.8' 888.8' 888 88b ooo 888' 888' o888o...

Spyware Found on 3 Major Mac Download Sites

A spyware application that surreptitiously scans chat logs and hard drives of unsuspecting Mac users has found its way onto three of the more popular download sites, said security researchers. Read the full article. The Register...

BlaB! Lite <= 0.5 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ====================================================== BlaB! Lite == 0.5 Remote File Inclusion Vulnerability ====================================================== + Script : Chat Scripts » BlaB! Lite: +...

MOPS-2010-018: EFront ask_chat chatrooms_ID SQL Injection Vulnerability

MOPS-2010-018: EFront askchat chatroomsID SQL Injection Vulnerability May 9th, 2010 A preauth SQL injection vulnerability was discovered in the chat feature of EFront that allows retrieving all data from the database by simple URL manipulation. Affected versions Affected is EFront = 3.6.2 Credits...

Mandriva Update for pidgin MDVSA-2010:085 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVSA-2010:085 pidgin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

QQ input state of vulnerability, let your friends die in the gentle greeting-vulnerability warning-the black bar safety net

Another year of spring, is the old man I haven't come to the BLOG inside. something. Remember last year's early fall back to the old place, a value of the taken place, to hold out something to the place. The discovery of this vulnerability after the really ruthless himself did not add a twist to...

CentOS Update for seamonkey CESA-2010:0333 centos4 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0333 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CentOS 3 / 4 : seamonkey (CESA-2010:0333)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CentOS Update for seamonkey CESA-2010:0333 centos3 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0333 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Design/Logic Flaw

iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type...

Skype - URI Handler Input Validation

No description provided by source. Description The Windows Skype client implements two URI handlers, Skype: and Skype-Plugin. Both handlers allow for easy browser integration and are supported by all modern browsers. When a Skype link is clicked, the Skype.exe process is spawned with the /URI:...