Ubuntu 10.04 LTS : linux-ec2 vulnerability (USN-1410-1)

Louis Rilling discovered a flaw in Linux kernel's clone command when CLONEIO is specified. An unprivileged local user could exploit this to cause a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenab...

E-Bay Clone Script -SEO CSRF

Exploit for php platform in category web applications Exploit Title: E-Bay Clone Script -SEO CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/ebay-clone-script-seo/31534/ Category:: webapps Demo : http://ebayclone.subtabz.com/admin Greetz: Inj3ct0r Exploit DataBas...

Ubuntu Update for linux USN-1389-1

Ubuntu Update for Linux kernel vulnerabilities USN-1389-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13891.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux USN-1389-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Linux Kernel Clone()函数 CLONE_IO多个拒绝服务漏洞

BUGTRAQ ID: 52152 CVE ID: CVE-2012-0879 Linux Kernel是Linux操作系统的内核。 Linux Kernel的实现上存在可影响clone系统调用的多个拒绝服务安全漏洞，可使本地用户造成拒绝服务 0 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Social Book Facebook Clone Script Cross Site Scripting

Exploit Title: Social Book Facebook Clone Script Reflected XSS Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE XSS can be done using the command input Vulnerable Page: signup.php lostpass.php login.php...

CVE-2010-4997

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action...

CVE-2010-4997

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action...

Sql injection

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action...

CVE-2010-4997

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action...

CVE-2010-4997

CVE-2010-4997 affects OlyKit Swoopo Clone 2010, specifically the index.php product action handling. The vulnerability is an SQL injection via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Multiple reputable sources (NVD entry, Red Hat advisory, PRION/NVD mirrors) ...

DSA-2321-1 moin - cross-site scripting

Bulletin has no description...

CVE-2010-4849

SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the esid parameter...

Sql injection

SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the esid parameter...

CVE-2010-4849

CVE-2010-4849 affects Alibaba Clone B2B 3.4, specifically the countrydetails.php component where the es_id parameter is vulnerable to SQL injection. The root cause is improper input handling that allows remote attackers to inject SQL commands, with potential impact on confidentiality, integrity, ...

CVE-2010-4849

SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the esid parameter...

Scriptlance Clone SQL Injection

Exploit Title: Scriptlance Clone SQL Injection Vulnerability Date: 21/07/2011 Author: Lazmania61 | Bug Researchers Demo : http://www.thewebcraft.com/scriptlanceclone Tested on: Windows 7 Greetz : HeRoTuRk ,Err0r , Darkknight , Bug Researchers Members...

kusaba x 0.9.1 - Multiple Vulnerabilities

kusaba x 0.9.1 - Multiple Vulnerabilities KusabaX XSS and CSRF Vulnerabilites Product: KusabaX and various Futaba channels clone Vendor site: http://kusabax.cultnet.net/ Affected versions: KusabaX " ----------------------------------------------------- Attackers can exploit these weaknesses to...

Ubuntu 9.10 / 10.04 LTS / 10.10 : linux, linux-ec2 vulnerabilities (USN-1041-1)

Ben Hawkes discovered that the Linux kernel did not correctly filter registers on 64bit kernels when performing 32bit system calls. On a 64bit system, a local attacker could manipulate 32bit system calls to gain root privileges. CVE-2010-3301 Dan Rosenberg discovered that the btrfs filesystem did...

Alibaba Clone B2B 3.4 SQL injection vulnerability-vulnerability warning-the black bar safety net

Alibaba Clone B2B is a B2B marketplace trading script, Alibaba Clone B2B 3.4 version of the countrydetails. php existsSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: Exploit Title:Alibaba v3. 4 clone b2bcountrydetails.php SQL Injection Vulnerability Date:...

Магические методы, сериализация, инъекции в сессию и все-все-все

==-1== Введение Изначально писал для себя, как небольшой сборник полезных идей, в итоге вылилось вот в такую статью. Особого опыта в написании публикаций у меня нет, так что ногами не пинать, я старался Перед переходом к практическим примерам рассмотрим теоретически основы используемых функций...