[SECURITY] Fedora 12 Update: drupal-6.16-1.fc12

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

Kusaba X <= 0.9 XSS/CSRF vulnerabilities

========================================== Kusaba X = 0.9 XSS/CSRF vulnerabilities ========================================== Kusaba X suffers XSS and CSRF vulnerabilities that would allow an attacker to take over the web application and possibly the entire server depending on the MySQL...

Joomla Component com_communitypolls LFI Vulnerability

No description provided by source. !===========================================================================! Joomla Component comcommunitypolls LFI Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 16 February, 2010...

Code injection

Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by appending them to a request to update the SNMP public community string...

Joomla Component com_communitypolls LFI Vulnerability

Exploit for unknown platform in category web applications ===================================================== Joomla Component comcommunitypolls LFI Vulnerability ===================================================== !===========================================================================!...

Joomla Community Polls Local File Inclusion

!===========================================================================! Joomla Component comcommunitypolls LFI Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 16 February, 2010...

CoffieNet CMS Administrative Bypass

======================================================================================== | Title : CoffieNet CMs By Pass Admin Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Site :...

ULoki Community Forum 2.1 - usercp.php Cross-Site Scripting

ULoki Community Forum 2.1 - usercp.php Cross-Site Scripting Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : ...

ULoki Community Forum 2.1 - 'usercp.php' Cross-Site Scripting

Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' \ / | | | / | ' / | | | | | | | | |...

Secunia Research: Microsoft PowerPoint File Path Handling Buffer Overflow

====================================================================== Secunia Research 09/02/2010 - Microsoft PowerPoint File Path Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Window Snyder

Window occupies an entirely unique place in the security community. Sure, being a woman in the security community is rare enough. But she also commands a lot of respect in this ultra-competitive world, having helped develop Microsoft’s threat modeling process, worked as a security architect at...

Opera 10.10 Remote Code Execution DoS Exploit

No description provided by source. !/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description : Opera Web Browser is vulnerable DoS within its javascript tags alert This issue can be exploited by using a large value in a alert tags to create an...

Opera Denial Of Service

!/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description : Opera Web Browser is vulnerable DoS within its javascript tags alert This issue can be exploited by using a large value in a alert tags to create an out-of-bounds memory access This have in...

Google Attack Was Tip of the Iceberg

The recent disclosure by Google, Adobe and other companies that their networks had been thoroughly compromised by attackers who may have been after their source code has prompted a tremendous amount of discourse both in the security community and in the general public about the political and...

Opera 10.10 - Remote Code Execution Denial of Service

!/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description : Opera Web Browser is vulnerable DoS within its javascript tags alert This issue can be exploited by using a large value in a alert tags to create an out-of-bounds memory access This have in...

[InterN0T] ShareTronix 1.0.4 - HTML Injection Vulnerability

ShareTronix - HTML Injection Vulnerability Version Affected: 1.0.4 newest Info: Sharetronix Opensource is a multimedia microblogging platform. It helps people in a community, company, or group to exchange short messages over the Web. Credits: MaXe from InterN0T patched the vulnerability & Reelix...

S.O.M.P.L. Player 1.0 Buffer Overflow

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

DataLife Engine 8.3 Remote File Inclusion

======================================================================================== | Title : DataLife Engine 8.3 RFI Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home :...

VaroCMS Community Voting Web 2.0 XSS

Exploit Title: VaroCMS: Community Voting Web2.0 CMS XSS & Open Redirection Date: 22/12/2009 Author: cp77fk4r | Empty0pagEShift+2gmail.com Version: VaroCMS: Community Voting Web2.0 CMS Cross Site Scripting http://www.varocms.com/demo/search?q=XSS Open Redirection...

XSS Vulnerability in Drupal's Node Blocks contributed module (6.x-1.3 and 5.x-1.1)

XSS Vulnerability in Drupal's Node Blocks contributed module 6.x-1.3 and 5.x-1.1 Discovered by Martin Barbella [email protected] Description of Vulnerability: ----------------------------- Drupal is a free software package that allows an individual or a community of users to easily publish,...