4752 matches found
[SECURITY] Fedora 12 Update: slim-1.3.1-9.fc12
SLiM Simple Login Manager is a graphical login manager for X11. It aims to be simple, fast and independent from the various desktop environments. SLiM is based on latest stable release of Login.app by Per Lid=C3=A9n. In the distribution, slim may be called through a wrapper, slim-dynwm, which...
Western Digital ODAY through the kill vulnerability-vulnerability warning-the black bar safety net
Western Digital ODAY through the kill vulnerability Speak directly to use of the method. In the registered members,“the applicant name in Chinese”here written on the "Chinese',utype='1 1 1 1 1 1"Note, does not include outside of the double quotation marks. Else as usual, and then register...
PHPShop 0.6 - Bypass
PHPShop 0.6 - Bypass ======================================================================================== | Title : PHPShop Version 0.6 by pass Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | |...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 : redhat-cluster, redhat-cluster-suite vulnerabilities (USN-875-1)
Multiple insecure temporary file handling vulnerabilities were discovered in Red Hat Cluster. A local attacker could exploit these to overwrite arbitrary local files via symlinks. CVE-2008-4192, CVE-2008-4579, CVE-2008-4580, CVE-2008-6552 It was discovered that CMAN did not properly handle...
JVN#36207497 Active! mail 2003 cookie disclosure vulnerability
Active! mail 2003 from TransWARE Co. is a web-based email software. Active! mail 2003 contains a vulnerability in which cookies may be disclosed. Impact A remote attacker could impersonate a user of Active! mail 2003. As a result, the user's email could be viewed or configurations could be...
Cisco switch password-cracking-vulnerability warning-the black bar safety net
Use the console cable is connected toswitch, through HyperTerminal or Secure CRT connection to switch; 2. Press and hold down the switch on the front panel MODE button, plug in the switch power supply; 3. About 4 0 seconds after the release of the Mod 1. Use the console cable is connected...
Thatware <= 0.5.3 Multiple Remote File Include Exploit
No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Thatware = 0.5.3 Multiple Remote File Include Exploit Download Script : http://sourceforge.net/projects/thatware/files Vuln : ./thatwarepath/config.php line 4 ?php include $rootpath."dbsettings.php"; ? PoC :...
smb-psexec NSE Script
Implements remote process execution similar to the Sysinternals' psexec tool, allowing a user to run a series of programs on a remote machine and read the output. This is great for gathering information about servers, running the same tool on a range of system, or even installing a backdoor on a...
PhpMyAdmin Config File Code Injection
This module exploits a vulnerability in phpMyAdmin's setup feature which allows an attacker to inject arbitrary PHP code into a configuration file. The original advisory says the vulnerability is present in phpMyAdmin versions 2.11.x 'PhpMyAdmin Config File Code Injection', 'Description' = %q Thi...
[SECURITY] Fedora 10 Update: slim-1.3.1-9.fc10
SLiM Simple Login Manager is a graphical login manager for X11. It aims to be simple, fast and independent from the various desktop environments. SLiM is based on latest stable release of Login.app by Per Lid=C3=A9n. In the distribution, slim may be called through a wrapper, slim-dynwm, which...
QuickCart Multiple vlunerabilities
No description provided by source. GREETZ: hawk, pin3ska, black ant, qwert666, ua and gacmaan DIRECTORY TRAVERSAL http://victim.com/?p=ONE OF THE EXISITING FILES-EXISITING ACTION IN THIS FILE- Most of actions load templates form bad directory and then throw an exception. example:...
QuickCart 3.x xss xsrf Local File Inclusion Directory Traversal
No description provided by source. DISCOVERED: PaweÅ‚ 'kl3ryk' Åaskarzewski GREETZ: hawk, pin3ska, black ant, qwert666, ua and gacmaan DIRECTORY TRAVERSAL http://victim.com/?p=ONE OF THE EXISITING FILES-EXISITING ACTION IN THIS FILE- Most of actions load templates form bad directory and then thr...
QuickCart 3.x xss, xsrf, Local File Inclusion, Directory Traversal
Exploit for unknown platform in category web applications ================================================================== QuickCart 3.x xss, xsrf, Local File Inclusion, Directory Traversal ================================================================== DIRECTORY TRAVERSAL...
QuickCart 3.x - Cross-Site Scripting Cross-Site Request Forgery Local File Inclusion Directory Traversal
QuickCart 3.x - Cross-Site Scripting Cross-Site Request Forgery Local File Inclusion Directory Traversal DISCOVERED: PaweÅ‚ 'kl3ryk' Åaskarzewski GREETZ: hawk, pin3ska, black ant, qwert666, ua and gacmaan DIRECTORY TRAVERSAL http://victim.com/?p=ONE OF THE EXISITING FILES-EXISITING ACTION IN THI...
QuickCart 3.x xss xsrf Local File Inclusion Directory Traversal
No description provided by source. DISCOVERED: PaweÅ‚ 'kl3ryk' Åaskarzewski GREETZ: hawk, pin3ska, black ant, qwert666, ua and gacmaan DIRECTORY TRAVERSAL http://victim.com/?p=ONE OF THE EXISITING FILES-EXISITING ACTION IN THIS FILE- Most of actions load templates form bad directory and then thr...
Xerver HTTP Server 4.32 - Remote Denial of Service
Xerver HTTP Server 4.32 - Remote Denial of Service Xerver HTTP Server = v4.32 Remote Denial of Service Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application...
Xerver HTTP Server 4.32 Remote Denial of Service Vulnerability
Exploit for unknown platform in category dos / poc ============================================================== Xerver HTTP Server 4.32 Remote Denial of Service Vulnerability ============================================================== Xerver HTTP Server = v4.32 Remote Denial of Service Found...
[SECURITY] Fedora 11 Update: akonadi-1.2.1-1.fc11
PIM Storage Service. Requires an available instance of mysql server at runtime. Akonadi can spawn a per-user one automatically if the mysql-server package is installed on the machine. See also: /etc/akonadi/mysql-global.conf...
phpMyAdmin Installation Not Password Protected
The version of phpMyAdmin installed on the remote web server allows unrestricted, unauthenticated access. This is likely due to setting the 'authtype' to 'config' and storing login credentials in the configuration file. A remote attacker could exploit this to execute arbitrary SQL queries, delete...
CVE-2009-2334
wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as...