Techlogica HTTP Server 1.03 - Arbitrary File Disclosure

Techlogica HTTP Server 1.03 - Arbitrary File Disclosure !/usr/bin/perl -w By ThE g0bL!N Download : http://www.softpedia.com/get/Internet/Servers/WEB-Servers/Techlogica-HTTP-Server.shtml Happy Ramadan And Happy eid use LWP::Simple; use LWP::UserAgent; print "\tTechlogica HTTP Server 1.03 Arbitrary...

Techlogica HTTP Server 1.03 Arbitrary File Disclosure Exploit

Exploit for windows platform in category remote exploits ============================================================= Techlogica HTTP Server 1.03 Arbitrary File Disclosure Exploit ============================================================= !/usr/bin/perl -w By ThE g0bL!N Download :...

Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier

First after logging onto the console either pnlog mailto, or pnlog scpto will send the logs off of the box to a destination you specify, you can also display the logs using pnlog show. pnadmin$ pnlog scpto [email protected]:/home/ryan scp /tmp/error-logs.tar.gz...

TCPDB 3.8 Contents Change

Securitylab.ir Application Info: Name: TCPDB Version: 3.8 Website: http://www.tcpdb.com/ Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Contents Change Vulnerability Risk: Medium...

SugarCRM vulnerable to SQL injection

Overview SugarCRM contains a SQL injection vulnerability. SugarCRM is a customer relationship management CRM software. SugarCRM contains a SQL injection vulnerability. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Information Disclosure Vulnerability

iDefense Security Advisory 07.28.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 28, 2009 I. BACKGROUND Microsoft's Component Object Model COM was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming...

OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)

Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...

Admin News Tools Contents Change

Admin News Tools Remote Contents Change Vulnerability Just for Fun...

Admin News Tools Remote Contents Change Vulnerability

Exploit for unknown platform in category web applications ===================================================== Admin News Tools Remote Contents Change Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 ...

Admin News Tools - Remote Contents Change

Admin News Tools - Remote Contents Change Admin News Tools Remote Contents Change Vulnerability /textarea Just for Fun milw0rm.com 2009-07-15...

Admin News Tools - Remote Contents Change

Admin News Tools Remote Contents Change Vulnerability /textarea Just for Fun milw0rm.com 2009-07-15...

Admin News Tools Remote Contents Change Vulnerability

No description provided by source. html !-- Securitylab.ir , [email protected] -- head /head body center center pbfont size="+2"Admin News Toolsi /i/fontfont size="2"Remote Contents Change Vulnerability/font/b/p /center form action="http://site.com/news/system/message.php" method="post" divbr...

CVE-2009-2274

The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to 1 lanstatusadv.asp, 2 wlanbasiccfg.asp, or 3 lancfg.asp in en/, related to use of JavaScript to protect against reading file contents...

JVN#12244807 Cross-site scripting vulnerability in PukiWikiMod from XOOPS Maniac

PukiWikiMod from XOOPS Maniac is a contents management software for XOOPS. PukiWikiMod contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to latest version according to the information provided b...

CVE-2009-2116

CVE-2009-2116 affects SkyBlueCanvas 1.1 r237. A directory traversal vulnerability exists in admin.php where the dir parameter can be manipulated with ".." to list directory contents. Impact per NVD indicates partial confidentiality impact; base CVSS~4.0 (MEDIUM), with network attack vector and au...

Sniggabo CMS - 'article.php?id' SQL Injection

milw0rm.com 2009-06-11...

CVE-2009-1695

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to frame contents after completion of a page...

CVE-2009-1695

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to frame contents after completion of a page...

CVE-2009-1695

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to frame contents after completion of a page...

Mereo 1.8.0 File Disclosure

!/usr/bin/perl -w Found By : Cyber-Zone ABDELKHALEK [email protected] Note : Don't use this for your own R!sk :d Thanx To All Friends : Hussin X , Jiko , Stack , SimO-sofT , r1z , ZoRLu , Mag!c ompo , ThE g0bL!N , b0rizq , All MoroCCaN Hackers demo version Tested under my MS WINDOWS sp2 u...