Multiple Vulnerabilities in DT Centrepiece

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DT Centrepiece which could be exploited to perform cross-site scripting attacks and bypass certain security restrictions. 1 Cross-site scripting XSS vulnerabilities in DT Centrepiece 1.1 The vulnerability exists...

Oracle Secure Backup Authentication Bypass/Command Injection Vulnerability

This module exploits an authentication bypass vulnerability in login.php. In conjunction with the authentication bypass issue, the 'jlist' parameter in propertybox.php can be used to execute arbitrary system commands. This module was tested against Oracle Secure Backup version 10.3.0.1.0 Module...

PHP-Nuke 8.1.0.3.5b Command Execution

PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use system ; my $cookies = HTTP::Cookies-new; my $request = LWP::UserAgent-new; $request-agent"Mozilla 5/0"; $request-cookiejar$cookies; END VARS sub...

PHP-Nuke 8.1.0.3.5b - Remote Command Execution

PHP-Nuke 8.1.0.3.5b - Remote Command Execution PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use...

minerCPP 0.4b Buffer Overflow / Format String

!/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] Tested on Windows 7 In order to make...

Oxygen2PHP <= 1.1.3 (member.php) Blind SQL Injection Exploit

Exploit for php platform in category web applications ============================================================ Oxygen2PHP 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; my $Get = $UserAgent-get$HostName.SQLInjection$UserName; if$Get-content = /0-91,5 : a-zA-Z0-9-.2,15 :...

Clear Web Browser History

From the Tools menu, select Clear Recent History. This opens a second window with checkboxes to let you decide what to clear from the browser’s history. You can decide to wipe browsing and download history, cookies, cache, active logins or site preferences. This screen also allows you to set a ti...

BBSGood Forum program indexlabel. asp and labelsave. the asp page has SQL injection vulnerability-vulnerability warning-the black bar safety net

BBSGOOD is domestic first using the cache technology Forum, BBSGOOD posts and list home can generate a static HTML file. Vulnerability analysis: In the file indexlabel. asp: sql="select top 1 Admin,UserName,Password from BBSGoodAdmin where UserName='"&Request. Cookiesbbsinfo&"adminuser"&"' "...

PHPNS 2.2.3 Cross Site Scripting

Exploit Title: phpns 2.2.3 Cross-site scripting Date: 26/06/2010 Software Link: n / a Version: 2.2.3 special thanks to : Gretz to : algeria national club /.:. Author : k4k4shi / /.:. contact : [email protected] / It was found in phpns you can stole cookies of admin it's in login :...

BBSGood论坛程序labelsave.asp页面SQL注入漏洞

BBSGOOD是国内首创使用缓存技术的论坛，BBSGOOD的帖子和列表首页是可以生成静态HTML文件的。 在文件labelsave.asp中： sql="select top 1 Admin,UserName,Password from BBSGoodAdmin where UserName='"&Request.Cookiesbbsinfo&"adminuser"&"' " //第115行 程序没有验证用户是否登陆，导致cookies的值没有过滤而产生注入漏洞。 BBSGood 5.0/5.0.2 厂商补丁： BBSGood.Speed -------...

CVE-2010-1755

Safari in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the Accept Cookies preference, which makes it easier for remote web servers to track users via a cookie...

PT-2010-3393 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Safari in Apple iOS versions prior to 4 Description: The issue is related to the improper implementation of the Accept Cookies preference in Safari, making it easier for remote web servers to track users via a cookie. Recommendations: For...

XSS vulnerability in Clickr theme

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence Clickr theme. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An attacker...

XSS vulnerability in Clickr theme

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence Clickr theme. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An attacker...

XSS vulnerability in Contributors macro

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence \contributors macro. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An...

XSS vulnerability in Contributors macro

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence \contributors macro. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An...

XSS vulnerability in PDF export

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence action that performs the export to PDF. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's o...

XSS vulnerability in PDF export

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence action that performs the export to PDF. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's o...

CentOS 3 / 4 / 5 : cups (CESA-2010:0490)

Updated cups packages that fix three security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

BBSGood Forum program a plurality of page there is SQL injection vulnerability-vulnerability warning-the black bar safety net

BBSGOOD is domestic first using the cache technology Forum, BBSGOOD posts and list home can generate a static HTML file. 1. In the file indexedit. asp: sql="select top 1 Admin,UserName,Password from BBSGoodAdmin where UserName='"&Request. Cookiesbbsinfo&"adminuser"&"' " //Article 4 of 8 4 line Se...