CGI Generic Local File Inclusion

The remote web server hosts CGI scripts that fail to adequately sanitize request strings. By leveraging this issue, an attacker may be able to include a local file and disclose its content. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

Oracle Database Server REPCAT_RPC.VALIDATE_REMOTE_RC SQL Injection (CVE-2009-1021)

Oracle Database Server is an enterprise-level relational database application suite. An SQL injection vulnerability has been reported in Oracle Database server. Remote authenticated attackers having Create Session privileges can exploit this vulnerability to inject and execute malicious SQL...

CVE-2009-2976

Cisco Aironet Lightweight Access Point AP devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network...

JibberBook Disclosure / Injection

» Script: JibberBook » Language: PHP » Website: http://jibberbook.com » Founder: Onur YILMAZ aka DJR » Site: www.onuryilmaz.info === data source of comments disclosure .xml file === » JibberBook/datalayer/xml/comments.xml === output === 127.0.0.1 Mozilla/5.0 Windows; U; Windows NT 6.0; en-US...

Tenrok 1.1.0 (UDD/RCE) Multiple Remote Vulnerabilities

No description provided by source. + Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://tenrok.com/ + Users Data Disclosure - PoC http://127.0.0.1/userpwd.txt + Remote Command Execution - Must be logged i...

Tenrok 1.1.0 (UDD/RCE) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities ====================================================== + Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGo...

tenrok 1.1.0 - File Disclosure Remote Code Execution

tenrok 1.1.0 - File Disclosure Remote Code Execution + Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://tenrok.com/ + Users Data Disclosure - PoC http://127.0.0.1/userpwd.txt + Remote Command Execution ...

tenrok 1.1.0 - File Disclosure / Remote Code Execution

Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://tenrok.com/ + Users Data Disclosure - PoC http://127.0.0.1/userpwd.txt + Remote Command Execution - Must be logged in. - Go to http://127.0.0.1/post.php...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-381)

The Mozilla Firefox browser was updated to version 3.0.5, fixing various security issues and stability problems. The following security issues were fixed : MFSA 2008-69 / CVE-2008-5513: Mozilla security researcher mozbugra4 reported vulnerabilities in the session-restore feature by which content...

Flash Image Gallery 1.1 File Disclosure

0x01 Informations: Script : Flash Image Gallery 1.1 and maybe last version Download : http://www.flashimagegallery.com/download/fig116admin110.zip Vulnerability : Sensitive Data Disclosure Author : DarkbiteX Greets: : |OverclockiX| , |0oZeuzo0|, |Status-X|, |Fatal Inside|, |NaOnack|, |Good-Spide|...

Flash Image Gallery 1.1 - Arbitrary Configuration File Disclosure

Flash Image Gallery 1.1 - Arbitrary Configuration File Disclosure 0x01 Informations: Script : Flash Image Gallery 1.1 and maybe last version Download : http://www.flashimagegallery.com/download/fig116admin110.zip Vulnerability : Sensitive Data Disclosure Author : DarkbiteX Greets: : |OverclockiX|...

Flash Image Gallery 1.1 Arbitrary Config File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Flash Image Gallery 1.1 Arbitrary Config File Disclosure Vulnerability ====================================================================== 0x01 Informations: Script ...

Winn ASP Guestbook 1.01b - Remote Database Disclosure

!/usr/bin/perl -w Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz. istemiyorsunuz isteseniz Sizlerde...

ABC Advertise 1.0 Admin Password Disclosure Vulnerability

No description provided by source. homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admin username...

ABC Advertise 1.0 Admin Password Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================= ABC Advertise 1.0 Admin Password Disclosure Vulnerability ========================================================= + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod ...

ABC Advertise 1.0 - Admin Password Disclosure

ABC Advertise 1.0 - Admin Password Disclosure homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admi...

REMOTE SQL INJECTION (SQLi) VULNERABILITY--Photo-Rigma.BiZ v30-->

------------------------------------------------------------------ REMOTE SQL INJECTION SQLi VULNERABILITY--Photo-Rigma.BiZ v30-- ------------------------------------------------------------------ CMS INFORMATION: --WEB: http://foto.rigma.biz affected --DOWNLOAD:...

Mandriva Linux Security Advisory : metisse (MDVSA-2008:179)

An input validation flaw was found in X.org's MIT-SHM extension. A client connected to the X.org server could read arbitrary server memory, resulting in the disclosure of sensitive data of other users of the X.org server CVE-2008-1379. Multiple integer overflows were found in X.org's Render...

NanoCMS '/data/pagesdata.txt' Password Hash Information Disclosure Vulnerability

NanoCMS is prone to an information-disclosure vulnerability because it fails to validate access to sensitive files. An attacker can exploit this vulnerability to obtain sensitive information that may lead to further attacks. NanoCMS 0.4final is vulnerable; other versions may also be affected...

Mandriva Update for metisse MDVSA-2008:179 (metisse)

Check for the Version of metisse OpenVAS Vulnerability Test Mandriva Update for metisse MDVSA-2008:179 metisse Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...