2361 matches found
PHPwebnews 0.2 MySQL Edition - 'id_kat' SQL Injection
/ | | \ | | | | \ \ / / | |/ | | | / | | | | | | | |\ V / | | | | '/ |/ \ | | / | '/ | | || | | |\ | || | | | | | | || | | \ \ / | | | | | | | |/|| |,||| ||/ ,|| |/|||/|| , | ---------------------------------------------------------------------------|/ Exploit found by sToRm phpWebNews...
CVE-2008-2780
The Anubis aka Anubis+Ripe160 plugin before 1.3 for encrypt stores the unencrypted file's size in cleartext in the header of the encrypted file, which allows attackers to distinguish between encrypted data and random padding at the end of the encrypted file...
Update Protections against Recent Malware Threats (1-Jun-08)
Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...
Update Protections against Recent Malware Threats (25-May-08)
Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...
Update Protections against Recent Malware Threats (2-Mar-08)
Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...
Lyris list manager multiple security vulnerabilities
Privilege escalation...
Fixed in Apache Tomcat 5.5.21
Moderate: Session hi-jacking CVE-2008-0128 When using the SingleSignOn Valve via https the Cookie JSESSIONIDSSO is transmitted without the "secure" attribute, resulting in it being transmitted to any content that is - by purpose or error - requested via http from the same server. Affects:...
360 Web Manager 3.0 - IDFM SQL Injection
360 Web Manager 3.0 - IDFM SQL Injection 360 Web Manager CMS Remote SQL Injection Vulnerability Author: Ded MustD!e Site: http://www.360webmanager.com/ Google Dork: inurl:"IDFM=" "form.php" Exploit: http://site.com/form.php?IDM=7&IDSM=20&IDFM=-1+union+select+1,concatws0x3a,name,password,3,4...
CVE-2008-0216
CVE-2008-0216 describes a local-privilege/snooping flaw in FreeBSD where the ptsname and openpty handling could let a non-privileged user read or own a pty belonging to another user. The issue arises because ptsname(3) could extract two characters from a /dev name without ensuring ownership, and ...
Update Protections against Recent Malware Threats (09-Jan-08)
Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...
CVE-2007-6470
Affected software : phpRPG 0.8. Vulnerability : inadequate access control causes sensitive information to be stored under the web root, enabling remote attackers to read session IDs from tmp/ files and hijack sessions via PHPSESSID cookies. Root cause : improper handling/placement of session data...
Meridian Prolog Manager Username and Plain Text Password Disclosure
+Note: This is being released without Meridian or CERT approval. Meridian has been dragging their feet and has shown no good intent since I first tried to contact them. My guess is that they will be following all of my releases claiming I was uncooperative. The only information Meridian ever soug...
CVE-2007-5970
MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 are affected. Remote authenticated users can gain privileges on arbitrary tables via unspecified vectors involving table-level DATA DIRECTORY and INDEX DIRECTORY options when creating a partitioned table with the same name as a table for which the ...
迅雷5 0-Day
No description provided by source. script type="text/jscript"function init document.write"";window.onload = init;/script SCRIPT language="JavaScript" var expires = new Date; expires.setTimeexpires.getTime + 24 60 60 1000; var setcookie = document.cookie.indexOf"3Ware=";...
CVE-2007-5931
The reDirect function in lib/controllers/RepViewController.php in OrangeHRM before 2.2.2 does not verify the privileges of a user, which allows remote attackers to obtain access to data via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely...
CVE-2007-5210
Arbor Networks Peakflow SP before 3.5.1 patch 14, and 3.6.x before 3.6.1 patch 5, allows remote authenticated users to bypass access restrictions and read or write unspecified data via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
Borland InterBase isc_create_database() Buffer Overflow
This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted create request. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Borland InterBase...
Cart32 Arbitrary File Download Vulnerability
======================================================================== = Cart32 Arbitrary File Download Vulnerability = = Vendor Website: = http://www.cart32.com = = Affected Version: = -- All releases prior to and including v6.3 = = Public disclosure on Thursday 4th October 2007 =...
CVE-2007-3004
CVE-2007-3004 is rejected/not used; refer to CVE-2007-2788.
Vulnerability in Credant Mobile Guardian Shield for Windows
Vulnerability in Credant Mobile Guardian Shield for Windows Vendor: Credant Technologies Inc. http://www.credant.com/ Product: Credant Mobile Guardian Shield for Windows Version: 5.2.1.105 and prior Affected Operating Systems: Windows XP SP2 and likely others Product Overview: Credant Technologie...