Squito Gallery v.1.0 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ======================================================= Squito Gallery v.1.0 Cross Site Scripting Vulnerability =======================================================...

Oracle E-Business Suite - Multiple Vulnerabilities

Oracle E-Business Suite - Multiple Vulnerabilities Oracle E-Business Suite is prone to multiple authentication-bypass and HTML-injection vulnerabilities. Attackers could exploit these issues to steal cookie-based authentication credentials, perform unauthorized actions, or bypass certain security...

WordPress 2.7.1 admin.php Bypass

An attacker can exploit this issue via a browser. The following example URIs are available: http://www.example.com/wp-admin/admin.php?page=/collapsing-archives/options.txt http://www.example.com/wp-admin/admin.php?page=akismet/readme.txt...

SLES10: Security update for id3lib

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: id3lib id3lib-devel id3lib-examples More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES9: Security update for id3lib

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: id3lib-examples id3lib id3lib-devel For more information, please visit the referenced security advisories. More details may also be found by searching for...

SLES9: Security update for Tomcat

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-jakarta-tomcat-connectors jakarta-tomcat-doc apache-jakarta-tomcat-connectors jakarta-tomcat jakarta-tomcat-examples For more information, please vis...

SLES9: Security update for Tomcat

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-jakarta-tomcat-connectors apache2-jakarta-tomcat-connectors jakarta-tomcat jakarta-tomcat-doc jakarta-tomcat-examples For more information, please vis...

SLES9: Security update for id3lib

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: id3lib-examples id3lib id3lib-devel For more information, please visit the referenced security advisories. More details may also be found by searching for...

CF Shopkart 5.3x (itemid) Remote SQL Injection Vulnerability

No description provided by source. CF ShopKart SQL vulnerability By learn3r hacker from Nepal [email protected] Product name: CF ShopKart Version: 5.4 beta or may be lower Product home: www.cfshopkart.com Affected variable: item SQLi examples:...

Wireshark 1.2.2版本修复多个拒绝服务漏洞

BUGTRAQ ID: 36408 Wireshark之前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的OpcUa、GSM A RR、TLS协议解析模块中存在拒绝服务漏洞。如果用户受骗从网络抓取了恶意的报文或读取了恶意抓包文件的话，就会导致解析模块崩溃。 Wireshark 0.99.6 - 1.2.1 临时解决方法： 禁用受影响的解析模块： 1 从菜单选择Analyze→Enabled Protocols... 2 清除GSM CCCH、OpcUa和SSL 3 点击“保存”、“确定” 厂商补丁： Wireshark ---------...

CF Shopkart 5.3x (itemid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ CF Shopkart 5.3x itemid Remote SQL Injection Vulnerability ============================================================ CF ShopKart SQL vulnerability By learn3r hacker from Nepal...

Spiceworks 3.6.31847 XSS / XSRF

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-009 - Spiceworks Multiple Vulnerabilities XSS & CSRF Application: Spiceworks 3.6.31847 Vendor: Spiceworks Vendor website: http://www.spiceworks.com Author: Adam Baldwin [email protected] Class: XSS, CSRF I...

[NGENUITY] - Spiceworks Multiple Vulnerabilities (XSS & CSRF)

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-009 - Spiceworks Multiple Vulnerabilities XSS & CSRF Application: Spiceworks 3.6.31847 Vendor: Spiceworks Vendor website: http://www.spiceworks.com Author: Adam Baldwin [email protected] Class: XSS, CSRF I...

RHEL 5 : tomcat (RHSA-2009:1164)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1164 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. It was discovered that the Red Hat Security...

CVE-2009-1770: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Flyspeck CMS 6.8 Local File Inclusion

=-=-remote change add admin xpl/lfi-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script::Flyspeck CMS 6.8 ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download...

CVE-2009-1653: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in examples/tbsusexamples0view.php in TinyButStrong 3.4.0 allows remote attackers to read arbitrary files via a .. dot dot in the script parameter...

TinyButStrong 3.4.0 - script Local File Disclosure

TinyButStrong 3.4.0 - script Local File Disclosure ' -. ,'-. ,' ' .--.===.--. ' .%%. .. -'=' /%%/ \ |%%/ local | |%%| ||.,-. %%| file |/ %\ // ' %\ include // , -'-. ,-. %\ /' ' |/' -=--=' ' -=-=- .' ||/ |||/ o o -=-=-=-==-=-=-=-=-=-=-=+-oooO---------+-=-=-=-=-=-=- | | | |...

php file system attacks the wizard-vulnerability warning-the black bar safety net

A. php file system path normalization attack In the path use the/and/. Will make the/etc/passwd/or/etc/passwd/. As a file is opened. II. php file system path truncation attack PHP has a path truncation issuea very evil means of snprintfallowing only the use of MAXPATH is as open file or directory...

phpCommunity 2.1.8 (SQL/DT/XSS) Multiple Vulnerabilities

No description provided by source. Salvatore "drosophila" Fresta + Application: phpCommunity 2 + Version: 2.1.8 + Website: http://sourceforge.net/projects/phpcommunity2/ + Bugs: A Multiple SQL Injection B Directory Traversal C Reflected XSS + Exploitation: Remote + Date: 07 Mar 2009 + Discovered...