7381 matches found
CVE-2009-0037
creationtimestamp| type| source ---|---|--- 2009-03-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32834...
CVE-2009-0885
creationtimestamp| type| source ---|---|--- 2009-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8135 2009-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8137...
Graugon PHP Article Publisher 1.0 - SQL Injection Cookie Handling
Graugon PHP Article Publisher 1.0 - SQL Injection Cookie Handling 0x01 Informations: Name : Graugon PHP Article Publisher 1.0 Download : http://www.hotscripts.com/listings/jump/download/88458/ Vulnerability : Multiple Sql Injections / Insecure Cookie Handling Author : x0r Contact :...
Solaris/x86 - add services and execve inetd - 201 bytes
No description provided by source. / Solaris/x86 Just execve's the following: "echo "ingreslock stream tcp nowait root /bin/sh sh -i"/tmp/x;" "/usr/sbin/inetd -s /tmp/x; /bin/rm -f /tmp/x"; for a trivial remote bd. Used in a few old Solaris/x86 remote exploits. / char c0de =...
Graugon PHP Article Publisher 1.0 - SQL Injection / Cookie Handling
0x01 Informations: Name : Graugon PHP Article Publisher 1.0 Download : http://www.hotscripts.com/listings/jump/download/88458/ Vulnerability : Multiple Sql Injections / Insecure Cookie Handling Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged Page: index.ph...
Graugon PHP Article Publisher 1.0 SQL Injection
0x01 Informations: Name : Graugon PHP Article Publisher 1.0 Download : http://www.hotscripts.com/listings/jump/download/88458/ Vulnerability : Multiple Sql Injections / Insecure Cookie Handling Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged Page: index.ph...
[DSECRG-09-008] JOnAS(4.10.3) - Linked XSS Vulnerability
Digital Security Research Group DSecRG Advisory DSECRG-09-008 ------------------link to original advisory -------------------------- http://www.dsecrg.com/pages/vul/show.php?id=81 Application: JOnAS Java Open Application Server Versions Affected: JOnAS4.10.3 / Apache Tomcat 5.5.26 Vendor URL:...
Adobe under fire for poor security response
In the wake of the zero-day attacks against Adobe’s Acrobat and Reader product lines, the company is taking a lot of flack for its poor response to handling the issue — specifically around communicating the risks and providing migitation guidance for end users. Over on the ZDNet Zero Day blog, I...
Pwn2Own 2009: Browsers and smart phones are targets
TippingPoint’s Zero Day Initiative has released the rules for this year’s CanSecWest PWN2OWN contest, which will target unpatched flaws in Web browsers and mobile devices. Among the target list this year: Microsoft’s Internet Explorer 8, Apple’s Safari, Google’s Chrome, Windows Mobile, Google...
MS Internet Explorer 7 Memory Corruption Exploit (MS09-002) (xp sp2)
Exploit for unknown platform in category remote exploits ==================================================================== MS Internet Explorer 7 Memory Corruption Exploit MS09-002 xp sp2 ==================================================================== // Skyland win32 bindshell 28876/tcp...
Enomaly ECP / Enomalism < 2.2.1 Multiple Local Vulnerabilities
Exploit for multiple platform in category local exploits ============================================================== Enomaly ECP / Enomalism 2.2.1 Multiple Local Vulnerabilities ============================================================== Enomaly ECP/Enomalism: Multiple vulnerabilities in...
ewebeditor asp version 2.1.6 upload exploits procedures-vulnerability warning-the black bar safety net
H1ewebeditor asp version 2.1.6 upload exploits procedures----/H1brbr form action="http://127.1/e/upload.asp?action=save&type=IMAGE&style=luoye' union select SID,SName,SDir,SCSS,SUploadDir,SWidth,SHeight,SMemo,SIsSys,SFileExt,SFlashExt,...
Default Password (password) for 'admin' Account
The account 'admin' on the remote host has the password 'password'. An attacker may leverage this issue to gain access, likely as an administrator, to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "password";...
Graugon Gallery 1.0 XSS / SQL Injection
0x01 Informations: Name : Graugon Gallery 1.0 Download : http://www.hotscripts.com/jump.php?listingid=87617&jumptype=1 Vulnerability : Sql Injection/ Insecure Cookie Handling/XSS Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/admin.php Code...
Graugon Gallery 1.0 (XSS/SQL/Cookie Bypass) Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== Graugon Gallery 1.0 XSS/SQL/Cookie Bypass Remote Vulnerabilities ================================================================== 0x01 Informations: Name : Graugon Galler...
MS KB960715: Cumulative Security Update of ActiveX Kill Bits
The remote host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities. If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2009-0534
creationtimestamp| type| source ---|---|--- 2009-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8018 2009-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8355...
CVE-2009-0573
creationtimestamp| type| source ---|---|--- 2009-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32782 2009-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32783...
CVE-2009-1256
creationtimestamp| type| source ---|---|--- 2009-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8018 2009-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8355...
SAP GUI 7.1 WebViewer2D ActiveX — Insecure Methods
Application: EAI WebViewer2D EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected:Tested on 7100.2.7.1038 PL 7 Vendor URL: Bugs: Insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor response: 02.07.2009 Date of Public Advisory: 28.09.2009 Author: Alexandr Polyakov...