CVE-2009-1433

SQL injection vulnerability in File::find filesystem/File.php in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter...

CVE-2009-1433

SQL injection vulnerability in File::find filesystem/File.php in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter...

CVE-2009-1433: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in File::find filesystem/File.php in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter...

Firefox 3 JavaScript engine crashes

The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service application crash and possibly trigger memory corruption via vectors involving 1 jsFindPropertyHelper, related to the definition...

Linux/x86 - connect-back "11.22.33.44",31337/tcp - 90 bytes

No description provided by source. /--------------------------------------------------------------------------- 90 byte Connect Back shellcode by Russell Sanford - [email protected] --------------------------------------------------------------------------- filename: x86-linux-connect-back.c info:...

kernel: hfsplus: fix Buffer overflow with a corrupted image

Buffer overflow in the hfsplusfindcat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service memory corruption or system crash via an hfsplus filesystem image with an invalid catalog namelength field, related to the hfspluscatbuildkeyu...

CVE-2008-5922: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS CFAGCMS 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 main and 2 right parameters...

OSX/PPC - Stager Sock Find MSG_PEEK + Null-Free Shellcode

OSX/PPC - Stager Sock Find MSGPEEK + Null-Free Shellcode. Shellcode exploit for OSXPPC platform. Tags: Metasploit Framework MSF ;; ; ; Name: stagersockfindpeek ; Qualities: Null-Free ; Platforms: MacOS X / PPC ; Authors: H D Moore ; Version: $Revision: 1.1 $ ; License: ; ; This file is part of th...

CVE-2008-5786

Cross-site scripting XSS vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter...

CVE-2008-5786

Cross-site scripting XSS vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter...

CVE-2008-5786

CVE-2008-5786 describes a cross-site scripting (XSS) vulnerability in the Silva Find extension. The issue affects Silva Find extension 1.1.5 and earlier within Silva 1.x up to 1.6.3.2, Silva 2.0 up to 2.0.12.2, and Silva 2.1 up to 2.1.0.2, where an attacker could inject arbitrary web script or HT...

CVE-2008-5781: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in right.php in Cant Find A Gaming CMS CFAGCMS 1.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the title parameter...

Perl File::Find::Object模块格式串漏洞

BUGTRAQ ID: 31938 CNCAN ID：CNCAN-2008102803 Perl File::Find::Object是一款面向对象的File::Find替代程序。 Perl File::Find::Object处理部分循环条件时存在格式串问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 由于文件名不正确过滤传递给printf STDERR，可导致触发典型的格式串错误，如果应用程序利用这个库扫描目录树，可以应用程序权限执行任意指令。 Olivier Thauvin File::Find::Object 0.1 可升级到File::Find::Object...

Unfixed XSS vulnerability at find-credit-card.com

Security researcher BlueMax, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting find-credit-card.com, which at the time of submission ranked 17530322 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2009. It is...

Unfixed XSS vulnerability at www.find-ip-address.org

Security researcher Shocker -at- ShockingSoft.com, has submitted on 30/06/2008 a cross-site-scripting XSS vulnerability affecting www.find-ip-address.org, which at the time of submission ranked 162753 on the web according to Alexa. We manually validated and published a mirror of this vulnerabilit...

HispaH Model Search - cat.php?cat SQL Injection

HispaH Model Search - cat.php?cat SQL Injection Remote SQL Injection InjEctOr5 TeaM demo dork : find it exploit : http://www.site.me/cat.php?cat=sql injection example:here u can found an sql exploit ::: for admin inf0 :::...

contentcustom-disclose.txt

CONTENTCustomizer Trick: Hit Ctrl+Y on a page that ContentCustomizer controls and it brings you to the login screen ; Dork: inurl:"generator/default.php?doc=" Other fun stuff: dialog.php?action=del&doc='+pagename // Delete dialog.php?action=delbackup&doc='+pagename // Delete Backup...

Sun Java Runtime Environment 1.6 - Web Start .JNLP File Stack Buffer Overflow

Sun Java Runtime Environment 1.6 - Web Start .JNLP File Stack Buffer Overflow source: https://www.securityfocus.com/bid/24832/info Sun Java Runtime Environment is prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it...

ViRC 2.0 (JOIN Response) Remote SEH Overwrite Exploit 0day

No description provided by source. !/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Visual IRC 2.0 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe How stuff works ? .. ViRC -----...