Syracus CMS SQL Injection

Exploit Title : Syracuse Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.lerentech.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Syracuse Web Design...

PhpFox 3.0.1 Cross Site Scripting

Exploit Title: phpFox Version 3.0.1 Cross site Scripting Vulnerability Google Dork: Intext:"Powered By phpFox Version 3.0.1" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://www.phpfox.com/ Tested on: all ================================== +...

Security Advisory AA-004: Directory Traversal Vulnerability in Sitecom Home Storage Center

Security Advisory AA-004: Directory Traversal Vulnerability in Sitecom Home Storage Center Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 3, 2012 Vulnerability Type= Directory Traversal Impact= - System Access - Exposure of...

Sitecom Home Storage Center Directory Traversal

Security Advisory AA-004: Directory Traversal Vulnerability in Sitecom Home Storage Center Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 3, 2012 Vulnerability Type= Directory Traversal Impact= - System Access - Exposure of...

Sitecom Home Storage Center Directory Traversal

Exploit for hardware platform in category web applications Directory Traversal Vulnerability in Sitecom Home Storage Center Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 3, 2012 Vulnerability Type= Directory Traversal Impact= -...

Sitecom Home Storage Center - Directory Traversal

Security Advisory AA-004: Directory Traversal Vulnerability in Sitecom Home Storage Center Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 3, 2012 Vulnerability Type= Directory Traversal Impact= - System Access - Exposure of...

Qualikom Canada Inc CMS SQL Injection

Exploit Title: Qualikom Canada Inc cms Sql Injection Vulnerability Google Dork:intext:"Powered by Qualikom Canada Inc." Date: 08/24/2012 Author: Crim3R Vendor Home http://www.qualikom.com/ Tested on: all $ $ ----Author will be not responsible for any damage---- $...

Joomla 1.7 / 2.5 Civicrm Arbitrary File Upload

Exploit Title: joomla 1.7 & 2.5 comcivicrm Arbitrary File Upload Vulnerability Google Dork: inurl:/components/comcivicrm/ Date: 08/22/2012 Author: Crim3R download Link : http://sourceforge.net/projects/civicrm/files/civicrm-stable/ Tested on: all ================================== D3m0:...

CVE-2012-2283

The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifeline firmware before 3.2.3.15290, iConnect with EMC Lifeline firmware before 2.5.26.18966, and StorCenter with EMC Lifeline firmware before 2.0.18.23122, 2.1....

Hardcoded credentials

The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifeline firmware before 3.2.3.15290, iConnect with EMC Lifeline firmware before 2.5.26.18966, and StorCenter with EMC Lifeline firmware before 2.0.18.23122, 2.1....

CVE-2012-2283

The CVE-2012-2283 entry affects Iomega network storage devices running EMC Lifeline firmware: Home Media Network Hard Drive (before 2.104), Cloud Edition (before 3.2.3.15290), iConnect (before 2.5.26.18966), StorCenter (before 2.0.18.23122; 2.1.x before 2.1.42.18967; 3.x before 3.2.3.15290). A vu...

Cisco Pulls Back on Routers' 'Supplemental Privacy Policy'

Cisco appears to have retracted a controversial addition to its privacy policy that allowed the company to track data, including complete Internet histories, for users of its Linksys E2700, E3500 and E4500 routers. The policy revisions were part of an automatic firmware update that outraged users...

Default configuration

The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory...

AnvSoft Any Video Converter 4.3.6 Unicode Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 Tested on: Win XP SP3 French trigger the bug : generate the .reg file, execute it, and then open the a...

Design/Logic Flaw

Login Window in Apple Mac OS X 10.7.3, when Legacy File Vault or networked home directories are enabled, does not properly restrict what is written to the system log for network logins, which allows local users to obtain sensitive information by reading the log...

DEBIAN-CVE-2012-0863

Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file...

Ubuntu: Security Advisory (USN-1400-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Anonymous vs Britain's Home Office - Operation Trial At Home

Anonymous vs Britain's Home Office - Operation Trial At Home As announced during last days Anonymous has launched a Distributed Denial of Service DDoS against several UK government websites. A massive recruiting campaign is started on social media, a call to arm to protest the extradition of U.K...

#OpTrialAtHome : Anonymous Plans 7 April Attack on British government

Anonymous Plans 7 April Attack on British government UK hackers linked to the Anonymous group are encouraging supporters to attack the Home Office website this Saturday 7 April in protest at the extradition of three UK citizens to the US. Called OpTrialAtHome, the hacktivist group @AnonOpUK poste...

pluck 4.7 CSRF edit index Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...