Joomla! iF Portfolio Nexus 'controller' Parameter Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37473/info The iF Portfolio Nexus 'comifnexus' component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attack...

IF-CMS Index.PHP Cross-Site Scripting Vulnerability

No description provided by source...

else if cms 0.6 - Multiple Vulnerabilities / exploit

No description provided by source. ELSEIF CMS Tested on Else If version Beta 0.6 Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] These Are Examples .. iam tiered fetching the injected files : Remote File inclusion...

IF-CMS <= 2.0 (frame.php id) Blind SQL Injection Exploit

No description provided by source. --+++=======================================================+++-- --+++====== IF-CMS = 2.0 Blind SQL Injection Exploit ======+++-- --+++=======================================================+++-- ?php function query $username, $char, $pos //Increase benchmark...

SoftBizScripts Dating Script SQL Injection Vunerability

No description provided by source. Exploit Title: SoftBizScripts Dating Script SQL Injection Vunerability Date: 29-4-2010 Author: 41.w4r10r Vendor Link : http://softbizscripts.com/ Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : inurl:searchresults.php?browse=1 Code :...

Xitami 2.5c2 Web Server If-Modified-Since Overflow

No description provided by source. $Id: xitamiifmodsince.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0777-1)

java-160-openjdk was updated to 1.12.5 bnc817157 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework...

FreeBSD : chromium -- multiple vulnerabilities (0b0fb9b0-f0fb-11e3-9bcd-000c6e25e3e9)

Google Chrome Releases reports : 4 security fixes in this release, including : - 369525 High CVE-2014-3154: Use-after-free in filesystem api. Credit to Collin Payne. - 369539 High CVE-2014-3155: Out-if-bounds read in SPDY. Credit to James March, Daniel Sommermann and Alan Frindell of Facebook. -...

PT-2017-7668

Name of the Vulnerable Software and Affected Versions Squid HTTP Proxy versions 3.1.10 through 3.1.23 Squid HTTP Proxy versions 3.2.0.3 through 3.5.22 Squid HTTP Proxy versions 4.0.1 through 4.0.16 Description The issue arises from the incorrect processing of responses to If-None-Modified HTTP...

大汉版通JIS统一身份认证系统后台文件另一处上传漏洞

简要描述： 一处有点奇葩的文件上传……………… 详细说明： 关键点：找到路径、绕过某个无聊的if判断。需要管理员权限 漏洞证明： jis/manage/sys/oprlogo.jsp String strLoadPath = request.getSession.getServletContext.getRealPath"/front"; Convert.createDirectory strLoadPath + "/tmp/" ; CommonUploadFile upload = new CommonUploadFile strLoadPath +"/tmp", "";...

CVE-2013-5431

Open redirect vulnerability in IBM Tivoli Federated Identity Manager TFIM 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway TFIMBG 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 allows remote attackers...

RedHat Update for squid RHSA-2013:0505-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-5332

at32 Reverse Proxy 1.060.310 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a long string in an HTTP header field, as demonstrated using the If-Unmodified-Since field...

CVE-2012-5332: Undefined Security Weakness

at32 Reverse Proxy 1.060.310 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a long string in an HTTP header field, as demonstrated using the If-Unmodified-Since field...

PT-2012-5931

Name of the Vulnerable Software and Affected Versions at32 Reverse Proxy version 1.060.310 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, by sending a long string in an HTTP header field. This can be...

PT-2012-5717

Name of the Vulnerable Software and Affected Versions Mercury MR804 Router version 8.0 3.8.1 Build 101220 Rel.53006nB Description The issue allows remote attackers to cause a denial of service, resulting in a service hang, by sending a crafted string in HTTP header fields such as If-Modified-Sinc...

TFTP Server 1.4 - ST 'RRQ' Remote Buffer Overflow

!/usr/bin/python --------------------------------------------------------------------------- Exploit: TFTP SERVER V1.4 ST RRQ Overflow OS: Windows XP PRO SP3 Author: b33f --------------------------------------------------------------------------- Smashing the stack for fun and practise... This tf...

If-CMS 2.07 Local File Inclusion

$Id: if-cms.rb 2011-03-15 20:28:10 tecr0c $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ -- coding:...

IF-CMS 2.07 - Local File Inclusion (Metasploit) (2)

$Id: if-cms.rb 2011-03-15 20:28:10 tecr0c $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ -- coding:...

IF-CMS 2.07 - Local File Inclusion (Metasploit) (2)

IF-CMS 2.07 - Local File Inclusion Metasploit 2 $Id: if-cms.rb 2011-03-15 20:28:10 tecr0c $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...