CVE-2008-1591

creationtimestamp| type| source ---|---|--- 2008-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5292...

4 0 4 hung it + bloopers + AD-vulnerability warning-the black bar safety net

Source: six-winged hedgehog so-hedgehog nest http://www.688ip.com/dae5g45 Today in the card rice to see is said to be hung it's something that you want to get the source but returns a 4 0 4; and Careful a look, indeed is hung it from the server there returns the of 4 0 of 4 information inside...

freePHPgallery 0.6 - Cookie Local File Inclusion

--==+================================================================================+==-- --==+ freePHPgallery 0.6 Cookie Local File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: freePHPgallery 0.6 Cookie Local Fil...

DSECRG-08-013.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-013 Application: MODx CMS Versions Affected: 0.9.6.1, 0.9.6.1p1 Vendor URL: http://modxcms.com/ Bugs: XSS, SiXSS, stored XSS, Change User Password XSRF Vulnerability. Exploits: YES Reported: 11.01.2008 Vendor response: 11.01.2008 Updated...

Unfixed XSS vulnerability at www.eschbachit.de

Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.eschbachit.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

xml2owl 0.1.1 - 'showcode.php' Remote Command Execution

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote...

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / teste...

agares-rfilfi.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote...

Agares phpAutoVideo 2.21 - LocalRemote File Inclusion

Agares phpAutoVideo 2.21 - LocalRemote File Inclusion --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

ZSA-2007-029: syslog-ng Denial of Service

-------- Z o r p S e c u r i t y A d v i s o r y Z S A ------------ PACKAGE : syslog-ng, syslog-ng-premium-edition AFFECTED VERSION : = 2.0.6, 2.1.8 FIXED : 2.0.6, 2.1.8 SUMMARY : Denial of Service TYPE : remote AFFECTED : all platforms ZSA-ID : ZSA-2007-029 DATE : Dec 14, 2007...

BalaBit IT Security syslog-ng NULL指针引用拒绝服务漏洞

BalaBit IT Security syslog-ng是一款系统日志记录工具, 可用于替代标准的Unix系统日志记录程序syslogd。 syslog-ng处理消息时间戳存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 如果入站消息的时间戳不以空格字符结尾，就会导致NULL指针引用而造成应用程序崩溃。 Balabit syslog-ng 2.1.7 Balabit syslog-ng 2.1.6 Balabit syslog-ng 2.1.5 Balabit syslog-ng 2.1.4 Balabit syslog-ng 2.1.3 Balabit syslog-ng...

Unfixed XSS vulnerability at www.metin2.it

Security researcher RedTuning, has submitted on 17/12/2007 a cross-site-scripting XSS vulnerability affecting www.metin2.it, which at the time of submission ranked 38352 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currentl...

mcmseasy-lfi.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Local File...

Mcms Easy Web Make - 'index.php?template' Local File Inclusion

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Local File...

[SECURITY] Fedora 8 Update: zabbix-1.4.2-4.fc8

ZABBIX is software that monitors numerous parameters of a network and the health and integrity of servers. ZABBIX uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. ZABBIX offers...

[SECURITY] Fedora 7 Update: zabbix-1.4.2-3.fc7

ZABBIX is software that monitors numerous parameters of a network and the health and integrity of servers. ZABBIX uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. ZABBIX offers...

MWOpen E-Commerce - 'leggi_commenti.asp' SQL Injection

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- MWOpen...

PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure

--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

PHP-Nuke NSN Script Depository 1.0.0 - Remote Source Disclosure

PHP-Nuke NSN Script Depository 1.0.0 - Remote Source Disclosure --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Unfixed XSS vulnerability at lr101.linux-it-solutions.de

Security researcher BackDoor, has submitted on 11/11/2007 a cross-site-scripting XSS vulnerability affecting lr101.linux-it-solutions.de, which at the time of submission ranked 9101778 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007...