CVE-2010-1529

The CVE-2010-1529 issue affects the Freestyle FAQs Lite (com_fsf) Joomla! extension, specifically versions around 1.3. The vulnerability is a SQL injection in the FAQ action when handling the faqid parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. The connected ...

Multiple vulnerabilities in AdaptCMS Lite

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in AdaptCMS Lite which could be exploited to perform cross-site request forgery and cross-site scripting attacks. 1 Cross-site request forgery CSRF in AdaptCMS Lite The vulnerability exists due to insufficient...

Joomla Freestyle FAQ Lite 1.3 SQL Injection

--------------------------------------------------------------------------------- Joomla Freestyle FAQ Lite Component 1.3 faqid SQL Injection --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn :...

Joomla! Component Freestyle FAQ Lite 1.3 - 'faqid' SQL Injection

--------------------------------------------------------------------------------- Joomla Freestyle FAQ Lite Component 1.3 faqid SQL Injection --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn :...

Joomla Freestyle FAQ Lite Component 1.3 com_fss (faqid) SQL Injection

Exploit for php platform in category web applications =================================================================================== Joomla Freestyle FAQ Lite Component 1.3 comfss faqid SQL Injection Vulnerability...

Joomla! Component Freestyle FAQ Lite 1.3 - faqid SQL Injection

Joomla! Component Freestyle FAQ Lite 1.3 - faqid SQL Injection --------------------------------------------------------------------------------- Joomla Freestyle FAQ Lite Component 1.3 faqid SQL Injection --------------------------------------------------------------------------------- Author :...

Remember Aurora–and Other Botnets

Last night my attention was drawn to a couple of blog entries relating to Google and the attacks they fell victim to earlier this year. These attacks were eventually labeled as “Operation Aurora” by McAfee based upon the presence of the “aurora” keyword embedded within some of the malware. First...

AdaptCMS Lite 1.5 Cross Site Request Forgery

=========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download : http://sourceforge.net/projects/adaptcms/files/AdaptCMS%20Lite%20v1/1.5/AdaptCMSLite1.5.zip/download Advisory ...

AdaptCMS Lite 1.5 - Arbitrary Add Admin

AdaptCMS Lite 1.5 - Arbitrary Add Admin =========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download :...

Woltlab Burning Board Lite Addon SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. Woltlab Burning Board Lite Addon lexikon.php SQL Injection Vulnerability .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. + Autor: n3w7u + Vulnerabilities SQL Injection + Page:...

Woltlab Burning Board Lite Addon - 'lexikon.php' SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. Woltlab Burning Board Lite Addon lexikon.php SQL Injection Vulnerability .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. + Autor: n3w7u + Vulnerabilities SQL Injection + Page:...

Media Player 6.4.9.1 Denial Of Service

Exploit Title: Media Player V6.4.9.1 with K-Lite Codec Pack DoS/Crash .avi file Date: 14/3/2010 Author: En|gma7 Software Link: http://www.free-codecs.com/Klitecodecpackdownload.htm Version: Media Player V6.4.9.1 with K-Lite Codec Pack 5.8.0 Tested on: WinXP/Vista CVE : if exists Code :...

Embedthis Appweb 3.1.2 Denial Of Service

!/usr/bin/perl +------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .....

Media Player 6.4.9.1 with K-Lite Codec Pack - .avi File Crash (Denial of Service)

Media Player 6.4.9.1 with K-Lite Codec Pack - .avi File Crash Denial of Service Exploit Title: Media Player V6.4.9.1 with K-Lite Codec Pack DoS/Crash .avi file Date: 14/3/2010 Author: En|gma7 Software Link: http://www.free-codecs.com/Klitecodecpackdownload.htm Version: Media Player V6.4.9.1 with...

Media Player V6.4.9.1 with K-Lite Codec Pack (.avi file) DoS/Crash

Exploit for windows platform in category dos / poc ================================================================== Media Player V6.4.9.1 with K-Lite Codec Pack .avi file DoS/Crash ================================================================== Exploit Title: Media Player V6.4.9.1 with K-Lit...

Media Player classic StatsReader - .stats Stack Buffer Overflow (PoC)

Media Player classic StatsReader - .stats Stack Buffer Overflow PoC ! /usr/bin/python Media Player classic StatsReader .stats file stack buffer Overflow poc Software Link: http://mpc-hc.sourceforge.net/download-media-player-classic-hc.html Tested in : Windows XP SP3 Credit : ItSecTeam mail :...

Media Player Classic StatsReader Buffer Overflow

! /usr/bin/python Media Player classic StatsReader .stats file stack buffer Overflow poc Software Link: http://mpc-hc.sourceforge.net/download-media-player-classic-hc.html Tested in : Windows XP SP3 Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Find by: PLATEN @ ItSecTeam...

Media Player classic StatsReader (.stats file) stack buffer Overflow poc

Exploit for windows platform in category dos / poc ======================================================================== Media Player classic StatsReader .stats file stack buffer Overflow poc ======================================================================== ! /usr/bin/python Media Playe...

iPhone / iTouch FTPDisc 1.0 Buffer Overflow

Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne BuffOverflow DoS Model - Tested on iPod Touch 3G 3.1.3 Software - FTPDisc 1.0 and FTPDisc 1.0 Lite http://itunes.apple.com/es/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Attacker - Tested from GNU/Linux Sidux, fuzzing with a future PenTBox versi...

iPhone iTouch FtpDisc 1.0 - Buffer Overflow (Denial of Service) (PoC)

iPhone iTouch FtpDisc 1.0 - Buffer Overflow Denial of Service PoC Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne BuffOverflow DoS Model - Tested on iPod Touch 3G 3.1.3 Software - FTPDisc 1.0 and FTPDisc 1.0 Lite http://itunes.apple.com/es/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Attacker ...