Unfixed XSS vulnerability at www.u-m-p.org

Security researcher Zeryus, has submitted on 20/05/2008 a cross-site-scripting XSS vulnerability affecting www.u-m-p.org, which at the time of submission ranked 184964 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/05/2008. It is currently...

OpenBSD 4.2 - rtlabel_id2name() Local Null Pointer Dereference Denial of Service

OpenBSD 4.2 - rtlabelid2name Local Null Pointer Dereference Denial of Service / OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $...

CVE-2007-6664

SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter...

CVE-2007-6664: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter...

CVE-2007-6302

Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f aka 3.5.2F allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments, aka "ZDI-CAN-162."...

Fedora 7 : net-snmp-5.4-16.fc7 (2007-3019)

Fri Oct 19 2007 Jan Safranek 5.4-16 - License: field fixed to 'BSD and CMU' - fix hrSWInst 250237 - fix leak in UDP transport 247771 - fix remote DoS attack CVE-2007-5846 - Mon Oct 8 2007 Jan Safranek 5.4-15 - License: field changed to MIT - fix segfault on parsing smuxpeer without password...

CVE-2007-4623: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the sendrmt function in bellmail in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via a long parameter to the m command...

CVE-2007-5308

SQL injection vulnerability in galerie.php in PHP Homepage M phpHPm 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

Sql injection

SQL injection vulnerability in galerie.php in PHP Homepage M phpHPm 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

CVE-2007-5308

SQL injection vulnerability in galerie.php in PHP Homepage M phpHPm 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

CVE-2007-5308

The CVE-2007-5308 entry concerns SQL injection in galerie.php of PHP Homepage M (phpHPm) 1.0 when magic_quotes_gpc is disabled. Remote attackers can modify the id parameter in a show action to execute arbitrary SQL commands (impacting confidentiality, integrity, and availability). The NVD entry l...

Unfixed XSS vulnerability at m-pe.tv

Security researcher kusomiso.com, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting m-pe.tv, which at the time of submission ranked 4873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

PHP Homepage M 1.0 galerie.php Remote SQL Injection Exploit

No description provided by source. ?php if $argv1 == '' echo "--PHP Homepage M V.1.0 galerie.php Exploit----\n"; echo "only with magicquotesgpc OFF\n"; echo "by PHCN Mahjong\n"; echo "Usage : phpHPmv1.php http://127.0.0.1 / 1\n"; echo '----------------------------------------------'; else $host =...

Unfixed XSS vulnerability at m-pe.tv

Security researcher kusomiso.com, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting m-pe.tv, which at the time of submission ranked 4873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

CVE-2007-5308: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in galerie.php in PHP Homepage M phpHPm 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

phphome-sql.txt

',30; $user = explode'',$user; $user = strrev$user1; $user = substr$user,4,100; $user = strrev$user; echo "--EXPLOIT FINISHED--\n"; echo "userid : $userid\n"; echo "username: $user\n"; echo "password: $pw\n"; echo '--------------------'; ?...

PHP Homepage M 1.0 - galerie.php SQL Injection

PHP Homepage M 1.0 - galerie.php SQL Injection ',30; $user = explode'',$user; $user = strrev$user1; $user = substr$user,4,100; $user = strrev$user; echo "--EXPLOIT FINISHED--\n"; echo "userid : $userid\n"; echo "username: $user\n"; echo "password: $pw\n"; echo '--------------------'; ? milw0rm.co...

Unfixed XSS vulnerability at www.h-o-m-e-p-a-g-e.info

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.h-o-m-e-p-a-g-e.info, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is...

Wordpress Multiple Versions Pwnpress Exploitation Tookit (0.2pub)

No description provided by source. !/usr/bin/env ruby .---. .---. : : o : happy antiblogging, dear kids! ..-: 0 : :-.. / .-'' ' ---' ---' " -. Copyright c Lance M. Havok .' " ' " . " . ' " . : '.---.,,.,...,.,.,.,..---. ' ; . " . .' " .' ----- All rights reserved. . '...

wordpress-toolkit-gui.txt

Copyright c 2007 Lance M. Havok . All Rights Reserved. Exploits R' Us: bringing the amazing world of exploitation toys to your mom. Please read http://www.info-pull.com/code/DISCLAIMER for licensing terms. begin require 'pwnpress' require 'rubygems' require 'fox16' include Fox rescue puts "Need...