Cforms & CformsII <= 14.10.1 - CAPTCHA Bypass

The cformsII plugin slug: cforms and its fork slug: cforms2 have a CAPTCHA Bypass vulnerability. The MD5 hash for matching the answer is sent with the forms and so it can be overwritten. This is fixed in the fork cforms2 with version 14.11 see changelog for confirmation. The original delicious:da...

Moderate: Red Hat Security Advisory: pki security and enhancement update

Updated pki-ca, pki-util, and pki-common packages that fix three security issues and add several enhancements are now available for Red Hat Certificate System 8. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...

Grid. Система распределенных вычислений.

Введение. Материал появился в результате анализа замечаний и предложений, поступивших от тех, кто прочитал статью “Процесс создания ПО для распределенных вычислений C++”. Отсутствие явного распределения задачи сервером между клиентами и отсутствие конкретной задачи в принципе заставили автора ина...

PHP-Nuke 8.0 Remote Blind SQL Injection

PHP-Nuke new; my $average = 0; print "+ Calculating average load time it may take a while ...\n"; for my $i = 0; $i get$hosto; my $time = time; $average += int$time-$bef; return $average/5; sub Nuke::Usage print "+ Usage: perl nuke.pl \n"; print "+ the host must be the complete path to...

PHP-Nuke 8.0 -Web_Links Module - Blind SQL Injection

PHP-Nuke new; my $average = 0; print "+ Calculating average load time it may take a while ...\n"; for my $i = 0; $i get$hosto; my $time = time; $average += int$time-$bef; return $average/5; sub Nuke::Usage print "+ Usage: perl nuke.pl \n"; print "+ the host must be the complete path to...

Linux/x86 pwrite"/etc/shadow", hash, 32, 8 Shellcode 83

Linux/x86 pwrite"/etc/shadow", hash, 32, 8 Shellcode 83. Shellcode exploit for linux platform / | Title: Linux/x86 pwrite"/etc/shadow", hash, 32, 8 Shellcode 83 Bytes | Description: replace root's password with hash of "agix" in MD5 | Type: Shellcode | Author: agix | Platform: Linux X86 /...

RSA 2010: Experts Expect Several Ciphers to Be Cracked Soon

Cryptographers are expecting several of the major cryptographic systems in use today to be broken in the near future. In the Cryptographers Panel session at the RSA Conference Tuesday, Adi Shamir said that he is working with a team of researchers who have put together a paper that describes an...

Debian DSA-1926-1 : typo3-src - several vulnerabilities

Several remote vulnerabilities have been discovered in the TYPO3 web content management framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3628 The Backend subcomponent allows remote authenticated users to determine an encryption key via...

4images 1.7.1 Remote SQL Injection Vulnerability

No description provided by source. Exploit Title: 4images 1.7.1 Remote SQL Injection Vulnerability Date: 20-12-2009 Author: Master Mind Version: 1.7.1 CVE : N/A ============================================================= Script Name : 4images 1.7.1 Language : php Author : Master Mind Home :...

4images 1.7.1 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================ 4images 1.7.1 Remote SQL Injection Vulnerability ================================================ Exploit Title: 4images 1.7.1 Remote SQL Injection Vulnerability Date: 20-12-2009 Author:...

4Images 1.7.1 - SQL Injection

4Images 1.7.1 - SQL Injection Exploit Title: 4images 1.7.1 Remote SQL Injection Vulnerability Date: 20-12-2009 Author: Master Mind Version: 1.7.1 CVE : N/A ============================================================= Script Name : 4images 1.7.1 Language : php Author : Master Mind Home :...

4Images 1.7.1 - SQL Injection

Exploit Title: 4images 1.7.1 Remote SQL Injection Vulnerability Date: 20-12-2009 Author: Master Mind Version: 1.7.1 CVE : N/A ============================================================= Script Name : 4images 1.7.1 Language : php Author : Master Mind Home : www.shdowskill.com , www.vbspiders.com...

Debian Security Advisory DSA 1926-1 (typo3-src)

The remote host is missing an update to typo3-src announced via advisory DSA 1926-1. OpenVAS Vulnerability Test $Id: deb19261.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1926-1 typo3-src Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-3635

The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential...

CVE-2009-3635

The CVE-2009-3635 issue affects TYPO3 Install Tool subcomponent. Affected TYPO3 versions: 4.0.13 and earlier; 4.1.x before 4.1.13; 4.2.x before 4.2.10; 4.3.x before 4.3beta2. The vulnerability allows remote attackers to gain access using only the password’s MD5 hash as a credential. No explicit e...

CVE-2009-3635

The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential...

http-favicon NSE Script

Gets the favicon "favorites icon" from a web page and matches it against a database of the icons of known web applications. If there is a match, the name of the application is printed; otherwise the MD5 hash of the icon data is printed. If the script argument favicon.uri is given, that relative U...

ITechBids 8.0 (itechd.php productid) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " ITechBids v8.0 Blind SQL Injection Exploit \n"; print " \n"; print " itechd.php productid...

phpWebThings <= 1.5.2 MD5 Hash recovery/file disclosure remote vulnerabilities-vulnerability warning-the black bar safety net

phpWebThings = 1.5.2 MD5 Hash recovery/file disclosure remote vulnerabilities Note: 1, regardless of the php. ini how to set this vulnerability are effective; 2, The wtconfig.php contains the mysql login Brief description: phpWebThings including one that allows an attacker to executeSQL...

phpWebThings 1.5.2 - MD5 Hash Retrieve/File Disclosure

!/usr/bin/perl phpWebThings = 1.5.2 MD5 Hash Retrieve / File Disclosure Remote Exploit by staker ------------------------------ mail: stakerathotmaildotit url: http://phpwebthings.nl ------------------------------ NOTE: 1. it works regardless of php.ini settings 2. wtconfig.php contains mysql log...