Pilot Group eTraining (news_read.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Pilot Group eTraining newsread.php id SQL Injection Vulnerability ====================================================================...

Apple Mac OS X Java Applet HMAC供给器处理远程代码执行漏洞

BUGTRAQ ID: 31379 CVE ID：CVE-2008-3637 CNCVE ID：CNCVE-20083637 Apple Mac OS X是一款商业性质的操作系统。 Apple Mac OS X Java Applet HMAC供给器使用未初始化变量，远程攻击者可以利用漏洞以应用程序上下文执行任意代码。 基于HASH的消息验证代码HMAC供给器用于生成MD5和SHA-A HASH，其中存在一个错误检查可导致使用未初始化变量。构建恶意的Java applet，诱使用户访问，可导致任意代码执行。 Apple Mac OS X Server 10.5.5 Apple Mac O...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues. More details about the issues may be found here: http://www.mozilla.org/security/known-vulnerabilities/seamonkey11.html Here are the details from the Slackware 12.1 ChangeLog:...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. More details about the issues may be found on the Mozilla site: http://www.mozilla.org/security/known-vulnerabilities/firefox20.html Here are the details from the Slackware 12.1...

Gentoo Security Advisory GLSA 200604-09 (cyrus-sasl)

The remote host is missing updates announced in advisory GLSA 200604-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200502-02 (uw-imap)

The remote host is missing updates announced in advisory GLSA 200502-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Invision Power Board 2.* commands execution exploit by RST/GHC

No description provided by source. !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions = 2.1.5 tested on 2.1.4, 2.0.2 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru use IO::Socket; use Getopt::Std; getopts"l:h:p:d:f:v:"; $host = $opth; $dir...

Gentoo Security Advisory GLSA 200502-02 (uw-imap)

The remote host is missing updates announced in advisory GLSA 200502-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

WebPortal CMS 0.7.4 - 'download.php' SQL Injection

!/usr/bin/perl --==+============================================================================+==-- --==+ WebPortal = 0.7.4 Remote SQL Injection Exploit +==-- --==+============================================================================+==-- Discovered By: StAkeR [email protected] +...

webportalcms074-sql.txt

!/usr/bin/perl --==+============================================================================+==-- --==+ WebPortal = 0.7.4 Remote SQL Injection Exploit +==-- --==+============================================================================+==-- Discovered By: StAkeR [email protected] +...

FreeBSD Ports: imap-uw

The remote host is missing an update to the system as announced in the referenced advisory. VID d1bbc235-c0c9-45cd-8d2d-c1b8fd22e616 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Cross site request forgery (csrf)

Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a direct request to conf/admins.php...

CVE-2008-3859

Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a direct request to conf/admins.php...

Thickbox Gallery v2 (admins.php) Admin Data Disclosure Vulnerability

No description provided by source. + Thickbox Gallery v2 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Arbitrary Admin Data Disclosure - Go here and you will see the admin data login name + crypted...

thickboxgallery-disclose.txt

Thickbox Gallery v2 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Arbitrary Admin Data Disclosure - Go here and you will see the admin data login name + crypted password as MD5...

Thickbox Gallery v2 (admins.php) Admin Data Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Thickbox Gallery v2 admins.php Admin Data Disclosure Vulnerability ==================================================================== + Arbitrary Admin Data Disclosure ...

Thickbox Gallery 2.0 - 'Admins.php' Admin Data Disclosure

Thickbox Gallery v2 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Arbitrary Admin Data Disclosure - Go here and you will see the admin data login name + crypted password as MD5...

Thickbox Gallery 2.0 - Admins.php Admin Data Disclosure

Thickbox Gallery 2.0 - Admins.php Admin Data Disclosure + Thickbox Gallery v2 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Arbitrary Admin Data Disclosure - Go here and you will see the admin data...

Cygwin包处理存在安全漏洞

CVE ID：CVE-2008-3323 CNCVE ID：CNCVE-20083323 Cygwin是一款运行于Windows下的免费的UNIX的子系统。 Cygwin存在安全问题，远程攻击者可以利用漏洞破坏受影响系统。 Tarball软件包通过setup.exe安装和升级，通过明文HTTP或FTP从镜像下载包列表和包存在问题，包列表中博阿含MD5校验来验证包的完整性，如果伪造的服务器回答负责包升级的HTTP请求并使用修改的MD5字符串进行响应， setup.exe就会下载和安装恶意包，导致任意代码以登录用户进程权限执行。 要成功利用此漏洞需要攻击者伪造镜像或进行DNS伪造攻击。...

joomlaez-sql.txt

!/usr/bin/perl Note:Sometimes you have to change the regexp to viewcategory/catid,".$cid." use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Joomla Component EZ Store Blind SQL Injection Exploit \n"; print " Author:His0k4 ALGERIAN HaCkeR \n"; print " \n"; print "...