5876 matches found
WordPress Core 2.2 - 'xmlrpc.php' SQL Injection
/ El error, bastante tonto por cierto, se encuentra en la función wpsuggestCategories, en el archivo xmlrpc.php: function wpsuggestCategories$args global $wpdb; $this-escape$args; $blogid = int $args0; $username = $args1; $password = $args2; $category = $args3; $maxresults = $args4;...
Comicsense 0.2 (index.php epi) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= Comicsense 0.2 index.php epi Remote SQL Injection Vulnerability ================================================================= Comicsense SQL Injection Advisory/Exploit b...
google-php-include-bugs searcher v 0.8 ( 0day )
No description provided by source. ! /usr/bin/perl ================================================================ google-php-include-bugs searcher v 0.8 coded by drmist\STNC www.security-teams.net ...
jcpf-sql.txt
!/bin/sh Joomla Component Phil-a-Form = 1.2.0.0 SQL Injection Exploit Discovered by: Cody "CypherXero" Rester Payload: Admin Username and MD5 Hash Retrieval Website: http://www.cypherxero.net Shoutouts to the milw0rm community, the PIMP forums and my blog, of course echo...
Joomla Component Phil-a-Form <= 1.2.0.0 SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= Joomla Component Phil-a-Form = 1.2.0.0 SQL Injection Exploit ============================================================= !/bin/sh Joomla Component Phil-a-Form = 1.2.0.0 SQL...
Joomla! Component Phil-a-Form 1.2.0.0 - SQL Injection
Joomla! Component Phil-a-Form 1.2.0.0 - SQL Injection !/bin/sh Joomla Component Phil-a-Form = 1.2.0.0 SQL Injection Exploit Discovered by: Cody "CypherXero" Rester Payload: Admin Username and MD5 Hash Retrieval Website: http://www.cypherxero.net Shoutouts to the milw0rm community, the PIMP forums...
Joomla Component Phil-a-Form <= 1.2.0.0 SQL Injection Exploit
No description provided by source. !/bin/sh Joomla Component Phil-a-Form = 1.2.0.0 SQL Injection Exploit Discovered by: Cody "CypherXero" Rester Payload: Admin Username and MD5 Hash Retrieval Website: http://www.cypherxero.net Shoutouts to the milw0rm community, the PIMP forums and my blog, of...
Joomla! Component Phil-a-Form 1.2.0.0 - SQL Injection
!/bin/sh Joomla Component Phil-a-Form = 1.2.0.0 SQL Injection Exploit Discovered by: Cody "CypherXero" Rester Payload: Admin Username and MD5 Hash Retrieval Website: http://www.cypherxero.net Shoutouts to the milw0rm community, the PIMP forums and my blog, of course echo...
tsp-admin.txt
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Host Path ID password Host: target server ip/hostname Path: path of template ID: A Valid Admin ID usally 1 works for the 'admin' nickname password: The PWD you want ...
Mandrake Linux Security Advisory : fetchmail (MDKSA-2007:105)
The APOP functionality in fetchmail's POP3 client implementation was validating the APOP challenge too lightly, accepting random garbage as a POP3 server's APOP challenge, rather than insisting it conform to RFC-822 specifications. As a result of this flaw, it made man-in-the-middle attacks easie...
fetchmail/mutt/evolution/...: APOP password disclosure vulnerability
The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...
[slackware-security] samba
New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-2444 https://vulners.com/cve/CVE-2007-2446...
Thyme Calendar 1.3 Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ===================================================== Thyme Calendar 1.3 Remote SQL Injection Vulnerability ===================================================== Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord...
Thyme Calendar 1.3 - SQL Injection
Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord codehook.110mb.com ------------------------------------------------------------------- OVERVIEW AND DEFINITION ------------------------------------------------------------------- A vulnerability in exists in Thyme Calendar 1.3 and possibly...
Thyme Calendar 1.3 - SQL Injection
Thyme Calendar 1.3 - SQL Injection Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord codehook.110mb.com ------------------------------------------------------------------- OVERVIEW AND DEFINITION ------------------------------------------------------------------- A vulnerability in exists i...
w3c security update
CentOS Errata and Security Advisory CESA-2007:0208 Updated w3c-libwww packages that fix a security issue and a bug are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. w3c-libwww is a general-purpose web library. Several buffer overflo...
RHEL 4 : w3c-libwww (RHSA-2007:0208)
Updated w3c-libwww packages that fix a security issue and a bug are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. w3c-libwww is a general-purpose web library. Several buffer overflow flaws in w3c-libwww were found. If a client...
Low: Red Hat Security Advisory: w3c-libwww security and bug fix update
Updated w3c-libwww packages that fix a security issue and a bug are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. w3c-libwww is a general-purpose web library. Several buffer overflow flaws in w3c-libwww were found. If a client...
Symantec Norton Ghost本地溢出及信息泄露漏洞
Symantec Norton Ghost是一个备份恢复系统，允许用户将系统恢复到之前的快照状态。 Norton Ghost的服务管理器实现上存在缓冲区溢出漏洞，如果攻击者能够向Norton Ghost的服务管理器中的函数提供超长字符串的话，就可能触发缓冲区溢出，导致以系统级权限执行任意指令。 Norton...
CVE-2007-2294
The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service crash by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dereference...