874 matches found
My Gaming Ladder Combo System 7.0 - Remote Code Execution
My Gaming Ladder Combo System 7.0 - Remote Code Execution !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl Dork: "Ladder Scripts by...
My Gaming Ladder Combo System <= 7.0 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================== My Gaming Ladder Combo System ICQ: 10072 MSN/Main: email protected web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl Dork: "Ladder...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the 1 ICQ, 2 AIM, 3 MSN, 4 Google Talk, 5 Website Name, 6 Website Address, 7 Email Address, 8 Location, 9 Signature, and 10 Sub-Titles fields in the user profil...
CVE-2006-1810
CVE-2006-1810 involves multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA . The affected component is the user profile handling, with attacker-controlled inputs in fields such as ICQ, AIM, MSN, Google Talk, Website Name, Website Address, Email Address, Location, Signature, a...
Avast Linux Home Edition (vulnerability on a temporary folder creation)
Title : Avast Linux Home Edition, vulnerability on a temporary folder creation Protuct : Avast! Linux Home Edition Product : http://www.avast.com/eng/download-avast-for-linux-edition.html Version : 1.0.5, 1.0.5-1 avast4workstation-1.0.5-1.i586.rpm avast4workstation-1.0.5.tar.gz Vuln Found :...
Clansys 1.1 (showid) - SQL Injection
Clansys 1.1 showid - SQL Injection Internet Security | |---==============================================================---| title: clansys 1.1 remote sql injection release: 2006-04-10 author: snatcher snatcher at gmx.ch country: switzerland |+| application: clansys 1.1 description: a php / mysq...
Windows Messenger is installed
This host is installed with Microsoft Windows Messenger and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: winmessengerinstalled.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: Windows Messenger is installed Authors: Xue Yong Zhi Copyright: Copyright C 2003 Xue Yong Zh...
Blocked MSN port resistant I what, still on MSN-vulnerability warning-the black bar safety net
A web version of msn: Enter the username, password, login! The detailed method of use:...
CVE-2006-1272: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in member.php in MyBulletin Board MyBB 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 aim, 2 yahoo, 3 msn, or 4 website field...
CilemNews System 1.1 - yazdir.asp haber_id SQL Injection
CilemNews System 1.1 - yazdir.asp haberid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: cilem.pl Original Advisory: http://www.nukedx.com/?viewdoc=10 googledork inurl:yazdir.asp?haberid= 2.140...
CilemNews System 1.1 - 'yazdir.asp' haber_id SQL Injection
!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: cilem.pl Original Advisory: http://www.nukedx.com/?viewdoc=10 googledork inurl:yazdir.asp?haberid= 2.140 pages... use IO::Socket; if@ARGV + + Example: cilem.pl sux.c...
SQL injection in Invision Power Board v2.1.5
SQL injection in Invision Power Board v2.1.5 Software: Invision Power Board Web Site : http://forums.invisionpower.com Versions: v2.1.5 Type: SQL Injection Class: Remote example : http://www.victem.com/forum/index.php?showtopic=anytopic&pid=1&st=-1sql Discovered by : Mr.SNAKE GreeTz : greetz to a...
[Full-disclosure] MiniNuke CMS System all versions (pages.asp) SQL Injection
EDITED 20/02/2006 --Security Report-- Advisory: MiniNuke CMS System all versions pages.asp SQL Injection vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 19/02/06 10:31 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor:...
MiniNuke 1.8.2b - 'pages.asp' SQL Injection
!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Orginal advisory: http://www.nukedx.com/?viewdoc=9 Usage: mini.pl use IO::Socket; if@ARGV != 3 print " ++ +Welcome to MiniNuke CMS System all versions pages.asp SQL-inject...
CVE-2006-0363
The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEYCURRENTUSER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated ...
Default credentials
The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEYCURRENTUSER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated ...
CVE-2006-0363
MSN Messenger 7.5 stores passwords in an encrypted form under HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds. Local users may recover originals by calling CryptUnprotectData (as demonstrated by the MSN Password Recovery.exe tool). The issue highlights that decryption methods and keys resi...
CVE-2006-0363
The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEYCURRENTUSER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated ...
CVE-2006-0363: Undefined Security Weakness
The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEYCURRENTUSER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated ...
Ubuntu 4.10 / 5.04 : gaim vulnerability (USN-140-1)
A remote Denial of Service vulnerability was discovered in Gaim. A remote attacker could crash the Gaim client of an MSN user by sending a specially crafted MSN package which states an invalid body length in the header. Note that Tenable Network Security has extracted the preceding description...