[SECURITY] Fedora 15 Update: jabberd-2.2.14-1.fc15

The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...

[SECURITY] Fedora 14 Update: ocsinventory-agent-1.1.2.1-1.fc14

Open Computer and Software Inventory Next Generation is an application designed to help a network or system administrator keep track of computer configuration and software installed on the network. It also allows deploying softwares, commands or files on Windows and Linux client computers...

Fedora Update for ocsinventory-agent FEDORA-2010-16335

Check for the Version of ocsinventory-agent OpenVAS Vulnerability Test Fedora Update for ocsinventory-agent FEDORA-2010-16335 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

AneCMS - '/registre/next' SQL Injection

Exploit Title: anecms SQli Date: 23/08/2010 Author: Sweet Contact : [email protected] Software Link: anecms.com Download: anecms.com/anecms.zip Version: All Tested on: WinXp sp3 Description : anecms is an open source blog manager...

AneCMS 1.0/1.3 - 'register/next' SQL Injection

source: https://www.securityfocus.com/bid/42615/info AneCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

AneCMS - registrenext SQL Injection

AneCMS - registrenext SQL Injection Exploit Title: anecms SQli Date: 23/08/2010 Author: Sweet Contact : [email protected] Software Link: anecms.com Download: anecms.com/anecms.zip Version: All Tested on: WinXp sp3 Description : anecms is an open source blog manager...

DeepBurner pro 1.9.0.228 - '.dbr' file Buffer Overflow (Universal)

/ Deepburner pro 1.9.0.228 dbr file buffer overflow exploituniversal This is buffer: header 253 bytes + junk+ next seh + seh addr + tail 957 bytes dbr/dbi file Date: 29.01.2010 Dicovery Credits: fl0 fl0w Exploit Credits : fl0 fl0w ?Download latest vuln vs from: http://www.deepburner.com/?r=downlo...

Deepburner pro 1.9.0.228 dbr file Buffer Overflow Exploit (Universal)

Exploit for unknown platform in category local exploits ===================================================================== Deepburner pro 1.9.0.228 dbr file Buffer Overflow Exploit Universal ===================================================================== / Deepburner pro 1.9.0.228 dbr fi...

LiveZilla 3.1.8.3 - Cross-Site Scripting

Info: LiveZilla, the Next Generation Live Help / Live Chat and Live Support System connects you to your website visitors. Use LiveZilla to provide Live Chats and monitor your website visitors in real-time. Convert visitors to customers - with LiveZilla! Credits: InterN0T External Links:...

LiveZilla 3.1.8.3 - Cross-Site Scripting

LiveZilla 3.1.8.3 - Cross-Site Scripting Info: LiveZilla, the Next Generation Live Help / Live Chat and Live Support System connects you to your website visitors. Use LiveZilla to provide Live Chats and monitor your website visitors in real-time. Convert visitors to customers - with LiveZilla!...

CVE-2009-4320: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in searchform.php in The Next Generation of Genealogy Sitebuilding TNG 7.1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

The Next Generation Of Genealogy Sitebuilding XSS

/\ == \ /\ \ /\ \ \ \ alert'XSS' ------------------------------------------------------------------------------------------ Demo : + http://horwitzfam.org/searchform.php?msg="/alert'XSS' ------------------------------------------------------------------------------------------- EOF Windows Live:...

humanCMS - Authentication Bypass

humanCMS - Authentication Bypass f KHatr Zfaft Zenta9 f Zfaft Galo ya khir CHirbakhzer + humanCMS Auth Bypass SQL Injection Vulnerability + Discovered by next + www.sa3eka.com www.m4r0c-s3curity.cc + vie.0athotmail.com + Home Page : http://www.squarelabel.com "humanCMS site description" + Auth...

humanCMS (Auth Bypass) SQL Injection Vulnerability

No description provided by source. f KHatr Zfaft Zenta9 f Zfaft Galo ya khir CHirbakhzer + humanCMS Auth Bypass SQL Injection Vulnerability + Discovered by next + www.sa3eka.com www.m4r0c-s3curity.cc + vie.0athotmail.com + Home Page : http://www.squarelabel.com "humanCMS site description" + Auth...

Playlistmaker 1.5 - '.m3u' / '.M3L' Local Stack Overflow (SEH)

!/usr/bin/perl discoverd by: germayax soft:Playlistmaker1.5 m3l,m3u files local buffer overflow exploit SEH Download: http://proletsoft.freeservers.com/mmb/playlistmaker.html tested on: xp sp3 EN bug date:August 06 09 greetz:hack4love ,devil fucker ,angel win32exec - EXITFUNC=seh CMD=calc Size=16...

Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit #2

Exploit for unknown platform in category local exploits ================================================================== Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit 2 ================================================================== + Vulnerability : .mpf File Local Stack...

DEBIAN-CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

Elecard AVC HD Player .XPL Stack Buffer Overflow (SEH) PoC

No description provided by source. /ELECARD AVC HD PLAYER STACK BUFFER OVERFLOW SEH OVERWRITE Name: elecard.c CREDITS: the one and only fl0 fl0w 004533AE . F3:A5 REP MOVS DWORD PTR ES:EDI,DWORD PTR DS SEH chain of main thread Address SE handler 0012CB54 FFFFFFFF Open in debugger and you'll see SE...

CVE-2008-6515: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Fritz Berger yet another php photo album - next generation yappa-ng allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI...

CVE-2008-6495: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter...