5778 matches found
XOOPS module Articles 1.02 - print.php?id SQL Injection
XOOPS module Articles 1.02 - print.php?id SQL Injection !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug :...
Unfixed XSS vulnerability at www.hca.org.sg
Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.hca.org.sg, which at the time of submission ranked 3005016 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is current...
Activist Mobilization Platform (AMP) 3.2 - Remote File Inclusion
Activist Mobilization Platform AMP 3.2 - Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV71$2007 --------------------------------------------------------------------------- ECHOADV71$2007 AMP v3.2 basepath Remote File Inclusion...
Activist Mobilization Platform (AMP) 3.2 - Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV71$2007 --------------------------------------------------------------------------- ECHOADV71$2007 AMP v3.2 basepath Remote File Inclusion Vulnerability...
Information displayed in the security field should be approached with caution. – Opera Security Advisories
Information displayed in the security field should be approached with caution. – Opera Security Advisories OPCOM Team | February 9, 2007 Summary Even though a Certificate Authority has verified and signed it, a usershould not trust the Organization name without checking the domain name.A fraudule...
Interview:w00w00
w00w00 One of the first to respond to a request for an interview was w00w00 pronounced "woo-woo", their website . A group highly respected among those who are interested in security issues - they have discovered a lot of holes in security systems, many interesting tactics of hacker attacks. The...
Debian DSA-980-1 : tutos - several vulnerabilities
Joxean Koret discovered several security problems in tutos, a web-based team organization software. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2004-2161 A SQL injection vulnerability allows the execution of SQL commands through the linkid parameter ...
SmartDefense DShield Storm Center: Share Malicious IP Addresses with Other Organizations
Storm Centers collect logging information about attacks, provided voluntarily by organization from all around the world. Storm Centers compare and present reports on real-time threats to network security. The SmartDefense Storm Center Module enables information flow between the network Storm...
[SECURITY] [DSA 980-1] New tutos packages fix multiple vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 980-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 22nd, 2006 http://www.debian.org/security/faq -...
MySQL 5.0 information leak?
Hi. I just upgraded to mysql 5.0.18 and started using all those cool new features. : But concerning VIEWs, I think the informationschema is too verbose to the user. I started creating a VIEW that searches information from several tables, mangles the data and gives the user a clean table with his...
Foreign hackers resources-vulnerability warning-the black bar safety net
allhack.com This website provides a library and a download area. The library for beginners provides hacking knowledge and computer technology basics. The download area includes the Scan Tool, FLOOD tool, decryption tools, denial of service attacks and the like. alw. nih,gov In the security...
e-Post SPA-PRO 4.01 - 'imap' Remote Buffer Overflow
// // e-Post SPA-PRO Mail @Solomon SPA-IMAP4S 4.01 Service Buffer Overflow // Vulnerability // // Bind Shell POC Exploit for Japanese Win2K SP4 // 31 May 2005 // // This POC code binds shell on port 2001 of a vulnerable e-Post // SPA-PRO Mail @Solomon IMAP server. // // This POC assumes default...
HP-UX B11.11 - usrbinct Format String Privilege Escalation
HP-UX B11.11 - usrbinct Format String Privilege Escalation / File : xhp-ux11inlsct.c Usage : cc xhp-ux11inlsct.c -o xct ; ./xct Purpose : Get a local rootshell from /usr/bin/ct,using HP-UX location language format string bug. Author : watercloud xfocus org Tested : On HP-UX B11.11 . / include...
Remote Hole in IRC Client and Stuff
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GOBBLES http://www.bugtraq.org ================================ GOBBLES Security Labs GSL is currently the largest non-profit security team in the world, with over 17 active members that are dedicated to bringing cutting edge material to the public th...
CVE-2021-0447
CVE-2021-0447 entry is rejected/not used per the description.
CVE-2022-0303
CVE-2022-0303 entry is rejected/not used; does not represent an active vulnerability.
CVE-2021-35685
CVE-2021-35685 is a duplicate of CVE-2022-21371 and is treated as rejected/withdrawn by the CVE Numbering Authority per its description. Connected sources confirm an active vulnerability entry under CVE-2022-21371, which affects Oracle WebLogic Server (Web Container) and lists affected versions 1...
CVE-2024-1271
CVE-2024-1271 is rejected/not used; this entry does not represent an active vulnerability.