4939 matches found
Crux Gallery <= 1.32 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications =========================================================== Crux Gallery Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create a simple perl script to send GET and...
Gentoo Security Advisory GLSA 200408-21 (cacti)
The remote host is missing updates announced in advisory GLSA 200408-21. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-3611
Login Window in Apple Mac OS X 10.4.11 does not clear the current password when a user makes a password-change attempt that is denied by policy, which allows opportunistic, physically proximate attackers to bypass authentication and change this user's password by later entering an acceptable new...
Authentication flaw
Login Window in Apple Mac OS X 10.4.11 does not clear the current password when a user makes a password-change attempt that is denied by policy, which allows opportunistic, physically proximate attackers to bypass authentication and change this user's password by later entering an acceptable new...
wordpress261-sql.txt
WordPress 2.6.1 SQL Column Truncation Vulnerability PoC found by irk4zatyahoo.pl homepage: http://irk4z.wordpress.com/ this is not critical vuln ; first, read this discovery: http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/ in this hack we can remote change admin...
Wordpress 2.6.1 SQL Column Truncation Vulnerability
Exploit for unknown platform in category web applications =================================================== Wordpress 2.6.1 SQL Column Truncation Vulnerability =================================================== WordPress 2.6.1 SQL Column Truncation Vulnerability PoC this is not critical vuln ;...
CVE-2008-3938
Cross-site request forgery CSRF vulnerability in useradmin.php in Open Media Collectors Database OpenDb 1.0.6 allows remote attackers to change arbitrary passwords via an updatepassword action...
omcd-xssxsrf.txt
======================================================================= . .. | | / / | | | | / \ / / /\ / / \ | | | / / \ /\ \| | / // / /\ \ / / / // http://wwwlowsec.org ======================================================================== Author: C1c4Tr1Z Date: 28/08/08...
CVE-2008-3736
Multiple cross-site request forgery CSRF vulnerabilities in 1 System Consultants La!Cooda WIZ 1.4.0 and earlier and 2 SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that a change passwords or b change configurations...
belkin-bypass.txt
html code to bypass the webinterface password protection of the Belkin wireless G router + adsl2 modem. It worked on model F5D7632-4V6 with upgraded firmware 6.01.08. Change dns nameservers ip's can't be the same Clear log file Change time, pwdif you have old pwd, remote management, UPnP: and...
ppimp-upload.txt
Ppim = 1.0 upload/change password Multiple Vulnerabilities cript : Ppim v1.0 Download : http://scripts.ringsworld.com/organizers/ppim.zip By Stack Poc 1: change password for change password go to this link http://localhost/ppim/changepassword.php writhe your password and confirm it Poc 2 : upload...
joomla-changepasswd.txt
Joomla 1.5.x Remote Admin Password Change Author: d3m0n [email protected] Greets: GregStar, gorion, d3d!k Polish "hackers" used this bug to deface turkish sites BUAHAHHA nice 0-day pff File : /components/comuser/controller.php Line : 379-399 function confirmreset // Check for request forgeries...
Joomla 1.5.x (Token) Remote Admin Change Password Vulnerability
Exploit for unknown platform in category web applications =============================================================== Joomla 1.5.x Token Remote Admin Change Password Vulnerability =============================================================== Joomla 1.5.x Remote Admin Password Change Greets:...
Joomla! 1.5.x - 'Token' Remote Admin Change Password
Joomla 1.5.x Remote Admin Password Change Author: d3m0n [email protected] Greets: GregStar, gorion, d3d!k Polish "hackers" used this bug to deface turkish sites BUAHAHHA nice 0-day pff File : /components/comuser/controller.php Line : 379-399 function confirmreset // Check for request forgeries...
Joomla! 1.5.x - Token Remote Admin Change Password
Joomla! 1.5.x - Token Remote Admin Change Password Joomla 1.5.x Remote Admin Password Change Author: d3m0n [email protected] Greets: GregStar, gorion, d3d!k Polish "hackers" used this bug to deface turkish sites BUAHAHHA nice 0-day pff File : /components/comuser/controller.php Line : 379-399 function...
pPIM 1.0 - UploadChange Password
pPIM 1.0 - UploadChange Password Ppim = 1.0 upload/change password Multiple Vulnerabilities cript : Ppim v1.0 Download : http://scripts.ringsworld.com/organizers/ppim.zip By Stack Poc 1: change password for change password go to this link http://localhost/ppim/changepassword.php writhe your...
Ppim <= 1.0 (upload/change password) Multiple Vulnerabilities
No description provided by source. Ppim = 1.0 upload/change password Multiple Vulnerabilities cript : Ppim v1.0 Download : http://scripts.ringsworld.com/organizers/ppim.zip By Stack Poc 1: change password for change password go to this link http://localhost/ppim/changepassword.php writhe your...
CVE-2008-3262
Cross-site request forgery CSRF vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a requirement for the previous password...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a requirement for the previous password...