458 matches found
Mambo Component Mambads <= 1.5 Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= Mambo Component Mambads = 1.5 Remote SQL Injection Vulnerability ================================================================= Mambads = 1.5 Sql Injection Autor:Sniper45...
CVE-2007-4966: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skilldelete parameter...
chacha-xss.txt
ChaCha.com Search ?query= Cross-Site Scripting Vulnerability + Author: d3hydr8 + Contact: d3hydr8atgmaildotcom + Original Post: http://darkcode.h1x.com/forum/index.php?action=vthread&forum=12&topic=275 + Vendor Site: http://www.chacha.com/ + Class: Input Validation Error + Overview: The first...
People Directory search can be misused to retrieve email addresses of all users
Even when email addresses should be hidden because of global settings, it is possible to retrieve email addresses of all the users in the system by misusing search in people directory. It seems that the email address is one of the attributes that are being indexed by the search engine. So if one...
OpenLDAP <= 2.4.3 (KBIND) Remote Buffer Overflow Exploit
No description provided by source. / openldap-kbind-p00f.c - OpenLDAP kbind remote exploit Only works on servers compiled with --enable-kbind enable LDAPv2+ Kerberos IV bind deprecated no by Solar Eclipse [email protected] Shoutouts to LSD for their l33t asm code and to all 0dd people...
OpenLDAP 2.4.3 - 'KBIND' Remote Buffer Overflow
/ openldap-kbind-p00f.c - OpenLDAP kbind remote exploit Only works on servers compiled with --enable-kbind enable LDAPv2+ Kerberos IV bind deprecated no by Solar Eclipse Shoutouts to LSD for their l33t asm code and to all 0dd people Private 0dd code. / include include include include include...
bingbox.txt
Bingbox.com Homepage: http://www.bingbox.com Affected files: Profile input boxes: - City input Registering Viewing Birthdays Adding a friend Viewing people online ----------------------------------------------- XSS with cookie disclosure via inviting friends:...
CVE-2006-0584
CVE-2006-0584 affects PeopleSoft People Tools 8.4x where the PSCipher function uses PKCS #5 with a fixed DES key to store passwords. This enables local attackers to perform dictionary-style guessing by comparing output strings. The provided documents describe the root cause (fixed DES key) and im...
CVE-2006-0584
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS 5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings...
CVE-2006-0584: Undefined Security Weakness
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS 5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings...
Peoplesoft People Tools PSCipher() function weak encryption
Weak DES block cypher without feedback is used...
[SA18576] Tor Hidden Service Disclosure Weakness
TITLE: Tor Hidden Service Disclosure Weakness SECUNIA ADVISORY ID: SA18576 VERIFY ADVISORY: http://secunia.com/advisories/18576/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Tor 0.x http://secunia.com/product/5269/ DESCRIPTION: Lasse Overlier and...
trac -- search module SQL injection vulnerability
Secunia reports: A vulnerability has been reported in Trac, which can be exploited by malicious people to conduct SQL injection attacks. Some unspecified input passed in the search module isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by...
[SA17779] Ampache Snoopy "_httpsrequest()" Command Injection Vulnerability
TITLE: Ampache Snoopy "httpsrequest" Command Injection Vulnerability SECUNIA ADVISORY ID: SA17779 VERIFY ADVISORY: http://secunia.com/advisories/17779/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Ampache 3.x http://secunia.com/product/5347/ DESCRIPTION: A...
flyspray -- cross-site scripting vulnerabilities
A Secunia Advisory reports: Lostmon has reported some vulnerabilities in Flyspray, which can be exploited by malicious people to conduct cross-site scripting attacks. Some input isn't properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script...
FreeBSD : opera -- download dialog spoofing vulnerability (a2aa24fd-00d4-11da-bc08-0001020eed82)
A Secunia Advisory reports : Secunia Research has discovered a vulnerability in Opera, which can be exploited by malicious people to trick users into executing malicious files. The vulnerability is caused due to an error in the handling of extended ASCII codes in the download dialog. This can be...
php2014.txt
/ -------------------------------------------------------- Neo Security Team NST® - Advisory 14 - 17/04/05 -------------------------------------------------------- Program: phpBB 2.0.14 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.14 & Lower versions Risk: Low Risk!! Impact:...
