296 matches found
CVE-2010-4551: Undefined Security Weakness
IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by omitting the Internet ID field in the person document, and then using an Apple device to 1 accept or 2 decline an invitation...
CMS Person SQL Injection
======================================= CMS Person SQL Injection Vulnerability ======================================= +Title : CMS Person SQL Injection Vulnerability +Software : CMS Person +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeathotmaildotcom +Home :...
Drupal Storm 1.32 Cross Site Scripting
Drupal Storm module is a CRM type module that allows you to make orgs, people, tasks, and project. It is used on thousands of sites according to http://drupal.org/project/usage/storm. Storm version 1.32 have a lots of cross site scripting vulns. Sploits - Make or view a Storm organization at...
Feds Nab 4 From 19-Person Indictment in Mexico
Four people from North Texas indicted last week by a federal grand jury in Dallas were arrested Friday morning in Cancun, Mexico, according to the FBI. Michael Faulkner, 36, and his wife, Chastity Faulkner, 34, both of Southlake, were central figures in the 19-person indictment brought by U.S...
Autonomous LAN party <= 0.98.3 Remote File Inclusion Vulnerability
No description provided by source. ============================================================================================================ x Autonomous LAN party = 0.98.3 Remote File Include Vulnerability || ! Download Script : ||...
ZeroBoardXE 1.1.5 Cross Site Scripting
ZeroBoardXE 1.1.5 09.01.22 XSS Vulnerability bY [email protected] Greet to : Flyh4t / ZeroBoardXE VERSION 1.1.5 09.01.22is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. I find a XSS vulnerability. By using this...
Tremulous: User-assisted execution of arbitrary code
Background Tremulous is a team-based First Person Shooter game. Description It has been reported that Tremulous includes a vulnerable version of the ioQuake3 engine GLSA 200605-12, CVE-2006-2236. Impact A remote attacker could entice a user to connect to a malicious games server, possibly resulti...
Server termination in America's Army 2.8.3.1
Luigi Auriemma Applications: America's Army http://www.americasarmy.com Versions: = 2.8.3.1 Platforms: Windows tested, Linux and Mac Bug: server termination due to failed assertion Exploitation: remote, versus server Date: 02 Aug 2008 Author: Luigi Auriemma e-mail: [email protected] web:...
Crysis 1.1.1.5879 - Remote Format String Denial of Service (PoC)
The Crysis engine passes along internal debug strings through the game. One of them is passed to vsprintf in the crt lib: 30503263 8D8C24 10100000 LEA ECX,DWORD PTR SS:ESP+1010 3050326A 51 PUSH ECX 3050326B 50 PUSH EAX 3050326C 8D5424 08 LEA EDX,DWORD PTR SS:ESP+8 30503270 52 PUSH EDX 30503271 FF...
Sql injection
SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...
CVE-2008-0845: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...
xcart-rfi.txt
xCart Remote file inclusion Download script : http://www.x-cart.com// Discovered By : aLiiF a.k.a arif @debuteam 07/09/2007 HomePage : http://www.debuteam.net// Thx to : Debu Newbie Payment Yogac nyubi Rozi ^S0ng0ku^ Kuris Sonix Toxicity newbi3 R4yn4ld0 DisJocKey s3ng0k homeedition Holong...
aigaion-sql.txt
--==+================================================================================+==-- --==+ Aigaion = 1.3.3 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody "CypherXero" Rester PAYLOAD: Admin username a...
Aigaion 1.3.3 - topic topic_id SQL Injection
Aigaion 1.3.3 - topic topicid SQL Injection --==+================================================================================+==-- --==+ Aigaion = 1.3.3 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody...
CVE-2003-0624: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter...
