7873 matches found
FreeBSD Ports: mod_security
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Cross-Site Scripting vulnerabilities in WordPress ME for XOOPS
ŠŠ“ŃŠ°Š²ŃŃŠ²ŃŠ¹ŃŠµ 3APA3A! Š”Š¾Š¾Š±ŃŠ°Ń Š²Š°Š¼ Š¾ Š½Š°Š¹Š“ŠµŠ½Š½ŃŃ Š¼Š½Š¾Ń Cross-Site Scripting ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŃŃ Š² ŠæŠ»Š°Š³ŠøŠ½Šµ WordPress ME Š“Š»Ń XOOPS. XSS: POST Š·Š°ŠæŃŠ¾Ń Š½Š° ŃŃŃŠ°Š½ŠøŃŠµ http://site/modules/wordpress/wp-comments-post.php "scriptalertdocument.cookie/script Š ŠæŠ°ŃŠ°Š¼ŠµŃŃŠ°Ń : author, comment, privatekey Šø back. ŠŠŗŃŠæŠ»Š¾ŠøŃ:...
webmail-passwordleak.txt
Name : Horde & Roundcube password leak vulnerability Author : Xc0re Security Reasearch Group Homepage : http://www.xc0re.net Description : Webmail clients such as Horde & Round Cube leak their username and password in a fashion that with every post request they also send a base64 encoded...
aflistenerdirectorytraversal-08_006.txt
Portcullis Security Advisory - 08-006 Vulnerable System: Affinium Campaign Vulnerability Title: The Listener is vulnerable to directory traversal. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Tim Brown - Portcullis Computer-Security Ltd...
Oracle WebLogic Server Apache Connector POST buffer overflow
Added: 07/25/2008 CVE: CVE-2008-3257 BID: 30273 OSVDB: 47096 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem A buffer overflow in the Apache Connector for WebLogic Server allows remote attackers to execute arbitrary commands by sending a...
Oracle WebLogic Server Apache Connector POST buffer overflow
Added: 07/25/2008 CVE: CVE-2008-3257 BID: 30273 OSVDB: 47096 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem A buffer overflow in the Apache Connector for WebLogic Server allows remote attackers to execute arbitrary commands by sending a...
Oracle WebLogic Server Apache Connector POST buffer overflow
Added: 07/25/2008 CVE: CVE-2008-3257 BID: 30273 OSVDB: 47096 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem A buffer overflow in the Apache Connector for WebLogic Server allows remote attackers to execute arbitrary commands by sending a...
Oracle WebLogic Server Apache Connector POST buffer overflow
Added: 07/25/2008 CVE: CVE-2008-3257 BID: 30273 OSVDB: 47096 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem A buffer overflow in the Apache Connector for WebLogic Server allows remote attackers to execute arbitrary commands by sending a...
hifriend-xploit.txt
!/usr/bin/perl =pod ---------------------------- ------Header Injection------ ---------------------------- Script: hifriend.pl Vendor: Hibyte Software Version: The free one you get from many webpages Dork: "hifriend.pl" + "cgi-bin" Found & coded by Perforin www.DarK-CodeZ.com www.vx.perforin.de.v...
mt-daapd buffer overflow
Buffer overflow on POST request processing...
CVE-2008-2631
The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Null pointer dereference
The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2008-2631
The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
GLSA-200805-02 : phpMyAdmin: Information disclosure
The remote host is affected by the vulnerability described in GLSA-200805-02 phpMyAdmin: Information disclosure Cezary Tomczak reported that an undefined UploadDir variable exposes an information disclosure vulnerability when running on shared hosts. Impact : A remote attacker with CREATE TABLE...
[ GLSA 200805-02 ] phpMyAdmin: Information disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200805-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
phpMyAdmin: Information disclosure
Background phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser. Description Cezary Tomczak reported that an undefined UploadDir variable exposes an information disclosure vulnerability when running on shared hosts. Impact A remote attack...
HLDS WebMod 0.48 (rconpass) Remote Heap Overflow Exploit
No description provided by source. ?php HLDS WebMod 0.48 rconpass Remote Heap Overflow Exploit Tested on HLDS Launcher 4.1.1.1, WebMod 0.48, Windows XP SP2 Hebrew shir, skod.uk at gmail dot com 17/12/2007 Registers rconpass = "A"x16444: EAX 67E04955 wmm.67E04955 ECX 41414141 EDX 41414141 EBX...
zomplog-xss.txt
---------------------------------------------------------------- Script : Zomplog 3.8.2 Type : XSS Vulnerability ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...
CVE-2008-1924
Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable...
Design/Logic Flaw
Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable...