4421 matches found
2532/Gigs 1.2.2 Stable - Remote Authentication Bypass
/ ------------------------------------------------------------------------------------------------ 2532|Gigs 1.2.2 Stable Remote Login Bypass Vulnerability ------------------------------------------------------------------------------------------------ by athos - stakerathotmaildotit...
CVE-2008-5416
Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine MSDE 2000 SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine WMSDE on Windows Server 2003 SP1 and SP2; and Windows Internal Database WYukon SP2...
CVE-2008-5296
Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information...
Symantec Backup Exec远程绕过认证及缓冲区溢出漏洞
BUGTRAQ ID: 32346,32347 Symantec Backup Exec是一款全面的数据备份解决方案。 Backup Exec的远程代理所使用的一些认证方式中存在多个错误,可能允许用户绕过认证获得非授权访问,读取或删除任意文件;此外数据管理协议中还存在缓冲区溢出漏洞。远程攻击者可以通过前一个漏洞认证为特权用户,然后触发缓冲区溢出导致执行任意指令。 Symantec Backup Exec for Windows Servers 12.5 Symantec Backup Exec for Windows Servers 12.0 Symantec Backup Exec f...
Natterchat 1.1 - Remote Authentication Bypass
Natterchat 1.1 - Remote Authentication Bypass ============================================================================== NATTERCHAT v1.1 Admin Home Bypass Vulnerability ============================================================================== » Script : NATTERCHAT v1.1 » Discover:...
Natterchat 1.1 - Remote Authentication Bypass
============================================================================== NATTERCHAT v1.1 Admin Home Bypass Vulnerability ============================================================================== » Script : NATTERCHAT v1.1 » Discover: Mountassif Moad === XPL === »...
CVE-2008-5173
Unspecified vulnerability in testMaker before 3.0p16 allows remote authenticated users to execute arbitrary PHP code via unspecified attack vectors...
USN-669-1: gnome-screensaver vulnerabilities
It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. CVE-2007-6389 Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication...
AJ ARTICLE Remote Authentication Bypass Vulnerability
No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...
AJ Article 1.0 - Remote Authentication Bypass
AJ Article 1.0 - Remote Authentication Bypass ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
AJ ARTICLE Remote Authentication Bypass Vulnerability
Exploit for unknown platform in category web applications ===================================================== AJ ARTICLE Remote Authentication Bypass Vulnerability ===================================================== =============================================================================...
AJ Article 1.0 - Remote Authentication Bypass
============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...
MyioSoft Ajax Portal 3.0 - Authentication Bypass
MyioSoft Ajax Portal 3.0 - Authentication Bypass MyioSoft Ajax Portal 3.0 Remote Auth Bypass Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 07.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI...
Sql injection
SQL injection vulnerability in the "Manage pages" feature admin/pages in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the searchpublishedat parameter...
Apoll 0.7b (SQL Injection) Remote Auth Bypass Vulnerability
No description provided by source. Apoll version Remote Auth Bypass Vulnerability version: beta 0.7 script dwonload: http://www.miticdjd.com/download/3/ ---------------------------------------------------------- Discovered By: ZoRLu Date: 03.11.2008 Home: www.z0rlu.blogspot.com contact:...
TR News 2.1 - login.php Remote Authentication Bypass
TR News 2.1 - login.php Remote Authentication Bypass ?php errorreporting0; / ------------------------------------------------------ TR News = 2.1 login.php Remote Login ByPass Exploit ------------------------------------------------------ By StAkeRathotmaildotit...
TR News 2.1 - 'login.php' Remote Authentication Bypass
?php errorreporting0; / ------------------------------------------------------ TR News = 2.1 login.php Remote Login ByPass Exploit ------------------------------------------------------ By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/trscript-21.zip File admin/login.php 1. ? 2...
AJ ARTICLE (SQL Injection) Remote Auth Bypass Vulnerability
No description provided by source. Discovered by : Hakxer Type Gap : Auth Bypass Script : AJ ARTICLE Greetz : Allah , Egyptian x hacker , Br1ght D@rk First Go to http://www.ajsquare.com/products/demo/admin/index.php In username Write : admin ' or ' 1=1 In Password Any thing : Hakxer Click Login ....
CVE-2008-4791
Drupal security advisory CVE-2008-4791 affects Drupal 5.x before 5.11 and 6.x before 6.5. The user module allows remote authenticated users to bypass login access rules and log in via unknown vectors. This is reported alongside other issues in the same release (e.g., CVE-2008-4790, CVE-2008-4792,...
CVE-2008-4762
Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service service crash and potentially execute arbitrary code via a long argument to the 1 rename and 2 realpath parameters...