Spoofing of URI possible in Konqueror's address bar

konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed...

[SECURITY] [DSA 1379-1] New quagga packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA 1379-1 [email protected] http://www.debian.org/security/ Florian Weimer October 1st, 2007 http://www.debian.org/security/faq -...

Mambo Component Mambads <= 1.5 Remote SQL Injection Vulnerability

No description provided by source. Mambads = 1.5 Sql Injection Autor:Sniper456 Contact:Sniper456atgmail.kom Greetss: PescaoDeth, Daemon21, Vampirin456, Shh-2, CodeBreak and the chilean People ; SQL: index.php?option=commambads&Itemid=0&func=detail&cacat=1&casb=1&caid=inyecta maricon Example:...

Novus 1.0 (notas.asp nota_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Novus 1.0 notas.asp notaid Remote SQL Injection Vulnerability ================================================================ Novus - Sistema de administracion y contenido...

phpFullAnnu (PFA) 6.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== phpFullAnnu PFA 6.0 Remote SQL Injection Vulnerability ======================================================== Inclusion Hunter Team http://www.ihteam.net phpFullAnnu PFA 6.0 Class:...

kwsphp-sql.txt

KwsPHP Module jeuxflash Remote SQL Injection Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.fr & http://no-hack.net Site: http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=downloads&filedl=30&before=8&pdl=1 Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

AuraCMS 1.5rc - Multiple SQL Injections

AuraCMS version 1.5rc - Multiple Remote SQL Injection Vulnerabilities Vendor : http://www.auracms.org/ Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net // Kutu pada berkas 'hal.php' baris-7 $perintah="SELECT FROM halaman WHERE id=$id"; $hasil =...

TLM CMS 3.2 - Multiple SQL Injections

TLM CMS 3.2 - Multiple SQL Injections TLM CMS v3.2 - Multiple Remote SQL Injection Vulnerabilities Vendor : http://tlm.hebserv.fr/ Download : http://tlm.hebserv.fr/modfile/upload/tlmcms32.zip Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Kutu pada...

SOL7886 - Remote vulnerability in the mod_jk2 Apache module, VU #771937

A vulnerability exists in the legacy version of the modjk2 Apache module. If successfully exploited, an attacker may be able to run arbitrary code on affected system. Information about this advisory is available at the following location: F5 Product Development tracked this issue as CR83564 and i...

Ourspace 2.0.9 (uploadmedia.cgi) Remote File Upload Vulnerability

No description provided by source. ++++++++++++++++++++++++++++++++++++ | Discovered by Breakerunit & Don | | Ourspace 2.0.9| script info: http://www.codedworld.com/download/our-space/26931.html Exploit: /cgi-bin/ourspace/newswire/uploadmedia.cgi dork: inurl:"/cgi-bin/ourspace/ Greetz to: Balcan...

Sylpheed和Sylpheed-Claws POP3远程格式串处理漏洞

BUGTRAQ ID: 25430 CVECAN ID: CVE-2007-2958 Sylpheed和Sylpheed-Claws都是轻型的邮件客户端。 Sylpheed和Sylpheed-Claws在处理用户请求存在格式串处理漏洞，远程攻击者可能利用此漏洞控制客户端。 Sylpheed和Sylpheed-Claws邮件客户端的src/inc.c文件中的incputerror函数在显示POP3服务器的错误响应时存在格式串漏洞处理，如果用户受骗连接到了恶意的POP3服务器并接收到包含有格式标识符的回复的话，就可能触发这个漏洞，导致执行任意指令。 Sylpheed Sylpheed 2.4...

litecommerce 2004 (category_id) Remote SQL Injection Vulnerability

No description provided by source. litecommerce Copyright 2004 - Remote SQL Injection Vendor : http://www.litecommerce.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : Powered by LiteCommerce POC;...

[HS-A007] Qbik WinGate Remote Denial of Service

Title ===== HS-A007 Qbik WinGate Remote Denial of Service Date ==== 10 August 2007 Affected Software ================= WinGate versions 5.x and 6.x prior to 6.2.2. Overview ======== WinGate by Qbik IP Management Limited is a sophisticated gateway and server product used in over 600,000 networks...

ZYXEL ZyWALL 2 3.62 - FormsGeneral_1?sysSystemName Cross-Site Scripting

ZYXEL ZyWALL 2 3.62 - FormsGeneral1?sysSystemName Cross-Site Scripting source: https://www.securityfocus.com/bid/25262/info ZyXEL ZyWALL 2 is prone to multiple remote vulnerabilities that affect the management interface. An attacker can exploit these issues to carry out cross-site request forgery...

FishCart <= 3.2 RC2 (fc_example.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== FishCart bug found: "/fishcartv3/fcfunctions/fcexample.php?docroot=shell" 0day.today 2018-03-16...

CartWeaver (Details.cfm ProdID) Remote SQL Injection Vulnerability

No description provided by source. author:meoconxatvnbrain.net product:CartWeaver main site:www.cartweaver.com 1.with CFM CartWeaver: sql injection in: Details.cfm?ProdID=a' demo: http://www.jbracing.co.uk/Details.cfm?ProdID=1' exploit: http://www.xxx.com/Details.cfm?ProdID=sql query link admin:...

wolioCMS Auth Bypass / Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== wolioCMS Auth Bypass / Remote SQL Injection Vulnerabilities =========================================================== wolioCMS - SQL Injection and Bypass Administrator Login...

Seditio CMS 121 - 'pfs.php' Arbitrary File Upload

Seditio CMS Remote File Upload Vulnerability ReSearcher : A.D.T Script : Seditio and Ldu Cms Version : All Versions Script HomePage : http://neocrome.net/ Dork : "powered by seditio" or "powered by ldu" Risk : Very High! Usage : Firstly, you register the victim web site. After, go to "pfs.php" an...

CVE-2007-4025

CVE-2007-4025 affects Sun Java System Application Server (SJS) 8.1–9.0 prior to 20070724 on Windows. It allows remote attackers to obtain JSP source code via unspecified vectors. The connected documents do not specify root cause, explicit exploit method, or a fix/remediation. No remediation detai...

CMScout &lt;= 1.23 (index.php) Remote SQL Injection Vulnerability

No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title CMScout = 1.23 SQL Injection Script Download&n...