Lucene search
+L

157 matches found

The Hacker News
The Hacker News
added 2011/05/06 11:41 a.m.26 views

DragonBall Browser v1.0.0 ~ Browser For Hackers !

DragonBall Browser v1.0.0 Browser For Hackers ! Hey everyone, this is Harsh Daftary presenting new browser made for hacker's.. Browser purely made in vb, small yet fast browser. This includes hacking and programming zone's and some hacking tools.. Features: Windows Mail Online Media Player Hackin...

6.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2010/05/19 12:00 a.m.32 views

Serendipity < 1.5.3 'Xinha WYSIWYG' Editor Security Bypass Vulnerability

Serendipity is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:s9y:serendipity";...

7.5CVSS5.7AI score0.03262EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2010/05/19 12:00 a.m.17 views

Serendipity 'Xinha WYSIWYG' Editor Security Bypass Vulnerability

This host is running Serendipity and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbserendipitysecbypassvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ Serendipity 'Xinha WYSIWYG' Editor Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010...

7.5CVSS6.4AI score0.03262EPSS
SaveExploits1References2
Exploit DB
Exploit DB
added 2009/01/15 12:00 a.m.64 views

Blue Eye CMS 1.0.0 - 'clanek' Blind SQL Injection

--+++===============================================================+++-- --+++====== Blue Eye CMS ". "\n+ Ex. : php xpl.php localhost /BlueEye admin". "\n\n"; exit ; function query $user, $pos, $chr $query = "x' OR ASCIISUBSTRINGSELECT password FROM blueeyeusers WHERE user = '$user',$pos,1=$chr ...

7.5CVSS5.8AI score0.0095EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2008/10/08 12:00 a.m.30 views

yourownbux40-sql.txt

.. \ \ | | | | \ / \ / // / \ | | | \ | \ | \ /\ \ | / /| /| / \ \ / || / / / / . . | | \ | | | \ \ | \ / / | | / | \ \ \ | / / / / / / ---------------==---------------==---------------==---------------==---------------==---------------= -----============ Yourownbux v4.0 Blind...

SaveExploits0
exploitpack
exploitpack
added 2008/10/07 12:00 a.m.21 views

Yourownbux 4.0 - cookie SQL Injection

Yourownbux 4.0 - cookie SQL Injection .. \ \ | | | | \ / \ / // / \ | | | \ | \ | \ /\ \ | / /| /| / \ \ / || / / / / . . | | \ | | | \ \ | \ / / | | / | \ \ \ | / / / / / / ---------------==---------------==---------------==---------------==---------------==---------------=...

0.7AI score
SaveExploits0
zdt
zdt
added 2008/10/07 12:00 a.m.32 views

YourOwnBux 4.0 (COOKIE) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== YourOwnBux 4.0 COOKIE Remote SQL Injection Vulnerability ==========================================================...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2008/04/11 12:00 a.m.26 views

LightNEasy 1.2 (no database) Remote Hash Retrieve Exploit

No description provided by source. Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap" &&...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/04/10 12:00 a.m.45 views

LightNEasy 1.2 - no database Remote Hash Retrieve

Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap" && $SESSION$set'password' != "1" unset$GET'do';...

5CVSS5.8AI score0.06272EPSS
SaveExploits1
NVD
NVD
added 2008/02/05 3:00 a.m.24 views

CVE-2008-0580

Geert Moernaut LSrunasE and Supercrypt use an encryption key composed of an SHA1 hash of a fixed string embedded in the executable file, which makes it easier for local users to obtain this key without reverse engineering...

2.1CVSS6.2AI score0.00186EPSS
SaveExploits0References3
Prion
Prion
added 2008/02/05 3:00 a.m.20 views

Design/Logic Flaw

Geert Moernaut LSrunasE and Supercrypt use an encryption key composed of an SHA1 hash of a fixed string embedded in the executable file, which makes it easier for local users to obtain this key without reverse engineering...

2.1CVSS6.7AI score0.00186EPSS
SaveExploits0References3
CVE
CVE
added 2008/02/05 2:00 a.m.48 views

CVE-2008-0580

CVE-2008-0580 concerns Geert Moernaut’s LSrunasE and Supercrypt components that use an encryption key derived from an SHA1 hash of a fixed string embedded in the executable. The fixed-key approach means local users can obtain the key without reverse engineering, undermining confidentiality of the...

2.1CVSS6.2AI score0.00186EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2008/02/05 2:00 a.m.33 views

CVE-2008-0580

Geert Moernaut LSrunasE and Supercrypt use an encryption key composed of an SHA1 hash of a fixed string embedded in the executable file, which makes it easier for local users to obtain this key without reverse engineering...

6.2AI score0.00186EPSS
SaveExploits0References3
NVD
NVD
added 2006/03/30 11:02 a.m.18 views

CVE-2006-1541

SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter...

7.8CVSS8.5AI score0.02263EPSS
SaveExploits1References9
Prion
Prion
added 2006/03/30 11:02 a.m.19 views

Sql injection

SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter...

7.8CVSS9.2AI score0.02263EPSS
SaveExploits1References9Affected Software1
CVE
CVE
added 2006/03/30 11:00 a.m.42 views

CVE-2006-1541

SQL injection in EzASPSite 2.0 RC3 and earlier (Default.asp) allows remote attackers to run arbitrary SQL and obtain the admin password SHA1 hash via the Scheme parameter. Connected documents do not add further technical details or mitigations in this set; no exploit status provided.

7.8CVSS8.6AI score0.02263EPSS
SaveExploits1References9Affected Software1
Cvelist
Cvelist
added 2006/03/30 11:00 a.m.25 views

CVE-2006-1541

SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter...

8.5AI score0.02263EPSS
SaveExploits1References9
Rows per page
Query Builder