CVE-2009-2233: Improper Authentication

The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the awselogged cookie to 1...

AWScripts Gallery Search Engine Insecure Cookie

AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ---- http://www.awscripts.com/demose/awse/awseadmin/index.php...

AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability

Exploit for unknown platform in category web applications ================================================================= AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability ================================================================= + AWScripts.com Gallery Search Engine 1.5...

AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability

No description provided by source. + AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ---- http://www.awscripts.com/demose/awse/awseadmin/index.php sebug.net...

AWScripts Gallery Search Engine 1.x - Insecure Cookie

AWScripts Gallery Search Engine 1.x - Insecure Cookie + AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ----...

AWScripts Gallery Search Engine 1.x - Insecure Cookie

AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ---- http://www.awscripts.com/demose/awse/awseadmin/index.php milw0rm.com 2009-06-22...

Find Metadata

Added: 06/04/2009 Background This tool searches the Internet for PDF and Microsoft Office files in the given domain, and extracts the metadata from those files. This metadata often contains the names or aliases of the document's authors or contributors, which can be used to guess valid e-mail...

Find Metadata

Added: 06/04/2009 Background This tool searches the Internet for PDF and Microsoft Office files in the given domain, and extracts the metadata from those files. This metadata often contains the names or aliases of the document's authors or contributors, which can be used to guess valid e-mail...

Find Metadata

Added: 06/04/2009 Background This tool searches the Internet for PDF and Microsoft Office files in the given domain, and extracts the metadata from those files. This metadata often contains the names or aliases of the document's authors or contributors, which can be used to guess valid e-mail...

TRS搜索引擎代码注入漏洞

TRS 搜索引擎是TRS公司推出搭建智能化、个性化和企业级搜索引擎的优选平台。 TRS 搜索引擎在“风格设置"模块存在一处缺陷，允许恶意攻击者在页面中植入任意代码。（cookies xss） 0 WAS 4.0 + Tomcat 4.0 for Windows 暂无 --------------------------------------------------------- POST /was40/dosetstyle.jsp HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,...

MDVA-2008:081 : mandriva-kde-config

This update changes konqueror's default search-engine to ask.com, and adds Exalead.com to the search-engine list. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

NKill aims to catalog vulnerabilities of every computer

From IDG News Service Sumner Lemon A security consultant is developing a search engine called NKill that aims to track the security vulnerabilities on every computer connected to the Internet, with the ability for users to search for vulnerable computers in a country or inside a specific company...

X10Media MP3 Search Engine Admin Access

THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so displ...

X10Media Mp3 Search Engine 1.x Admin Access Vulnerability

No description provided by source. THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER t4hathotmail.fr File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location:...

X10Media Mp3 Search Engine < 1.6.2 Admin Access Vulnerability

Exploit for unknown platform in category web applications ============================================================= X10Media Mp3 Search Engine isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so display all forms. / ---------------------------------------- if the...

X10media Mp3 Search Engine 1.6.2 - Admin Access

X10media Mp3 Search Engine 1.6.2 - Admin Access THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location: ../main.php"...

X10media Mp3 Search Engine < 1.6.2 - Admin Access

THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so displ...

Mandriva Update for mandriva-kde-config MDVA-2008:081 (mandriva-kde-config)

Check for the Version of mandriva-kde-config OpenVAS Vulnerability Test Mandriva Update for mandriva-kde-config MDVA-2008:081 mandriva-kde-config Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Be careful what you search for

While search engine optimization SEO is becoming one of the must do’s for companies that are trying to improve theirsite ranking in search engines like Google and Yahoo, it’s also increasingly becoming a trick of the trade for spammers and malware authors looking to drive traffic to their own...

FreeBSD Ports: typo3

The remote host is missing an update to the system as announced in the referenced advisory. VID 653606e9-f6ac-11dd-94d9-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 653606e9-f6ac-11dd-94d9-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...