CVE-2011-3089

Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving tables...

backupDB() v1.2.7a (onlyDB) Remote XSS Vulnerability

Summary backupDB is a PHP script that backs up MySQL tables and databases to a file uncompressed, gzip, bzip2 for easy daily backup. Description backupDB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to...

CVE-2011-3089

Removed by vendor...

CVE-2012-0658

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted audio sample tables in a movie file that is progressively downloaded...

Buffer overflow

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted audio sample tables in a movie file that is progressively downloaded...

Website Design Cardiff SQL Injection

Exploit Title: Website Design Cardiff SQL Injection Author: Th4 MasK Vendor : http://www.ep-projects.co.uk/ Date : 24.04.2012 Platform : Php Test On : BackTrack 5 Dork : created by Website Design Cardiff // Demo Site : http://www.cardiffscuba.co.uk/viewdivetrip.php?id=11 SQL Database : db37304973...

t3_dbtools_seditio_plugin_CSRF

====================================================================== Vulnerable software: T3 DB Tools Version 1.6 seditio database management plugin. Developed by : http://www.t3-design.com/t3-db-tools/ MD5 SUM: 8ab362601793e238f504783fd9953dd4 dbtools.rar...

PicoPublisher 2.0 - SQL Injection

Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Dork : intext:"Drives med PicoPublisher"...

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet - Directory Traversal

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet - Directory Traversal ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet Unauthenticated Remote Directory Traversal Database Backup / auth-conf.xml Disclosure Exploit product homepage:...

UBUNTU-CVE-2012-0839

OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table...

DEBIAN-CVE-2012-0839

OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table...

PT-2012-2899 · Inria · Ocaml

Name of the Vulnerable Software and Affected Versions: OCaml versions 3.12.1 and earlier Description: The issue allows context-dependent attackers to cause a denial of service, specifically CPU consumption, by providing crafted input to an application that uses hash tables. This is possible becau...

Joomla Discussions Component (com_discussions) SQL Injection

No description provided by source. Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact : Info 4t RedSecurity...

Joomla Discussions SQL Injection

Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home :...

Joomla! Component com_discussions - SQL Injection

Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home :...

Postgres Schema Dump

This module extracts the schema information from a Postgres server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Postgres Schema Dump', 'Description' = % This module extracts the schema...

MSSQL Schema Dump

This module attempts to extract the schema from a MSSQL Server Instance. It will disregard builtin and example DBs such as master, model, msdb, and tempdb. The module will create a note for each DB found, and store a YAML formatted output as loot for easy reading. This module requires Metasploit:...

PT-2012-2228 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Windows XP version SP2 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 version SP2, R2, and R2 SP1 Windows 7 versions Gold and SP1 Description: A security feature bypass issue exists due to the improper loading o...

Tienda Virtual - 'art_detalle.php' SQL Injection

source: https://www.securityfocus.com/bid/51240/info Tienda Virtual is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access o...

Microsoft ASP.NET and PHP Hash Collision Denial of Service (CVE-2011-3414)

A denial of service vulnerability has been reported in Microsoft ASP.NET and PHP. The vulnerability is caused due to the way common web framework implementations use hash tables to map parameters and values of web requests. A remote attacker may exploit this vulnerability by generating multiple...