Tickets CAD 2.20G - Multiple Vulnerabilities

Exploit Title: Tickets CAD 2.20G Multiple Vulnerabilities Date: Aug 4 2012 Exploit Author: chap0 @chap0 Vendor Homepage: http://www.ticketscad.org Software Link: http://www.ticketscad.org/downloads/Tickets06222012V220G.zip Version: 2.20G Tested on: Ubuntu Tickets CAD 2.20G is vulnerable to multip...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - Multiple buffer overflow flaws were found in the Linux kernel's Management Module Support for Message Passing Technology MPT based controllers. A local,...

Design/Logic Flaw

The Janrain Engage formerly RPX module for Drupal 6.x-1.x. 6.x-2.x before 6.x-2.2, and 7.x-2.x before 7.x-2.2 stores user profile data from Engage in session tables, which might allow remote attackers to obtain sensitive information by leveraging a separate vulnerability...

CVE-2012-2296

The Janrain Engage formerly RPX module for Drupal 6.x-1.x. 6.x-2.x before 6.x-2.2, and 7.x-2.x before 7.x-2.2 stores user profile data from Engage in session tables, which might allow remote attackers to obtain sensitive information by leveraging a separate vulnerability...

CVE-2012-2296

The CVE-2012-2296 issue affects the Janrain Engage (formerly RPX) Drupal module. It states that user profile data from Engage is stored in session tables (and also in the users table) for Drupal 6.x-1.x, 6.x-2.x prior to 6.x-2.2, and 7.x-2.x prior to 7.x-2.2, which could enable remote attackers t...

CVE-2012-2296: Exposure of Sensitive Information to an Unauthorized Actor

The Janrain Engage formerly RPX module for Drupal 6.x-1.x. 6.x-2.x before 6.x-2.2, and 7.x-2.x before 7.x-2.2 stores user profile data from Engage in session tables, which might allow remote attackers to obtain sensitive information by leveraging a separate vulnerability...

PT-2012-3930

Name of the Vulnerable Software and Affected Versions Janrain Engage module for Drupal versions 6.x-1.x, 6.x-2.x before 6.x-2.2, 7.x-2.x before 7.x-2.2 Description The issue allows remote attackers to potentially obtain sensitive information by leveraging a separate vulnerability, as the Janrain...

Hacker going to demonstrate open source tool to crack Hashes with speed of 154 Billion/sec

Bitweasil lead developer going to Demonstrate an open source Tool called "Cryptohaze" at DEF CON 20. The Cryptohaze Multiforcer supports CUDA, OpenCL, and CPU code SSE, AVX, etc. All of this is aimed at either the pentester who can't spray hashes to the internet, or the hacker who would rather no...

Shopware 3.5 - SQL Injection

Shopware 3.5 - SQL Injection !/usr/bin/php ?php Exploit Title: Shopware 3.5 - SQL Injection Date: 13.07.2012 Exploit Author: Kataklysmos Software Link: http://www.shopware.de/ Version: 3.5 function httpreq$host, $q if!$fs = fsockopen$host, 80 exit"Could not open HTTP- Connection to...

Wordpress Plugins - custom tables XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress Custom Tables Plugin 3.4.4 - Cross Site Scripting

WordPress Custom Tables plugin's "key" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin custom tables - key Cross-Site Scripting

WordPress Plugin custom tables - key Cross-Site Scripting source: https://www.securityfocus.com/bid/54326/info WordPress custom tables plugin is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

WordPress Plugin custom tables - 'key' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54326/info WordPress custom tables plugin is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

[SECURITY] Fedora 17 Update: rubygem-activerecord-3.0.11-3.fc17

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

CVE-2012-2817

Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to tables that have sections...

Design/Logic Flaw

Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to tables that have sections...

CVE-2012-2817

Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to tables that have sections...

CVE-2012-2817

Removed by vendor...

CVE-2012-2817: Undefined Security Weakness

Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to tables that have sections...

PT-2012-4278

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 20.0.1132.43 Apple iTunes affected versions not specified Description The issue is related to a use-after-free vulnerability that can be exploited by remote attackers to cause a denial of service or possibly hav...