DNSTools 2.0 Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4617/info DNSTools is a web based managment tool for DNS information. It is implemented in PHP, and available for Linux and Solaris. A vulnerability has been reported in some versions of DNSTools which allows any remote...

QuickTeam 2.2 - SQL Injection

No description provided by source. | D R U N K E N | || || || D A N I S H | || || |' R E D N E C K S '--''--''--' RESEARCH AND FUCKING HACKING: | DRUNKEN DANISH REDNECKS | || || || !!!!!!! | || || |' [email protected] '--''--''--' = QUICKTEAM 2.2 SQL INJECTION WE STEEL YOUR DAMNED...

thinking arts es.one 1.0 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2385/info It is possible for a remote user to gain read access to directories and files outside the root directory of ES.One. Requesting a specially crafted URL by way of 'store.cgi', composed of '/../' sequences and...

Fedora 18 : drupal6-context-3.3-1.fc18 (2013-21298)

CVE-2013-4445/CVE-2013-4446 Context, a drupal module, which allows you to manage contextual conditions and reactions for different portions of your site, was found to have two severe security issues. First issue is that the module allows execution of PHP code via manipulation of a URL argument in...

Fedora 19 : drupal6-context-3.3-1.fc19 (2013-21231)

CVE-2013-4445/CVE-2013-4446 Context, a drupal module, which allows you to manage contextual conditions and reactions for different portions of your site, was found to have two severe security issues. First issue is that the module allows execution of PHP code via manipulation of a URL argument in...

XSS in reorder panel

To reproduce: 1. Open a confluence instance in Firefox. 2. Create a space with key "TEST". 3. Create a page in that space called "alert0". 4. Create two pages with the page from step 3 as their parent. 5. Go to: code:none base...

XSS vulnerabilities in Atlassian Answers

Some users seem to try XSS attack on Atlassian Answers. How to replicate is the following steps. Go to the top page https://answers.atlassian.com/. Chose "Browse", "Users" and "Sort By Username" then a alert dialogue box will appear...

DSA-2696-1 otrs2 - privilege escalation

Bulletin has no description...

ESA-2013-034: EMC Avamar Improper Authorization vulnerability

ESA-2013-034.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-034: EMC Avamar Improper Authorization vulnerability EMC Identifier: ESA-2013-034 CVE Identifier: CVE-2013-0944 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:M/Au:S/C:C/I:P/A:P Affected products: • EMC Avamar Server 5.x •...

Mozilla Firefox < 14.0 Multiple Vulnerabilities

Binary data 6519.prm...

Firefox < 14.0 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 14.0 and thus, is potentially affected by the following security issues : - Several memory safety issues exist, some of which could potentially allow arbitrary code execution. CVE-2012-1948, CVE-2012-1949 - An error related to drag and drop can all...

The integrity of the enterprise 2. 0 backend login universal password vulnerability-vulnerability warning-the black bar safety net

Background/ ManageAdmin/ManageLogin. asp The vulnerability can be used universal password login 'or'='or' 'or'='or' Get a webshell directly on in the picture there, you know. Google keywords: inurl:/Product/Product. asp? CateID Actual URL: http://www.hnvalve.com/ManageAdmin/AdminManage.asp...

Mozilla Firefox ESR 10.x < 10.0.3 Multiple Vulnerabilities

Binary data 6350.prm...

LY Network Cart SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Official Website: http://www.1337day.com 0 1 + Support...

Unfixed XSS vulnerability at network-tools.com

Security researcher a3q, has submitted on 02/01/2012 a cross-site-scripting XSS vulnerability affecting network-tools.com, which at the time of submission ranked 3711 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. It is currently...

phpShowtime Directory Traversal

Exploit for php platform in category web applications Title : phpShowtime Directory Travel Author : Red Security TEAM Date : 31/01/2012 Download : http://phpshowtime.kybernetika.de/ Demo : http://phpshowtime.kybernetika.de/demo/ Tested On : CentOS Dork : Copyright ©2005-2011 by Nova CMS. Contact ...

KnowledgeTree 3.7.0.2 Cross Site Scripting

Advisory ID: HTB23065 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinknowledgetreecommunityedition.html Product: KnowledgeTree Commercial and Community Editions Vendor: KnowledgeTree Inc. http://knowledgetree.org Vulnerable Version: 3.7.0.2 and probably prior Tested Version:...

Design/Logic Flaw

Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information time card and attendance via unspecified vectors related to manipulation of a URL...

CVE-2011-2677

Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information time card and attendance via unspecified vectors related to manipulation of a URL...

CVE-2011-2677

Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information time card and attendance via unspecified vectors related to manipulation of a URL...