Cisco Security Advisory: Cisco ACE Application Control Engine Device Manager and Application Networking Manager Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco ACE Application Control Engine Device Manager and Application Networking Manager Vulnerabilities Advisory ID: cisco-sa-20090225-anm http://www.cisco.com/warp/public/707/cisco-sa-20090225-anm.shtml Revision 1.0 For Public...

Improper access control

Downloadcenter 2.1 stores common.h under the web root with insufficient access control, which allows remote attackers to obtain user credentials and other sensitive information via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2009-0732

Downloadcenter 2.1 stores common.h under the web root with insufficient access control, which allows remote attackers to obtain user credentials and other sensitive information via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

Joomla gigCalendar 1.0 SQL Injection gigcal_bands_id

Salvatore "drosophila" Fresta Application: gigCalendar Joomla Component 1.0 http://joomlacode.org/gf/project/gigcalendar/ Version: gigCalendar 1.0 Bug: SQL Injection Exploitation: Remote Dork: inurl:"index.php?option=comgigcal" Date: 21 Feb 2009 Discovered by: Salvatore "drosophila" Fresta Author...

DSA-1722-1 libpam-heimdal - local privilege

Bulletin has no description...

SkaLinks 1.5 - Authentication Bypass

SkaLinks 1.5 - Authentication Bypass Product : SkaLinks Version : 1.5 Dork : Powered by SkaLinks Site: http://www.skalinks.com/ Founded by: Dimi4 Date : 29.01.09 Greetz: antichat SQL-injection, Auth Bypass + URL: http://target.com/skalinks15/admin/ + Admin name : 1' OR 1=1/ Bug Function: function...

CVE-2009-0328

ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...

CVE-2009-0336

Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for database/Blog.mdb. NOTE: some of these details are obtained from third party...

Improper access control

Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for database/Blog.mdb. NOTE: some of these details are obtained from third party...

Improper access control

ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...

CVE-2009-0328

ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...

CVE-2009-0336

BlogIt! is affected. The vulnerability stems from storing the database file (Blog.mdb) under the web root with insufficient access controls, enabling remote attackers to download the credentials database via a direct request. This is a server-side exposure of sensitive user data. The description ...

CVE-2009-0328

CVE-2009-0328 affects ROBS-PROJECTS Digital Sales IPN (also DS-IPN.NET/DS-IPN Paypal Shop). The issue is insufficient access control that allows remote attackers to directly download the database file (Database/Sales.mdb) from the web root, exposing user credentials. This has been captured in mul...

Joomla BazaarBuilder Shopping Cart SQL Injection

!/usr/bin/perl -w Joomla component: BazaarBuilder Shopping Cart Software v.5.0 sql injection + Author : XaDoS + Contact me: www.securitycode.it // xados at hotmail dot it + Greetz : Plucky - Str0ke - GsC - boom3rang - My girl ;- + ModuleName: BazaarBuilder Ecommerce Shopping Cart Software v. 5.0 ...

Joomla Component simple_review 1.x SQL Injection Vulnerability

No description provided by source. Joomla comsimplereview Sql injection Author : EcHoLL www.warezturk.org www.tahribat.com Greetz : Blacklabel Hippi Godlike Nitrous ! ModuleName: comsimplereview ! ScriptName: Joomla ! GoogleDork: inurl:"comsimplereview"...

PowerNews 2.5.4 SQL Injection

...:::::powernews 2.5.4 SQL Injection Vulnerability::::.... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz greetz:to my best friend in the world...

I-Rater Basic (messages.php) Remote SQL Injection Vulnerability

No description provided by source. I-Rater Basicmessages.php SQL-injection. Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ! Script Name: I-Rater Basic ! Home Page: http://www.i-rater.com ! GoogleDork: N/A Exampl...

About the security content of Security Update 2008-008 / Mac OS X v10.5.6

About the security content of Security Update 2008-008 / Mac OS X v10.5.6 Last Modified: December 15, 2008 Article: HT3338 Summary This document describes the security content of Security Update 2008-008 / Mac OS X v10.5.6, which can be downloaded and installed via Software Update preferences, or...

Check New 4.52 (findoffice.php search) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit =====================================================================...

bcoos 1.0.13 - 'viewcat.php' SQL Injection

!/usr/bin/perl -w ============================================ bcoos 1.0.13 Remote SQL Injection Exploit ============================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------|...