1049 matches found
CyberShop User Login Sql Injection
NightWarriorKurdihs Hacker nightwarrior771athotmail.com CyberShop User Login Sql Injection Site:http://www.gencbeyin.gen.tr/cybershop/test Code For User Login : Username : ' or ''=' Password: ' or ''=' Contact :nightwarrior771athotmail.com NightWarriorKurdihs Hacker...
alisveristrSQL.txt
Hi all B3g0kathackermail.com Kurdish Hacker Special Thanx All Kurdish Hackers Freedom For Ocalan!!! ----------------------------------- Alisveristr E-commerce User Login Sql İnjection Alisveristr E-commerce Admin Login Sql İnjection ----------------------------------- Site:...
Serendipity 0.8beta4 exit.php SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== Serendipity 0.8beta4 exit.php SQL Injection Exploit =================================================== !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security...
[waraxe-2004-SA#037 - Sql injection bug in Phorum 5.0.12 and older versions]
================================================================================ waraxe-2004-SA037 ================================================================================ Sql injection bug in Phorum 5.0.12 and older versions...
GiantRat Mailer exposes PoP password
Security advisory Issue: GiantRat Mailer exposes plain text PoP password Date: 03/13/03 Vendor first notified: Febuary 2003 Affected versions: All tested v3.1, 2.x, 1.x ABOUT GiantRat Mailer: GiantRat Mailer is an innovative email client that has settings for the sight-impaired and has optional...
MailEnable 1.501x - Email Server Buffer Overflow
// source: https://www.securityfocus.com/bid/6197/info A buffer overflow vulnerability has been reported for MailEnable's POP3 server. The vulnerability is due to insufficent bounds checking of the USER login field. An attacker can exploit this vulnerability by connecting to a vulnerable MailEnab...
NOVL-2002-2963651 - iManager (eMFrame) Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2002-2963651 Title: iManager eMFrame Buffer Overflow Date: 08-Oct-2002 Revision: Updates NOVL-2002-2963081 Product Name: iManager eMFra...
Solaris 2.6/7/8 - 'TTYPROMPT in.telnet' Remote Authentication Bypass
Solaris TTYPROMPT Security Vulnerability Telnet This vulnerability is very simple to exploit, since it does not require any code to be compiled by an attacker. The vulnerability only requires the attacker to simply define the environment variable TTYPROMPT to a 6-character string, inside telnet...
Sharity Cifslogin Buffer Overflow (arguments)
Sharity Cifslogin Buffer Overflow arguments ============================================= Author: Alex Hernandez [email protected] C 2002 Thanks all the people from Spain and Argentina. Greets to: Paco Spain, Gabriel M, L.martins. Thanks friends for all ur help Zillion & Kevin from Snosoft...
XDMCP leaks sensitive information by default configuration
Overview An information leakage vulnerability exists in the default configuration of the X Display Management Console Protocol XDMCP daemon. Description On some operating systems, the X Display Manager Control Protocol XDMCP daemon is set to permit remote access to the local machine from any host...
CVE-2001-0745
Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox: URL in the document.referrer property...
CVE-1999-1162
Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system...
xtell 2.6.1 - User Status Remote Information Disclosure
xtell 2.6.1 - User Status Remote Information Disclosure source: https://www.securityfocus.com/bid/4196/info xtell is a simple network messaging program. It may be used to transmit terminal messages between users and machines. xtell is available for Linux, BSD and most other Unix based operating...
Security issue with GroupWise 6 and LDAP authentication in PostOffice
Issue: Any user can login into any GroupWise account. Environment: GroupWise 6 Post Office using LDAP authentication AND security configuration of PostOffice leaves LDAP User Name and Password fields blank in the Post Office Agent object in ConsoleOne. Exploit: Run GroupWise as any user either...
Несанкционированный доступ в slashcode (unauthorized access)
Зная логин и пароль одного пользователя можно получить права другого, включая администратора...
CVE-2001-0745
Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox: URL in the document.referrer property...
PostNuke 0.6 - User Login
source: https://www.securityfocus.com/bid/3435/info PostNuke, successor to PHPNuke, is a content management system written in PHP. PostNuke versions 0.62 to 0.64 suffer from a vulnerability that allows a remote user to log-in as any user with known username and ID without authentication. The...
CVE-1999-1434
Slackware Linux 3.2–3.5 is affected by CVE-1999-1434: the login process does not properly handle the error when /etc/group is missing, failing to drop privileges and potentially assigning root privileges to any local user who logs in. The connected documents confirm the affected OS versions and t...
NetcPlus SmartServer3 3.75 - Weak Encryption
/ source: https://www.securityfocus.com/bid/1962/info SmartServer3 is an email server designed for small networks. A design error exists in SmartServer3 which enables an authenticated user to view other users login information and possibly gain access to passwords. SmartServer3 by default intsall...
NetcPlus SmartServer3 3.75 - Weak Encryption
NetcPlus SmartServer3 3.75 - Weak Encryption / source: https://www.securityfocus.com/bid/1962/info SmartServer3 is an email server designed for small networks. A design error exists in SmartServer3 which enables an authenticated user to view other users login information and possibly gain access ...