Italy's Police IT network vitrociset.it Database Hacked and Leaked by #Antisec

Italy's Police IT network vitrociset.it Database Hacked and Leaked by Antisec After Hack of Italy's Police IT network, Anonymous Hackers Just now Release the Database of vitrociset.it via a pastebin link on Twitter. The Leak include the Administrator's Password and 100's of other users Login...

WeBid 1.0.2 - converter.php Remote Code Execution

WeBid 1.0.2 - converter.php Remote Code Execution checkmysql$res, $query, LINE, FILE; 157. $itemtitle = mysqlresult$res, 0, 'title'; Input passed through $REQUEST'auctionid' isn't properly sanitised before being used in the SQL query at line 154. - Vulnerable code to SQL injection works with...

WeBid 1.0.2 - 'converter.php' Remote Code Execution

checkmysql$res, $query, LINE, FILE; 157. $itemtitle = mysqlresult$res, 0, 'title'; Input passed through $REQUEST'auctionid' isn't properly sanitised before being used in the SQL query at line 154. - Vulnerable code to SQL injection works with magicquotesgpc = off in logout.php: 21. if...

iPhone4 FTP Server 1.0 - Empty CWD-RETR Remote Crash

iPhone4 FTP Server 1.0 - Empty CWD-RETR Remote Crash Exploit Title: iPhone4 FTP Server V1.0 - Empty CWD-RETR Remote Crash Date: 2011-05-30 Author: offsetIntruder Software Link: http://itunes.apple.com/us/app/ftp-server/id356055128?mt=8 Version: 1.0 Tested on: iPhone4 IOS 4.3.2 CVE: N/A import...

DEBIAN-CVE-2011-1433

The 1 AgentInterface and 2 CustomerInterface components in Open Ticket Request System OTRS before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the UserLogin and UserPW fiel...

Fedora Update for dbus FEDORA-2010-19166

Check for the Version of dbus OpenVAS Vulnerability Test Fedora Update for dbus FEDORA-2010-19166 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

WordPress Plugin Event Registration 5.32 - SQL Injection

WordPress Plugin Event Registration 5.32 - SQL Injection Wordpress Event Registration SQL injection Author: k3m4n9i Homepage: http://alko.web.id/ Date: 13 November, 2010 Software Information + Vendor : http://edgetechweb.com/ + Software Link: http://wordpress.org/extend/plugins/event-registration...

[SECURITY] Fedora 14 Update: pam_mount-2.5-1.fc14

This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as semi-diskless stations where many users can logon. The module also supports mounting local filesystems of any kind the normal mount utility supports, with extra code ...

[SECURITY] Fedora 12 Update: pam_mount-2.5-1.fc12

This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as semi-diskless stations where many users can logon. The module also supports mounting local filesystems of any kind the normal mount utility supports, with extra code ...

Display Last-Login-Date for the User

Dear Atlassian! I don't know whether a ticket like this already exits or was solved, but I couln't find any. We would like to have displayed for any user after he logged in the time when he logged in before. This helps to find out whether someone else got hold of username&password and uses the...

Display Last-Login-Date for the User

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-21933. panel Dear Atlassian! I don't know whether a ticket like this already exits or was solved, but I couln't find any. We would like to...

WhiteBoard 0.1.30 - Multiple Blind SQL Injections

WhiteBoard 0.1.30 - Multiple Blind SQL Injections WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities Name WhiteBoard Vendor http://sarosoftware.com Versions Affected 0.1.30 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail d...

Unfixed XSS vulnerability at www.transfermarkt.de

Security researcher Viper.aT, has submitted on 30/06/2010 a cross-site-scripting XSS vulnerability affecting www.transfermarkt.de, which at the time of submission ranked 2744 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is...

BBSGood Forum program a plurality of page there is SQL injection vulnerability-vulnerability warning-the black bar safety net

BBSGOOD is domestic first using the cache technology Forum, BBSGOOD posts and list home can generate a static HTML file. 1. In the file indexedit. asp: sql="select top 1 Admin,UserName,Password from BBSGoodAdmin where UserName='"&Request. Cookiesbbsinfo&"adminuser"&"' " //Article 4 of 8 4 line Se...

greeting card remote Upload File vulnerability-vulnerability warning-the black bar safety net

greeting card program the presence of a remote file upload vulnerability, a registered user login you can upload a php executable code. Google Dork : "Send amazing greetings to your friends and relative!" trojandownloader : http://127.0.0.1/upload.php First register and the site and go to upload...

BBSGood Forum program multi-page SQL injection vulnerability-vulnerability warning-the black bar safety net

BBSGOOD is domestic first using the cache technology Forum, BBSGOOD posts and list home can generate a static HTML file. 1. In the file DelShortInFo. asp: selectid=trimRequestCStringSafeRequest"selectid" //the 1 Line 1 If selectid"" then selectid = replaceselectid, ", ", " or ID=" selectid="Where...

ECShop 2.7.2 latest any user login vulnerability 0day-vulnerability warning-the black bar safety net

Due to the recent project needs, review the following dealer school the latest release of ECShop 2.7.2 the official version of the source code, I did not expect the see the second file when it found a more obvious, and lower vulnerability. This vulnerability lets anyone log in as any user to ECSh...

Advanced Poll Script SQL Injection / Cross Site Scripting

Exploit Title: XSS and Authentication bypass in Advanced Poll Script Date: 26-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : XSS and Authentication bypass in Advanced Poll Script Vendor:http://www.2daybiz.com/ Author:Sid3^effects Description : Advanced Poll is a polling system with...

2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass

XSS and Authentication bypass in Advanced Poll Script Vendor:http://www.2daybiz.com/ Author:Sid3^effects Description : Advanced Poll is a polling system with powerful administration tool supports both text file and MySQL database. Its features include multiple polls, unlimited options, IP-Logging...

Amazon Closes XSS Hole in Wireless App

Amazon.com administrators closed a security vulnerability that made it possible for attackers to steal user login credentials for the highly trafficked e-commerce website. Read the full article. The Register...