KDM -- local privilege escalation vulnerability

KDE Security Advisory reports: KDM contains a race condition that allows local attackers to make arbitrary files on the system world-writeable. This can happen while KDM tries to create its control socket during user login. A local attacker with a valid local account can under certain circumstanc...

[20100423] - Core - Sessation Fixation

Session id doesn't get modified when user logs in. A remote site may be able to forward a visitor to the Joomla! site and set a specific cookie. If the user then logs in, the remote site can use that cookie to authenticate as that user...

Mini-CMS RibaFS 1.0 - Authentication Bypass

============================================================= Mini CMS RibaFS 1.0 Auth Bypass SQL Injection Vulnerability ============================================================= + Mini CMS RibaFS 1.0 Auth Bypass SQL Injection Vulnerability...

osDate 2.1.9 - Remote File Inclusion

osDate 2.1.9 - Remote File Inclusion ======================================================================================== o osDate Remote File Inclusion Vulnerabilities Software : osDate dating and matchmaking script version 2.1.9 mostly affected Vendor : http://www.tufat.com/ Download :...

Front Door 0.4b - SQL Injection

Front Door 0.4b - SQL Injection Software Link: http://sourceforge.net/projects/frontdoor/files/Front%20Door%20-%20BETA/Front%20Door%20-%20v0.4b/frontdoor-v0.4b.rar/download Version: 0.4b Tested on: Windows XP SP3 with MySQL Login user name field is vulnerable to sql injection. POC: ' OR username ...

Front Door 0.4b SQL Injection

Exploit Title: Front Door v0.4b SQL Injection Vulnerability Date: March 12, 2010 Author: Blake Software Link: http://sourceforge.net/projects/frontdoor/files/Front%20Door%20-%20BETA/Front%20Door%20-%20v0.4b/frontdoor-v0.4b.rar/download Version: 0.4b Tested on: Windows XP SP3 with MySQL Login user...

Extreme Mobster Free.Licente Cross Site Scripting

======================================================================================== | Title : Extreme Mobster Free.Licente Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Si...

WordPress Plugin Pyrmont 2.x - SQL Injection

WordPress Plugin Pyrmont 2.x - SQL Injection WordPress and Pyrmont V2. SQL Injection Vulnerability Plugin Home: http://wordpress.org/extend/themes/pyrmont-v2 Author: Gamoscu Site: www.1923turk.biz Site: http://gamoscu.wordpress.com/ Exploit:...

Huawei MT882 ModemRouter - Multiple Vulnerabilities

Huawei MT882 ModemRouter - Multiple Vulnerabilities Version: V100R002B020 ARG-T Firmware Release: 3.7.9.98 Greets to my bests friends: DeepLook, R00T, systemfailure, Ciber34, ANDSQLiTor, LaPeke Greets to friend: Scuarplex, Crl, KiKoArg, ZeRO, DNSX, PunkiD DecodeX01atgmaildotcom Target device ip...

Swiss Mango CMS SQL Injection

SwissmangoCMS SQL injection vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 24, 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /| /| |/ / \ / / / / / -=- INDONESIAN CODER -=- KILL-9...

Re-Script v.0.99 Beta ( listings.php op ) SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability listings.php op REScript V.0.99 Beta http://www.ebigman.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Tiki Wiki CMS Groupware Authentication Bypass Vulnerability

Tiki Wiki CMS Groupware is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2008-6844

The registration view /user/register in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttributedatauserlogin30, ContentObjectAttributedatauserpassword30, and other...

phpFanfiction SQL Injection Exploit

!/usr/bin/perl phpFanfiction Remote SQL injection Greetz www.MainHack.com - www.ServerIsDown.org - www.sux0r.net VOP Crew Vaksin13 OoNBoy Paman R3VANBASTARD Kecemplungkalen eminem Shiro zxvf Pizzyroot iwannine Jupe Crew makasih buat ngenet gratisnya wkwkwk use HTTP::Request; use LWP::UserAgent;...

Virtue Online Test Generator - Authentication Bypass / SQL Injection / Cross-Site Scripting

+===================================================================================+ | | | Virtue Online Test Generator AB/SQL/XSS Multiple Remote Vulnerabilities | | | +===================================================================================+ | | | Author.: HxH | | Contact:...

fungamez rc1 - Authentication Bypass / Local File Inclusion

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE...

Mandriva Update for mandriva-kde-config MDVA-2008:027 (mandriva-kde-config)

Check for the Version of mandriva-kde-config OpenVAS Vulnerability Test Mandriva Update for mandriva-kde-config MDVA-2008:027 mandriva-kde-config Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Adobe Acrobat getIcon() Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat and Adobe Reader. User interaction is required in that a user must visit a malicious web site or open a malicious file. The specific flaw exists when processing malicious JavaScript...

Vulnerabilities in Invision Power Board

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Abuse of Functionality та Insufficient Anti-automation уязвимостях в форумном движке Invision Power Board. Abuse of Functionality: Мне уже давно была известна возможность определения логинов на форуме - имя пользователя на форуме есть одновременно...

CS-Cart 2.0.0 Beta 3 - 'Product_ID' SQL Injection

CS-Cart 2.0.0 Beta 3 dispatch SQL Injection Vulnerability Provider: www.cs-cart.com Discovered by netsoul Greetz: m1cr0n, IvanKalet, blackfalcon, str0ke Contact: netsoul2atgmail.com ALTO PARANA - PARAGUAY Ñane mba'e teete Exploit: http://cs-cart...