[SECURITY] Fedora 9 Update: pam_mount-0.47-1.fc9

This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as semi-diskless stations where many users can logon. The module also supports mounting local filesystems of any kind the normal mount utility supports, with extra code ...

Brim 2.0.0 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ==================================================== Brim 2.0.0 SQL/XSS Multiple Remote Vulnerabilities ==================================================== Found by : Fisher762 Groups : inj3ct0r...

Microsoft Security Bulletin MS08-050 – Important Vulnerability in Windows Messenger Could Allow Information Disclosure (955702)

Microsoft Security Bulletin MS08-050 – Important Vulnerability in Windows Messenger Could Allow Information Disclosure 955702 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a publicly reported vulnerability in supported versions of...

pliggcms-sql.txt

|| | | Pligg Beta 9.9.0 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.pligg.com/ | | DorK : Powered By Pligg | Legal: License...

Pligg CMS 9.9.0 (story.php id) Remote SQL Injection Vulnerability

No description provided by source. || | | Pligg Beta 9.9.0 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.pligg.com/ | | DorK :...

emc-sql.txt

adMERITia Vulnerability Report Vulnerability Information Vendor: EMC² Product: Centera Universal Access Version: CUA4.04735.p4 Vulnerability Type: Software Flaw Vulnerability: SQL Injection Impact: Attacker can bypass the authentication method and will be logged in as an arbitrary user. With...

Dreampics Builder (page) Remote SQL Injection Vulnerability

No description provided by source. PICS BUILDER page SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = = ========================================================= script :...

dreampics-sql.txt

PICS BUILDER page SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = = ========================================================= script : http://www.dreamlevels.com/dreampics.php...

DreamPics Builder - 'page' SQL Injection

PICS BUILDER page SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = = ========================================================= script : http://www.dreamlevels.com/dreampics.php...

Unfixed XSS vulnerability at login.pohjola.fi

Security researcher Harry Sintonen, has submitted on 22/06/2008 a cross-site-scripting XSS vulnerability affecting login.pohjola.fi, which at the time of submission ranked 398463 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is...

AJ Auction 1.0 - 'id' SQL Injection

AJ Auction OOPD V.1 SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = = ========================================================= HomE script :...

GLLCTS2 4.2.4 - detail SQL Injection

GLLCTS2 4.2.4 - detail SQL Injection ?php / 08000000088@M@@@M@2ZZZ8@aZX;ii,,:,iir777777777777777777777777r;i:, i ,@X:i:0a7 BMMM88000000000 08888888882aMMMMM,SZZ0WZ ........ 7a2MMMMM : MMM@aZ888888888 08888888888WMMMMM78aSXi XBMMMMMMMMMMMMMM2: MB.X:. ,SMMMMMMMMMMMM. r: MMM0a8888888888...

dovecot security and bug fix update

1.0.7-2 - LDAP+auth cache user login mixup CVE-2007-6598, 427575 - insecure mailextragroups option CVE-2008-1199, 436927 1.0.7-1 - update to latest upstream, fixes a few bugs 331441, 245249, plus two security vulnerabilities CVE-2007-2231, CVE-2007-4211 - increased default loginprocesssize to 64...

Motorola Timbuktu Crafted Login Request Buffer Overflow (CVE-2007-4221)

Motorola Timbuktu is a remote monitoring and control product available for various operating systems. A buffer overflow vulnerability exists in Motorola Timbuktu. The vulnerability is due to a boundary error in Motorola Timbuktu that fails to properly handle crafted user login requests. In order ...

Dream4 Koobi Pro 6.25 Shop - categ SQL Injection

Dream4 Koobi Pro 6.25 Shop - categ SQL Injection Koobi Pro 6.25 shop categ all version Koobi AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index php p shop"categ EXPLOiT :...

Wordpress Plugin Simple Forum 1.10-1.11 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Wordpress Plugin Simple Forum 1.10-1.11 SQL Injection Vulnerability =================================================================== Simple Forum Version 1.10-1.11 SQL...

Wordpress Plugin st_newsletter Remote SQL Injection Vulnerability

No description provided by source. Wordpress Plugin stnewsletter SQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 1 : allinurl :"wp-content/plugins/stnewsletter" DORK 2 : allinurl :"shiftthis-preview.php" EXPLOIT :...

WordPress Plugin WassUp 1.4.3 - to_date SQL Injection

WordPress Plugin WassUp 1.4.3 - todate SQL Injection getresults"SELECT id, wassupid, maxtimestamp as maxtimestamp, ip, hostname, searchengine, urlrequested, agent, referrer, spider, username, commentauthor FROM $tablename WHERE timestamp BETWEEN $fromdate AND $todate GROUP BY id ORDER BY...

BoastMachine 3.1 - mail.php id SQL Injection

BoastMachine 3.1 - mail.php id SQL Injection ...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members &...

dovecot -- Specific LDAP + auth cache configuration may mix up user logins

Dovecot reports: If two users with the same password and same passfilter variables log in within authcachettl seconds 1h by default, the second user may get logged in with the first user's cached passattrs. For example if passattrs contained the user's home/mail directory, this would mean that th...