Wbb3 - Blind SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; print q ----------------------------------------------- Wbb3 Blind Sql Injection Injection in Announce Plugin Kleinanzeigen Markt Coded By Molli use: ano.pl url user id Announce Catid Google:...

Qualcomm qpopper 3.0 'LIST' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/948/info A remotely exploitable buffer-overflow vulnerability affects Qualcomm's 'qpopper' daemon. This issue allows users already in possession of a username and password for a POP account to compromise the server runnin...

Rebus:list (list.php, list_id param) - SQL Injection Vulnerability

No description provided by source. Exploit Title: Rebus:list SQL Injection Vulnerability Date: 3/18/2013 Vendor Homepage: http://www.ptfs-europe.com/products/rebus/rebuslist/ Author: Robert Cooper robert.cooper at areyousecure.net Tested on: Linux/Windows 7 Vulnerable Parameters: listid= Google...

MyBB Member.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14684/info MyBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation could result in a compromise of the...

netbsd/x86 setreuid(0, 0); execve("/bin//sh", ..., NULL); 29 bytes

No description provided by source. / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, setreuid0, 0; execve/bin//sh, ..., NULL; note: unsafe shellcode, but 29 bytes long; doesn't work if eax & 0x40000000 != 0; / include sys/types.h include stdio.h include string.h char scode = \x99 // cltd...

MiniNuke <= 1.8.2 (news.asp hid) SQL Injection Exploit

No description provided by source. !/usr/bin/perl MiniNuke www.miniex.net Version: = 1.8.2 SQL-injection exploit. This exploit uses the vulnerability discovered by [email protected]. Exploit uses SQl-injection to give you the hash from user with chosen id. DetMyl, 2006 [email protected] use IO::Socket...

Oceandir <= 2.9 (show_vote.php id) Remote SQL Injection Vulnerability

No description provided by source. / @title Oceandir = 2.9 showvote.php id Remote SQL injection @author JEEN HACKER TEAM Jeen + Secertry @cost 250$ @script http://www.oceandir.com @copyright 2008 @homepage http://www.hackteach.org/cc/teach.php @email [email protected] , [email protected] / Exploit :...

openSUSE Security Update : net6 (openSUSE-2012-19)

Update of net6 to version 1.3.14 : + Ensure that overflows on the user ID assigned to each connection do not yield one that is already in use. CVE-2011-4093, bnc727710 + Do not leak information about logged-in users. CVE-2011-4091, bnc727708 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

OpenSSL Man-in-the-middle vulnerability

The Palo Alto Networks product security engineering team has completed analysis of our products' exposure to the vulnerabilities described in the OpenSSL Security Advisory dated June 5th, 2014. Of the 7 CVEs highlighted in the advisory, only CVE-2014-0224 is relevant to our software. The...

BEdita 3.4.0 CMS Multiple Vulnerabilities

Latest BEdita CMS suffers on few vulnerabilities because of poor parameter filtration and none csrf tokens. Title: BEdita 3.4.0 CMS Multiple Vulnerabilities Vendor: bedita.com Demo: site.demo.bedita.com Version: 3.4.0 Latest ATM Date: 02.06.14 Dork: intext:"Proudly powered by BEdita" Contact:...

UBUNTU-CVE-2014-0240

The modwsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes...

UBUNTU-CVE-2014-0012

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402...

PT-2014-3404

Name of the Vulnerable Software and Affected Versions PHP-Fusion versions 7.02.01 through 7.02.05 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the user ID in a user cookie. Recommendations For PHP-Fusion versions 7.02.01 through 7.02.05, update t...

DEBIAN-CVE-2014-0181

The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass intended access restrictions and modify network configurations by using a Netlink socket for the 1 stdou...

UBUNTU-CVE-2014-0181

The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass intended access restrictions and modify network configurations by using a Netlink socket for the 1 stdou...

Ensnare Web Application Attack Detection Utility Released

BOSTON – Two engineers from Netflix this week released to open source a security tool that detects attacks against web applications—and also reacts to those attacks with responses they hope will flummox a hacker to the point that he moves on to his next target. The utility is called Ensnare and i...

PT-2014-4192

Name of the Vulnerable Software and Affected Versions Open Web Analytics OWA versions prior to 1.5.6 Description A cross-site scripting XSS issue exists in the login page, allowing remote attackers to inject arbitrary web script or HTML via the owa user id parameter to "index.php". Recommendation...

[Racfsnow] Password cracker for RACF (IBM mainframe)

RACFSNOW is a highly optimised PC program for performing a dictionary attack against a RACF database, with the option of using a database unload IRRDBU00 to validate the User IDs to attack. It uses an ini file to control various parameters to enable focusing the attack on certain user IDs and or...

GoToMeeting Information Disclosure

ADVISORY INFORMATION ======================== Title: GoToMeeting Information Disclosure via Logging Output Android CVE: CVE-2014-1664 CVE Information: ASSIGNED Date published: PUBLIC Date of last update: 01/23/2014 Vendor Contacted: Citrix Release mode: Coordinated Release 2. VULNERABILITY...

DoliWamp 'jqueryFileTree.php' Traversal Gather Credentials

This module will extract user credentials from DoliWamp - a WAMP packaged installer distribution for Dolibarr ERP on Windows - versions 3.3.0 to 3.4.2 by hijacking a user's session. DoliWamp stores session tokens in filenames in the 'tmp' directory. A directory traversal vulnerability in...