Code injection

The Zend Engine in PHP before 5.4.16 RC1, and 5.5.0 before RC2, does not properly determine whether a parser error occurred, which allows context-dependent attackers to cause a denial of service memory consumption and application crash via a crafted function definition, as demonstrated by an atta...

kernel: net: incorrect SCM_CREDENTIALS passing

The scmsetcred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application...

DEBIAN-CVE-2013-1979

The scmsetcred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application...

UBUNTU-CVE-2013-1834

notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified 1 userid or 2 courseid field...

Hacking Facebook Passwords like changing your own Password

Hacker found a way to hack and change your password like, just he used to change his own password. Confused ? Recently Facebook fix a very critical vulnerability on the tip of 'Sow Ching Shiong', an independent vulnerability researcher. Flaw allows anyone to reset the password of any Facebook use...

MyBB Follower User 1.5 SQL Injection

Exploit Title: Follower User MyBB plugin SQL Injection 0day Google Dork: intext:"Users subscribed to" inurl:member.php -site:fwcombie.us Date: 13.10.2012 Exploit Author: Th3FreakPony Software Link: http://mods.mybb.com/view/suscriber-user Version: 1.5+ Tested on: Linux...

MyBB Follower User Plugin - SQL Injection

Exploit Title: Follower User MyBB plugin SQL Injection 0day Google Dork: intext:"Users subscribed to" inurl:member.php -site:fwcombie.us Date: 13.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/suscriber-user Version: 1.5+ Tested on: Linux...

MyBB Follower User Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Follower User MyBB plugin SQL Injection 0day Google Dork: intext:"Users subscribed to" inurl:member.php -site:fwcombie.us Date: 13.10.2012 Exploit Author: Th3FreakPony Software Link: http://mods.mybb.com/view/suscriber-user...

Design/Logic Flaw

Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to gain privileges by sending a message to 1 Cloud Controller or 2 Walrus with the internal message format and a modified user id...

PT-2012-5181

Name of the Vulnerable Software and Affected Versions Eucalyptus versions prior to 3.1.1 Description The issue allows remote authenticated users to gain privileges by sending a message to certain components with a modified user id. This is due to the improper restriction of the binding of externa...

DEBIAN-CVE-2012-4425

libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS environment variable. NOTE: it could be argued that this is a vulnerability in the applications that do...

OpenDocMan 1.2.6.1 - Cross-Site Request Forgery (Password Change)

OpenDocMan 1.2.6.1 - Cross-Site Request Forgery Password Change Exploit Title: OpenDocMan Password Change CSRF Date: 22/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.opendocman.com/ Software Link:...

IBM WebSphere MQ File Transfer Edition Web Gateway CSRF Vulnerability

Exploit for php platform in category web applications Exploit Author: Nir Valtman Description: Malicious user is able to add userspace, change permissions on existing userspace and add MQMD MQ Message Descriptor user IDs. All of the these vulnerabilities can be exploited using a CSRF Cross Site...

IBM Websphere MQ File Transfer Edition Web Gateway - Cross-Site Request Forgery

IBM Websphere MQ File Transfer Edition Web Gateway - Cross-Site Request Forgery Exploit Author: Nir Valtman Description: Malicious user is able to add userspace, change permissions on existing userspace and add MQMD MQ Message Descriptor user IDs. All of the these vulnerabilities can be exploited...

CVE-2012-3998

Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary SQL commands via the 1 paste id in admin/modules/modpastes.php or 2 show.php, 3 user id to admin/modules/modusers.php, 4 project to list.php, or 5 session id to show.php...

sip-call-spoof NSE Script

Spoofs a call to a SIP phone and detects the action taken by the target busy, declined, hung up, etc. This works by sending a fake sip invite request to the target phone and checking the responses. A response with status code 180 means that the phone is ringing. The script waits for the next...

PT-2012-5036

Name of the Vulnerable Software and Affected Versions MyClientBase version 0.12 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the first name or last name parameters in the...

phpAcounts v. 0. 5. 3 SQL injection and fix-vulnerability warning-the black bar safety net

Author: loneferret Affected version: 0.5.3 Developer address: http://phpaccounts.com/ Test platform: Ubuntu Server 11.10 Old app, still fun. Auth. Bypass: http://www.xxx.com /phpaccounts/index.php Username: x' or '1'='1' Password: whatever Upload php shell in preferences Letterhead image upload...

Network fun website management system V2. 1 The official version of 0day-vulnerability warning-the black bar safety net

Author: Samy source: bug 1. asp : % Response. Cookies"KuUSER""UserName"="" userid=request. querystring"userid" % % set rsmsg=server. createobject"adodb. recordset" sqlmsg="select from Comuser where comid="&userid&"" rem get the data without the filter rsmsg. open sqlmsg,conn,1,3 if rsmsg. eof and...

PT-2012-1265

Name of the Vulnerable Software and Affected Versions Insoshi versions prior to 20080920 Description The issue allows remote attackers to set the ForumPost user id value via a modified URL, related to a mass assignment vulnerability. This occurs because the software does not properly restrict the...