152 matches found
Grub2 Integer Overflow Vulnerability
GNU GRUB is a set of bootloaders for the GNU Project developed by the GNU Project.Grub2 is an enhanced version of it. A security vulnerability exists in the handling of backspace characters in the 'grubusernameget' function in the grub2 grub-core/normal/auth.c file and the 'grubpasswordget '...
Barracuda #31 FW - Persistent Access Policy Vulnerability
Document Title: =============== Barracuda 31 FW - Persistent Access Policy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1070 Barracuda Networks Security ID BNSEC: BNSEC-2068 Release Date: ============= 2014-02-24 Vulnerability Laboratory...
PhpBB2 Custom Mass PM 1.4.7 Cross Site Scripting
No description provided by source. ^ Exploit title: PhpBB2 Module "Custom Mass PM" Cross Site Scripting Vulnerability ^ Author : Silic0n sciencemedia017Atyahoo.com ^ MOD Title: Custom mass PM ^ MOD Description: Add mass PM functionnality to group members or all forums members for authorized users...
DEBIAN-CVE-2009-0542
SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...
CVE-2008-5942
Multiple cross-site scripting XSS vulnerabilities in MODx before 0.9.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the preserveUrls function and 2 "username input." NOTE: vector 2 may be related to CVE-2008-5939...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in MODx before 0.9.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the preserveUrls function and 2 "username input." NOTE: vector 2 may be related to CVE-2008-5939...
CVE-2008-5942
Multiple cross-site scripting XSS vulnerabilities in MODx before 0.9.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the preserveUrls function and 2 "username input." NOTE: vector 2 may be related to CVE-2008-5939...
What makes the“Baidu”cross-site—INPUT the XSS works and the idea of parsing-vulnerability warning-the black bar safety net
Article author: lszm Technical team: fooling around with the client information security team www.xaqd.net The Western Union network security group http://bbs.zmke.com What is the INUPT XSS which for many people is perhaps a new term it! INPUT XSS related to the use of one of the earliest to appe...
cmsSQL.txt
Hello Title : CMS.R. the Content Management System admin authentication baypass Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] The Vulnerability works 100% with magicquotesgpc = off put the user name value ' or 1=1/ code ' or 1=1/ /code and...
UBBCentral UBB.Threads 6.2.x 6.3x - One Char Brute Force
UBBCentral UBB.Threads 6.2.x 6.3x - One Char Brute Force !/usr/bin/perl use LWP::UserAgent; UBB.Threads 6.2. - 6.3. exploit with one char brute technique by 1dt.w0lf // r57 $path = $ARGV0; $username = $ARGV1; $snum = 1; $n=0; $|++; if @ARGV 2 print "Please wait...\r\n"; print ""; while1...
Jordan Windows Telnet Server 1.0/1.2 - 'Username' Stack Buffer Overrun (1)
source: https://www.securityfocus.com/bid/9316/info Jordan Windows Telnet Server has been reported prone to a remote buffer overrun vulnerability. The issue has been reported to present itself when a username of excessive length is supplied to the Telnet server. Due to a lack of bounds checking,...
