ZyXEL P-660R-T1 V2 Cross Site Scripting

Name : ZyXEL P-660R-T1 V2 XSS Author : Usman Saeed from Xc0re Security Research Group Homepage :http://www.xc0re.net Dated : 22/11/2010 Exploit: VECTOR :http://IP/Forms/home1?&HomeCurrentDate='alert1;'01%2F01%2F2000 This works with the post request ! As by default this value is sent through POST...

ReOS v2 0 5 RFI Vulnerability

Exploit for php platform in category web applications ============================= ReOS v2 0 5 RFI Vulnerability ============================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3...

Free Adult Script V2 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ Free Adult Script V2 SQL Injection Vulnerability ================================================ Exploit Title: Free Adult Script V2 SQL ©njection Vulnerability Date: 29.10.2010 Author: HeRoTu...

SuSE 10 Security Update : Tomcat 5 (ZYPP Patch Number 6839)

This update of tomcat5/6 fixes : - Directory traversal vulnerability allowed remote attackers to create or overwrite arbitrary files/dirs with a specially crafted WAR file. CVE-2009-2901: CVSS v2 Base Score: 4.3 When autoDeploy is enabled the autodeployment process deployed appBase files that...

Dmx Ready v2 lite Database Disclosure Exploit

Exploit for perl platform in category web applications ============================================= Dmx Ready v2 lite Database Disclosure Exploit ============================================= !/usr/bin/perl -w Dmx Ready v2 lite Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/201...

rapidCMS V2 backend authentication bypass vulnerability-vulnerability warning-the black bar safety net

rapidCMS V2 background login authentication has not been strictly filtered, resulting in Universal password bypass vulnerability. Use method: User: something Pass: 'OR '1'='1 Demo : http://site/admin.php...

rapidCMS V2 Authentication Bypass

Exploit for php platform in category web applications ================================= rapidCMS V2 Authentication Bypass ================================= Exploit Title: rapidCMS V2 Authentication Bypass Date: 18/07/2010 Author: Mahjong Software Link: www.rapidcms.de Version: V2 Tested on: Linux...

SuSE9 Security Update : Tomcat (YOU Patch Number 12585)

This update of tomcat5/6 fixes : - CVSS v2 Base Score: 5.8. CVE-2009-2693 - CVSS v2 Base Score: 4.3 Directory traversal vulnerability allowed remote attackers to create or overwrite arbitrary files/dirs with a specially crafted WAR file. CVE-2009-2902 - CVSS v2 Base Score: 4.3 When autoDeploy is...

Multi Auktions Komplett System 2 Blind SQL Injection

----------------------------Information------------------------------------------------ +Name : Multi Auktions Komplett System V2 1 ----------------------------------------------------------------------------------------- Exp...

[SECURITY] Fedora 11 Update: nss-3.12.6-1.2.fc11

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

CH-CHS.ch 2 Shell Upload

======================================================================================== | Title CH-CMS.ch-V2 Upload Vulnerability | Author El-Kahina | email please forgive me | | Web Site http://kewlshare.com/dl/f1b6b4d587ab/95Final2bugfixinstall.rar.html | Script copyright 2007/08 by grillmeist...

CH-CMS.ch-V2 Upload Vulnerability

Exploit for unknown platform in category web applications ================================= CH-CMS.ch-V2 Upload Vulnerability ================================= ======================================================================================== | Title CH-CMS.ch-V2 Upload Vulnerability | Auth...

CH-CMS.ch 2 - Arbitrary File Upload

CH-CMS.ch 2 - Arbitrary File Upload ======================================================================================== | Title CH-CMS.ch-V2 Upload Vulnerability | Author El-Kahina | email please forgive me $ | Web Site http://kewlshare.com/dl/f1b6b4d587ab/95Final2bugfixinstall.rar.html $ |...

CH-CMS.ch 2 - Arbitrary File Upload

======================================================================================== | Title CH-CMS.ch-V2 Upload Vulnerability | Author El-Kahina | email please forgive me $ | Web Site http://kewlshare.com/dl/f1b6b4d587ab/95Final2bugfixinstall.rar.html $ | Script copyright 2007/08 by...

openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-1993)

This update of php5 fixes: CVE-2008-5624: CVSS v2 Base Score: 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P: Permissions, Privileges, and Access Control CWE-264 CVE-2008-5625: CVSS v2 Base Score: 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P: Permissions, Privileges, and Access Control CWE-264 CVE-2008-5814: CVSS v2...

Sablog-X v2.x 任意变量覆盖漏洞

由于Sablog-x v2.x的common.inc.php里$EVO初始化处理存在逻辑漏洞，导致可以利用extract来覆盖任意变量，最终导致xss、sql注射、代码执行等很多严重的安全漏洞。 common.inc.php代码里： .... $onoff = functionexists'iniget' ? iniget'registerglobals' : getcfgvar'registerglobals'; if $onoff != 1 @extract$COOKIE, EXTRSKIP; @extract$POST, EXTRSKIP; @extract$GET,...

Sablog-X v2. x is an arbitrary variable overwrite vulnerability-vulnerability warning-the black bar safety net

author: 80vul-B team:http://www. 80vul. com A description of Syria: the Due to the Sablog-x v2. x common. inc. php in the$EVO the initialization process there is a logical vulnerability, leading to can use extractto overwrite any of the variables, eventually leading toxss, sql injection, code...

Multiple File Attachments Mail Form Pro v2 - WebShell upload

Exploit for unknown platform in category web applications ============================================================ Multiple File Attachments Mail Form Pro v2 - WebShell upload ============================================================ Exploit Title: Multiple File Attachments Mail Form Pro v...

Authentium SafeCentral <= 2.6 shdrv.sys local kernel ring0 SYSTEM exploit

No description provided by source. / safecentral-unharden-v2.c Copyright c 2009 by [email protected] Authentium SafeCentral = 2.6 shdrv.sys local kernel ring0 SYSTEM exploit by mu-b - Thu 3 Sep 2009 - Tested on: shdrv.sys 2.0.0.146 Compile: MinGW + -lntdll - Private Source Code -DO NOT DISTRIBU...

Authentication flaw

The 1 CHAP and 2 MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator PPPAC function in Internet Initiative Japan SEIL/B1 firmware 1.00 through 2.52 use the same challenge for each authentication attempt, which allows remote attackers to bypass authentication via a replay attack...