VUPEN Security Research - Adobe Acrobat and Reader "newfunction" Memory Corruption Vulnerability (CVE-2010-2168)

VUPEN Security Research - Adobe Acrobat and Reader "newfunction" Memory Corruption Vulnerability CVE-2010-2168 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Adobe Acrobat and Reader are the global standards for electronic document sharing. They are used to create,...

YPNinc PHP Realty Script - 'docID' SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- YPNinc...

HoloCMS 9.0.47 (news.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== HoloCMS 9.0.47 news.php SQL Injection Vulnerability ===================================================== +Title: HoloCMS 9.0.47 news.php SQL Injection Vulnerability + About : Author :...

Web Application Security Scanner: w3af

w3af is a Web Application Attack and Audit Framework The project’s goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. Identify and exploit a SQL injection One of the most difficult parts of securing your application is to identify the...

VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities (CVE-2010-2167)

VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities CVE-2010-2167 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Adobe Flash Player is a cross-platform browser-based application runtime that delivers uncompromised viewin...

CMS RedAks 2.0 - Multiple Cross-site Scripting issues

Exploit for php platform in category web applications ===================================================== CMS RedAks 2.0 - Multiple Cross-site Scripting issues ===================================================== Details ============= Product: CMS RedAks 2.0 Security-Risk: moderated...

CMS RedAks 2.0 - SQL Injection vulnerability

Exploit for php platform in category web applications ============================================ CMS RedAks 2.0 - SQL Injection vulnerability ============================================ Details ============= Product: CMS RedAks v.2.0 Security-Risk: high Remote-Exploit: yes Vendor-URL:...

[MajorSecurity SA-073]Subdreamer CMS - SQL injection vulnerability

MajorSecurity SA-073Subdreamer CMS - SQL injection vulnerability Details ============= Product: Subdreamer CMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.subdreamer.com/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz...

[MajorSecurity SA-071]phpFaber CMS - Multiple stored Cross-site Scripting issues

MajorSecurity SA-071phpFaber CMS - Multiple stored Cross-site Scripting issues Details ============= Product: phpFaber CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.phpfaber.com/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz...

VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392)

VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability CVE-2010-1392 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser, with...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities

PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities I. BACKGROUND --------------------- "PHP-Calendar is a simple web calendar. It is targeted towards groups that need to collaboratively create and track events. In that same collaborative spirit, the source for...

phpGroupWare <= 0.9.16.015 SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== phpGroupWare = 0.9.16.015 SQL Injection Vulnerability ====================================================== I. BACKGROUND --------------------- "phpGroupWare is a fully featured, web base...

waibrasil Remote / Local File Inclusion

Exploit for php platform in category web applications ======================================= waibrasil Remote / Local File Inclusion ======================================= Author: eXeSoul Vendor: www.waibrasil.com.br category: Remote Version: Web Application Tested on: Apcahe/Unix Code : exploi...

wsCMS SQL Injection

Exploit Title: wsCMS news.php Sql injection Vulnerability Date: 1-5-2010 Author: Err0R Software Link: Websolutions.ca Version: php Code : 1272 ================================================= wsCMS news.php Sql injection Vulnerability ================================================= + Author :...

Joomla! Component Table JX - Cross-Site Scripting

Joomla! Component Table JX - Cross-Site Scripting Exploit Title: Joomla Component Table JX XSS Vulnerabilities Date: 01.05.2010 Author: Valentin Category: webapps/0day Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Tit...

New-CMS - Multiple Vulnerabilities

New-CMS - Multiple Vulnerabilities Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com...

ASPCode CMS <= v1.5.8 Multiple Vulnerabilities

Exploit for asp platform in category web applications ============================================== ASPCode CMS yahoo.it - ictsec.wordpress.com 1 - Multiple XSS Vulnerability http://host/default.asp?sec=1&ma1="alert"XSS"; http://host/default.asp?sec=1&tag="alert"XSS";...

60cycle CMS 2.5.2 Cross Site Request Forgery

======================================================================================== | Title : 60 cycleCMS V 2.5.2 CSRF Change Username & Password Exploit | Author : EL-KAHINA | Home : www.iqs3cur1ty.com/vb | Web Site : http://php.opensourcecms.com/scripts/details.php?scriptid=337 | Tested on...

Joomla Component com_iproperty 1.5.3 (id) SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================================== Joomla Component comiproperty 1.5.3 id SQL Injection Vulnerability ===================================================================== / / / \ \ \ \ \ / / \\ \ \ \ \ // //...