438 matches found
CVE-2009-4410
The fuseioctlcopyuser function in the ioctl handler in fs/fuse/file.c in the Linux kernel 2.6.29-rc1 through 2.6.30.y uses the wrong variable in an argument to the kunmap function, which allows local users to cause a denial of service panic via unknown vectors...
CVE-2009-3184: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in index.php in Pirates of The Caribbean in the E-Gold Game Series allow remote attackers to execute arbitrary SQL commands via the 1 x and 2 y parameters...
CVE-2008-5863: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the y parameter in a getuser action...
Linux each version of the local root password cracking method-vulnerability warning-the black bar safety net
This time the old met was asked and the various linux versions of the local root password cracking method, I here own and on the network to collect some information, we want to see this article and just used to give the art a little help: A RedHat/CentOS/Fedora system password cracking 1. In the...
DevMass Shopping Cart <= 1.0 Remote File Include Vulnerability
No description provided by source. ======================================================================== || || || || || || || || || &nb...
contentcustom-disclose.txt
CONTENTCustomizer Trick: Hit Ctrl+Y on a page that ContentCustomizer controls and it brings you to the login screen ; Dork: inurl:"generator/default.php?doc=" Other fun stuff: dialog.php?action=del&doc='+pagename // Delete dialog.php?action=delbackup&doc='+pagename // Delete Backup...
CVE-2007-5179
Multiple cross-site scripting XSS vulnerabilities in iletisim.asp in Y&K Iletisim Formu allow remote attackers to inject arbitrary web script or HTML via the 1 ad, 2 sehir, 3 yas, 4 cins, 5 tel, 6 mail, and 7 mesaj parameters. NOTE: the provenance of this information is unknown; the details are...
CVE-2007-5179
CVE-2007-5179 describes multiple XSS vulnerabilities in iletisim.asp of Y&K Iletisim Formu. The impact is injection of arbitrary web script/HTML via the parameters ad, sehir, yas, cins, tel, mail, and mesaj, with the note that provenance is from third-party information. Connected documents confir...
CVE-2007-5179: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in iletisim.asp in Y&K Iletisim Formu allow remote attackers to inject arbitrary web script or HTML via the 1 ad, 2 sehir, 3 yas, 4 cins, 5 tel, 6 mail, and 7 mesaj parameters. NOTE: the provenance of this information is unknown; the details are...
Unfixed XSS vulnerability at y-click.com
Security researcher kusomiso.com, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1080889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...
Unfixed XSS vulnerability at y-click.com
Security researcher kusomiso.com, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1080889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...
Unfixed XSS vulnerability at y-click.com
Security researcher kusomiso.com, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1080889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...
Unfixed XSS vulnerability at y-click.com
Security researcher kusomiso.com, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1080889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...
Unfixed XSS vulnerability at y-click.com
Security researcher kusomiso.com, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1080889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...
neuron news 1.0 - index.php?q Local File Inclusion
neuron news 1.0 - index.php?q Local File Inclusion \|/// \ - - // Y! Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Neuron News 1.0 Download : http://downloads.localhost.be/scripts/neuronnews.zip Author : Dj7xpl HomePage : http://r00t.ir /...
phpsyncml 0.1.2 - Remote File Inclusion
======================================================================== || || || || || || || || || || || || ======================================================================== ======================================================================== phpsyncml = 0.1.2 Remote File Include...
AV Tutorial Script 1.0 - Remote User Pass Change
AV Tutorial Script 1.0 - Remote User Pass Change 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string...
AV Tutorial Script 1.0 - Remote User Pass Change
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i...
NavBoard 2.6.0 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================ NavBoard 2.6.0 Remote Code Execution Exploit ============================================ "; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print "";...
r2k-disclose.txt
\|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ / --------------------------------------------------------------------- ! Portal...