CVE-2011-0006

The imalsmruleinit function in security/integrity/ima/imapolicy.c in the Linux kernel before 2.6.37, when the Linux Security Modules LSM framework is disabled, allows local users to bypass Integrity Measurement Architecture IMA rules in opportunistic circumstances by leveraging an administrator's...

CVE-2011-4601

familyfeedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted 1 AIM or 2 ICQ message associated with buddy-list addition...

(libpurple): Invalid UTF-8 string handling in OSCAR messages

familyfeedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted 1 AIM or 2 ICQ message associated with buddy-list addition...

CVE-2011-2773

Cross-site request forgery CSRF vulnerability in Mahara before 1.4.1 allows remote attackers to hijack the authentication of administrators for requests that add a user to an institution...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Mahara before 1.4.1 allows remote attackers to hijack the authentication of administrators for requests that add a user to an institution...

InverseFlow 2.4 - Cross-Site Request Forgery (Add Admin)

Exploit Title: InverseFlow v2.4 CSRF Vulnerabilities Add Admin User + Version : 2.4 + Author : EjRaM HaCkEr + Contact : m2z9.cn + Dork : inurl:"ticket.php?cmd=lost" + Software Link : http://asria.info/download/script/inverseflow.zip...

DEBIAN-CVE-2011-1944

Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when addi...

WordPress bSuite 4.0.7 Cross Site Scripting

Original advisory: http://www.ihteam.net/advisory/bsuite-wordpress-permanent-xss/ WordPress bSuite Add Admin Download link: http://wordpress.org/extend/plugins/bsuite/ Author contact: 29/06/2011 POC published: 11/07/2011 Plugin is out-of-date, last update on 2009, so this is just a POC that show...

Izlebizi Video Script Add Admin Account Exploit

Exploit for php platform in category web applications Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm ZoRLu member from Inj3ct0r Team 1 1...

Spacewalk: CSRF in all web portal forms

Cross-site request forgery CSRF vulnerability in the Spacewalk Java site packages aka spacewalk-java 1.2.39 in Spacewalk, as used in the server in Red Hat Network Satellite 5.3.0 through 5.4.1 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests...

CVE-2011-1721

Cross-site request forgery CSRF vulnerability in php/partieadministrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that 1 modify passwords or 2 add new projects. NOTE: some of these details are obtained from third party...

Allomani E-Store 1.0 - Cross-Site Request Forgery (Add Admin) (2)

E-Store 1.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/storescript.html === Exploit ===...

MeshCMS 3.5 - Remote Code Execution

MeshCMS 3.5 - Remote Code Execution !/usr/bin/python MeshCMS v3.5 remote code execution exploit Environment: Tomcat 7.02/ubuntu 10.04 1 details: There is a add member/editor/admin CSRF vulnerability in this CMS which is very clean for an attacker. The admin will not be told a user has been added...

Xinhua enterprise web site management system v4. 0 XSS0day add administrator and patch-vulnerability warning-the black bar safety net

From:B0mbErM@n Description:online repair function is not to submit the filter Analysis:xiu. asp not be submitted to the filter, resulting in execution of arbitraryXSSstatement. Patch:filter Exp: ../xiu. the asp directly into the repair, then at the contact address written on the SCRIPT...

YourTube v1.0 CSRF Vulnerability (Add User)

Exploit for php platform in category web applications .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.ac4p.com/ .:. Dork : inurl:"Powered by YourTube v1.0" === Exploit === 0day.today 2018-04-09...

Jax Calender admin bypass vulnerability

Exploit for php platform in category web applications ======================================= Jax Calender admin bypass vulnerability ======================================= Exploit Title: Jax Calender admin bypass vulnerability Date: 3.10.2010 Author: EraGoN Software Link:...

Pc4Uploader 9.0 Cross-site Request Forgery

Exploit for php platform in category web applications ========================================== Pc4Uploader 9.0 Cross-site Request Forgery ========================================== Exploit Title: pc4uploader XSRF Add Admin Exploit Date: 27-08-2010 Author: RENO TeaM : SauDi ViRuS TeaM SiTe:...

Outlook Web Access 2003 Cross Site Request Forgery

Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability Date: 07/20/2010 Author: anonymous Tested on: Microsoft Office Outlook Web Access for Exchange Server 2003 A cross-site request forgery vulnerability in Microsoft Office Outlook Web Access for Exchange...

KubeBlog - Cross-Site Request Forgery

KubeBlog - Cross-Site Request Forgery ======================================================================================== | Title : KubeBlog XSRF Vuln. | Author : The.Morpheus | email : [email protected] | Home : http://www.spyturks.com | Date : 03.05.2010 | Script : Copyright © 2008...

AdaptCMS Lite 1.5 - Arbitrary Add Admin

=========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download : http://sourceforge.net/projects/adaptcms/files/AdaptCMS%20Lite%20v1/1.5/AdaptCMSLite1.5.zip/download Advisory ...