Nuked-klaN 1.7.7 / SP4.4 - Multiple Vulnerabilities

URL: http://real.o-n.fr/ Date: 14/10/2008 Special thanks to Louis for remembering me I had to finish it = VULNERABILITY DETAILS --------------------- Nuked-klaN suffers from a vulnerability due to HTTPREFERER, which is not correctly filtered before being inserted in nukedstatsvisitor table. If HT...

Cisco Unity authentication bypass

Authentication bypass to administration features if anonymous access is enabled...

bluecoat-bypass.txt

Blue Coat K9 Web Protection V4.0.230 Beta Vulnerability Set 5, 2008 -- Affected Vendors: Blue Coat -- Affected Products: K9 Web Protection V4.0.230 Beta -- Download at: http://www1.k9webprotection.com/getk9/beta.php -- Vulnerability Details: A vulnerability exists in the Blue Coat K9 Web Protecti...

RPortal 1.1 (file_op) Remote File Inclusion Vulnerability

No description provided by source. RPortal v1.1 Rportal is a management system of contents simple and powerful Web, enabling you to create your site in a few minutes, while profiting from a complete and effective administration. Remote and Local File Inclusion Vulnerability = 1.1 Found the 29th...

CVE-2008-4339

Unspecified vulnerability in the Java Administration GUI jnbSA in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava binaries."...

Design/Logic Flaw

Unspecified vulnerability in the Java Administration GUI jnbSA in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava binaries."...

CVE-2008-4339

Summary: CVE-2008-4339 affects Symantec Veritas NetBackup Server/Enterprise Server (versions 5.1 before MP7, 6.0 before MP7, 6.5 before 6.5.2). The vulnerability is in the Java Administration GUI (jnbSA) and allows remote authenticated users to gain privileges via unknown attack vectors related t...

CVE-2008-4339

Unspecified vulnerability in the Java Administration GUI jnbSA in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava binaries."...

CVE-2008-4339: Undefined Security Weakness

Unspecified vulnerability in the Java Administration GUI jnbSA in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava binaries."...

The Gemini Portal <= 4.7 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications =============================================================== The Gemini Portal eNYe-Sec - www.enye-sec.org Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create...

[SECURITY] Fedora 9 Update: phpMyAdmin-2.11.9.1-1.fc9

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

[SECURITY] Fedora 9 Update: phpMyAdmin-2.11.9.2-1.fc9

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

[SECURITY] Fedora 8 Update: phpMyAdmin-2.11.9.2-1.fc8

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

Sagem Routers F@ST Remote CSRF Exploit (dhcp hostname attack)

No description provided by source. !/usr/bin/env python OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO...

Sagem F@ST Routers - DHCP Hostname Cross-Site Request Forgery

!/usr/bin/env python OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO OOOOOO OOOOO OOOOO OOOOOO OOO OOO OO...

NetArtMedia Real Estate Portal 1.2 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== NetArtMedia Real Estate Portal 1.2 SQL Injection Vulnerability ============================================================== !R4Q!4N H4CK3R NetArtMedia Real Estate Portal v2.0...

NetArtMedia Real Estate Portal 1.2 SQL Injection Vulnerability

No description provided by source. !R4Q!4N H4CK3R NetArtMedia Real Estate Portal v2.0 Sql Injection Vulnerability Website : http://www.netartmedia.net Founded By : Encrypt3d.M!nd Home Page : http://encrypt3d.blogspot.com Remote Sql Injections : Affected File : index.php PoC:...

Netartmedia Real Estate Portal 1.2 - SQL Injection

Netartmedia Real Estate Portal 1.2 - SQL Injection !R4Q!4N H4CK3R NetArtMedia Real Estate Portal v2.0 Sql Injection Vulnerability Website : http://www.netartmedia.net Founded By : Encrypt3d.M!nd Home Page : http://encrypt3d.blogspot.com Remote Sql Injections : Affected File : index.php PoC:...

NetArtMedia Jobs Portal 1.3 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== NetArtMedia Jobs Portal 1.3 Multiple SQL Injection Vulnerabilities ================================================================== !R4Q!4N H4CK3R NetArtMedia Jobs Portal...

Netartmedia Real Estate Portal 1.2 - SQL Injection

!R4Q!4N H4CK3R NetArtMedia Real Estate Portal v2.0 Sql Injection Vulnerability Website : http://www.netartmedia.net Founded By : Encrypt3d.M!nd Home Page : http://encrypt3d.blogspot.com Remote Sql Injections : Affected File : index.php PoC: /index.php?mod=research&ad=-666 union select...