T-Dreams Cars Ads Package 2.0 - SQL Injection

Author: R4dc0re Exploit Title: T-Dreams Cars Ads Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:2.0 Price:31$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and ...

Linksys Routers - Cross-Site Request Forgery

Linksys Routers - Cross-Site Request Forgery It seems to be fairly well known that there are multiple unpatched CSRF vulnerabilities in the administration interfaces for various Linksys routers. Since the initial reports of these are from a few years ago, and since some exploits are available, I...

Linksys Router Cross Site Request Forgery

It seems to be fairly well known that there are multiple unpatched CSRF vulnerabilities in the administration interfaces for various Linksys routers. Since the initial reports of these are from a few years ago, and since some exploits are available, I have written additional proof of concept...

Alguest 1.1c-patched Authentication Bypass

New eVuln Advisory: Cookie authentication bypass in Alguest Summary: http://evuln.com/vulns/152/summary.html Details: http://evuln.com/vulns/152/description.html -----------Summary----------- eVuln ID: EV0152 Software: Alguest Vendor: n/a Version: 1.1c-patched Critical Level: high Type:...

Fedora Update for phpMyAdmin FEDORA-2010-13402

Check for the Version of phpMyAdmin OpenVAS Vulnerability Test Fedora Update for phpMyAdmin FEDORA-2010-13402 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Multiple Vulnerabilities in BEdita

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BEdita which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in BEdita The vulnerability exists due to input sanitation error in...

Multiple vulnerabilities in chCounter <= 3.1.3

Multiple vulnerabilities were found in web application chCounter = 3.1.3. Author: - Matias [email protected]. Requirements: - Downloads must be enabledthis is not default. - magicquotes off. - Access to administration site =SQLInjection= Location:...

Oracle Secure Backup Administration selector parameter command injection

Added: 11/19/2010 CVE: CVE-2010-0906 BID: 41597 OSVDB: 67128 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability allows remote, authenticated attackers to execute arbitrary commands specified in the...

chCounter <= 3.1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== chCounter = 3.1.3 SQL Injection Vulnerability ============================================== !/usr/bin/python Exploit Title: chCounter = 3.1.3 SQLInjection Date: 2010/11/18 Author: Matias...

Oracle Secure Backup Administration selector parameter command injection

Added: 11/19/2010 CVE: CVE-2010-0906 BID: 41597 OSVDB: 67128 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability allows remote, authenticated attackers to execute arbitrary commands specified in the...

chCounter 3.1.3 SQL Injection

!/usr/bin/python Exploit Title: chCounter = 3.1.3 SQLInjection Date: 2010/11/18 Author: Matias [email protected]. Software Link: http://chcounter.org/chCounter3/getfile.php?id=5 Version: 3.1.3 Tested on: Ubuntu Server 10.04 with apache Requirements: - Downloads must be...

chCounter 3.1.3 - SQL Injection

!/usr/bin/python Exploit Title: chCounter = 3.1.3 SQLInjection Date: 2010/11/18 Author: Matias [email protected]. Software Link: http://chcounter.org/chCounter3/getfile.php?id=5 Version: 3.1.3 Tested on: Ubuntu Server 10.04 with apache Requirements: - Downloads must be...

Directory traversal

Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

Authentication flaw

The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a // slash slash at the beginning of a URI, as demonstrated by the //system.html URI...

CVE-2010-4232

The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a // slash slash at the beginning of a URI, as demonstrated by the //system.html URI...

PT-2010-5371

Name of the Vulnerable Software and Affected Versions Camtron CMNC-200 Full HD IP Camera version 1.102A-008 TecVoz CMNC-200 Megapixel IP Camera version 1.102A-008 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the URI, due to a directory traversal...

Fedora Update for luci FEDORA-2010-16601

Check for the Version of luci OpenVAS Vulnerability Test Fedora Update for luci FEDORA-2010-16601 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

PT-2010-5372

Name of the Vulnerable Software and Affected Versions Camtron CMNC-200 Full HD IP Camera version 1.102A-008 TecVoz CMNC-200 Megapixel IP Camera version 1.102A-008 Description The issue concerns the web-based administration interface, which allows remote attackers to bypass authentication. This ca...

Fedora Update for luci FEDORA-2010-16617

Check for the Version of luci OpenVAS Vulnerability Test Fedora Update for luci FEDORA-2010-16617 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CVE-2010-4231: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. dot dot in the URI...