CVE-2010-0779: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Gcms Generator SQL Injection

==================================== Gcms generator SQLi Vulnerability ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by...

WinComLPD 3.0.2 - Remote Buffer Overflow (Metasploit)

$Id: wincomlpdadmin.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Shareasale Script - SQL Injection

1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Shareasale Script SQL Vulnerable Vendor url:http://www.jce-tech.com Version:1 Price:n/a Published:...

Shopping Cart Script With Affiliate Program SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Shopping Cart Script with Affiliate Program SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================================= Shopping Cart Script with Affiliate Program SQL Injection Vulnerability =======================================================================...

Fake Government Email Spam Hides Zbot

Attention-piquing malicious spam emails purportedly coming from the DHS, the Pentagon or the Transportation Security Administration have recently been spotted by researchers. Read the full article. Help Net Security...

CVE-2010-0284: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console aka Access Management Console in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with...

Shopping Cart Script with Affiliate Program - SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Shopping Cart Script with Affiliate Program SQL Injection Vendor url:http://www.yourfreeworld.com Version:n/a Price:399$ Published: 2010-06-19 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW member...

Real Estate - SQL Injection

Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail photo of the property. Which are...

McAfee UTM Firewall crossite scripting

Crossite scripting in administration interface...

IISWorks FileMan fileman.mdb Remote User Database Disclosure

Exploit for asp platform in category web applications ============================================================ IISWorks FileMan fileman.mdb Remote User Database Disclosure ============================================================ Exploit Title: IISWorks FileMan fileman.mdb Remote User...

D-Link DI-604 router vulnerabilities

Crossite scripting, buffer overflow in administration interface...

Digital Interchange Document Library - SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Restaurant SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================== Restaurant SQL Injection Vulnerability ====================================== Author: L0rd CrusAd3r aka VSN email protected Exploit Title: Full Site for Restaurant SQL Injection Vulnerability Vendor...

DaLogin - Multiple Vulnerabilities

dalogin 2.2 multiple vulnerabilites app desc: Configurable WebSite. PHP + Mysql: news zone with rss feed, private zone, languages, themes, administration panel app source: http://dalogin.sourceforge.net/ author: hc0 1 config file disclosure you can access config.ini file from...

Site to Store Automobile - Motorcycle Boat SQL Injection

Vendor url:http://www.mformula.com.br/ Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW & AH members. Spl Greetz to:inj3ct0r.com Team Description: Site to Store Automobile - Motorcycle - Boat SQL Injection Vulnerability Resources and Advantages Better cost-benefit...

Web Wiz Forums 9.68 SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== Web Wiz Forums 9.68 SQL Injection Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

Hotel Resort Site Script with OnLine Reservation System - SQL Injection

Hotel Resort Site Script with OnLine Reservation System - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects,...

IT-Grundschutz M4.288: Sichere Administration von VoIP-Endgeräten

IT-Grundschutz M4.288: Sichere Administration von VoIP-Endgeräten. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94228 Diese Prüfung bezieht sich auf die 11...