CVE-2008-4339

Summary: CVE-2008-4339 affects Symantec Veritas NetBackup Server/Enterprise Server (versions 5.1 before MP7, 6.0 before MP7, 6.5 before 6.5.2). The vulnerability is in the Java Administration GUI (jnbSA) and allows remote authenticated users to gain privileges via unknown attack vectors related t...

CVE-2008-4339: Undefined Security Weakness

Unspecified vulnerability in the Java Administration GUI jnbSA in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava binaries."...

The Gemini Portal <= 4.7 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications =============================================================== The Gemini Portal eNYe-Sec - www.enye-sec.org Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create...

[SECURITY] Fedora 9 Update: phpMyAdmin-2.11.9.1-1.fc9

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

[SECURITY] Fedora 9 Update: phpMyAdmin-2.11.9.2-1.fc9

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

[SECURITY] Fedora 8 Update: phpMyAdmin-2.11.9.2-1.fc8

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

Sagem Routers F@ST Remote CSRF Exploit (dhcp hostname attack)

No description provided by source. !/usr/bin/env python OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO...

Sagem F@ST Routers - DHCP Hostname Cross-Site Request Forgery

!/usr/bin/env python OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO OOOOOO OOOOO OOOOO OOOOOO OOO OOO OO...

NetArtMedia Real Estate Portal 1.2 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== NetArtMedia Real Estate Portal 1.2 SQL Injection Vulnerability ============================================================== !R4Q!4N H4CK3R NetArtMedia Real Estate Portal v2.0...

NetArtMedia Jobs Portal 1.3 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== NetArtMedia Jobs Portal 1.3 Multiple SQL Injection Vulnerabilities ================================================================== !R4Q!4N H4CK3R NetArtMedia Jobs Portal...

NetArtMedia Real Estate Portal 1.2 SQL Injection Vulnerability

No description provided by source. !R4Q!4N H4CK3R NetArtMedia Real Estate Portal v2.0 Sql Injection Vulnerability Website : http://www.netartmedia.net Founded By : Encrypt3d.M!nd Home Page : http://encrypt3d.blogspot.com Remote Sql Injections : Affected File : index.php PoC:...

Netartmedia Real Estate Portal 1.2 - SQL Injection

Netartmedia Real Estate Portal 1.2 - SQL Injection !R4Q!4N H4CK3R NetArtMedia Real Estate Portal v2.0 Sql Injection Vulnerability Website : http://www.netartmedia.net Founded By : Encrypt3d.M!nd Home Page : http://encrypt3d.blogspot.com Remote Sql Injections : Affected File : index.php PoC:...

NetArtMedia Jobs Portal 1.3 Multiple SQL Injection Vulnerabilities

No description provided by source. !R4Q!4N H4CK3R NetArtMedia Jobs Portal 1.3 Multiple Sql Injection Vulnerabilities Website : http://www.netartmedia.net Founded By : Encrypt3d.M!nd Home Page : http://encrypt3d.blogspot.com Remote Sql Injections : Affected Files : index.php PoC:...

Netartmedia Real Estate Portal 1.2 - SQL Injection

!R4Q!4N H4CK3R NetArtMedia Real Estate Portal v2.0 Sql Injection Vulnerability Website : http://www.netartmedia.net Founded By : Encrypt3d.M!nd Home Page : http://encrypt3d.blogspot.com Remote Sql Injections : Affected File : index.php PoC: /index.php?mod=research&ad=-666 union select...

CVE-2008-4128

Multiple cross-site request forgery CSRF vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via 1 a certain "show privilege" command to the /level/15/exec/- URI, and 2 a certain "alias...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via 1 a certain "show privilege" command to the /level/15/exec/- URI, and 2 a certain "alias...

CVE-2008-4128

CVE-2008-4128 concerns Cisco IOS 12.4 on the 871 ISR, where multiple CSRF vulnerabilities in the HTTP Administration component can allow remote command execution via the show privilege command to /level/15/exec/- and the alias exec command to /level/15/exec/-/configure/http. Connected sources con...

CVE-2008-4128

Multiple cross-site request forgery CSRF vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via 1 a certain "show privilege" command to the /level/15/exec/- URI, and 2 a certain "alias...

CVE-2008-4128: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via 1 a certain "show privilege" command to the /level/15/exec/- URI, and 2 a certain "alias...

Cisco Router HTTP Administration CSRF Command Execution Exploit 2

No description provided by source. !-- Jeremy Brown [email protected]/http://jbrownsec.blogspot.com Cisco Router HTTP Administration CSRF Remote Command Execution Universal Exploit 2 Replace "10.10.10.1" with the IP address of the target router, embed this in a web page and hope for the best...