CVE-2024-56337

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be...

CVE-2024-40725

A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local...

SOUND4 IMPACT/FIRST/PULSE/Eco 2.x password SQL Injection

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x password Authentication Bypass Vendor: SOUND4 Ltd. Product web page: https://www.sound4.com | https://www.sound4.biz Affected version: FM/HD Radio Processing: Impact/Pulse/First Version 2: 1.1/2.15 Impact/Pulse/First Version 1: 2.1/1.69 Impact/Pulse Eco 1.16 Voi...

[SECURITY] Fedora 35 Update: mod_auth_openidc-2.4.9.4-1.fc35

This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server...

[SECURITY] Fedora 27 Update: php-7.1.13-1.fc27

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

CLScript.com Classifieds Software SQL Injection Vunerability

No description provided by source. Exploit Title: CLScript.com Classifieds Software SQL Injection Vunerability Date: 27-4-2010 Author: 41.w4r10r Vendor Link : http://www.clscript.com/ Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : intext:Powered by CLscript.com Code :...

WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)

Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The issue is in the /src/acloglogin.php langid and lang parameters...

PHP City Portal Script 1.1 SQL Injection

Exploit Title: Php City Portal Script Software SQL Injection Google Dork: Powered by PHPCityPortal.com Date: Decembar/07/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://phpcityportal.com Version: 1.1 Tested on: Apache Unix An attacker may execute arbitrary SQL statements on the...

SoftBizScripts Dating Script SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== SoftBizScripts Dating Script SQL Injection Vulnerability ======================================================== Exploit Title: SoftBizScripts Dating Script SQL Injection Vunerability...

SoftBizScripts Hosting Script - SQL Injection

Exploit Title: SoftBizScripts Hosting Script SQL Injection Vunerability Date: 29-4-2010 Author: 41.w4r10r Vendor Link : http://softbizscripts.com/ Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : inurl:"browsecats.php?cid=" Code :...

SoftBizScripts Hosting Script SQL Injection

Exploit Title: SoftBizScripts Hosting Script SQL Injection Vunerability Date: 29-4-2010 Author: 41.w4r10r Vendor Link : http://softbizscripts.com/ Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : inurl:"browsecats.php?cid=" Code :...

Ramaas Software CMS SQL Injection

Exploit Title: Ramaas Software CMS SQL Injection Vulnerability Date: 27-4-2010 Author: 41.w4r10r Software Link : Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : intext:"Powered by Ramaas Software" Code :...

Ramaas Software CMS SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== Ramaas Software CMS SQL Injection Vulnerability =============================================== Exploit Title: Ramaas Software CMS SQL Injection Vulnerability Version: Web Application Tested on:...

Help Center Live 2.0.6(module=helpcenter&file=) Local File Inclusion

Exploit for php platform in category web applications ==================================================================== Help Center Live 2.0.6module=helpcenter&file= Local File Inclusion ==================================================================== Exploit Title: Help Center Live...

Uiga Personal Portal SQL Injection

Exploit Title: Uiga Personal Portal index.php view SQL Injection Vulnerability Date: 27-4-2010 Author: 41.w4r10r Software Link : http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : Code : Exploited Link :...

Help Center Live 2.0.6 - 'module=helpcenter&file=' Local File Inclusion

Exploit Title: Help Center Live 2.0.6module=helpcenter&file= Local File Inclusion Date: 27-4-2010 Author: 41.w4r10r Software Link : Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : inurl:"module=helpcenter" Code :...

Uiga Personal Portal - index.php view SQL Injection

Uiga Personal Portal - index.php view SQL Injection Exploit Title: Uiga Personal Portal index.php view SQL Injection Vulnerability Date: 27-4-2010 Author: 41.w4r10r Software Link : http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: Web Application Tested on: Apcahe/Unix CVE ...

Worldviewer.com CMS - SQL Injection

Exploit Title: Worldviewer.com CMS SQL Injection Vulnerability Date: 12-4-2010 Author: 41.w4r10r aka AN1L Software Link : Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : inurl:"php/showContent.php?linkid=" Or inurl:"/php/showNews.php?newsid=" Code : This Is The CMS Created ...

vBulletin "Cyb - Advanced Forum Statistics" DOS

Exploit for php platform in category dos / poc =============================================== vBulletin "Cyb - Advanced Forum Statistics" DOS =============================================== Exploit Title: vBulletin "Cyb - Advanced Forum Statistics" DOS Date: 10-4-2010 Author: Andhra Hackers...

vBulletin (Cyb - Advanced Forum Statistics) - 'misc.php' Denial of Service

Exploit Title: vBulletin "Cyb - Advanced Forum Statistics" DOS Date: 10-4-2010 Author: Andhra Hackers Software Link: Version: Web Application Tested on: Apcahe/Unix CVE : if exists Code : PHP crashes existed from a long time back and there were several issues which were a reason for that. 1PHP pa...