7099 matches found
CentOS Update for krb5-devel CESA-2010:0423 centos3 i386
Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2010:0423 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
Blaze Apps 1.4.0.051909 Cross Site Scripting / SQL Injection
www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP .NET 2 Content Management System. It...
Blaze Apps - Multiple Vulnerabilities
www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP .NET 2 Content Management System. It...
Blaze Apps Multiple Vulnerabilities
Exploit for asp platform in category web applications =================================== Blaze Apps Multiple Vulnerabilities =================================== Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions...
Blaze Apps - Multiple Vulnerabilities
Blaze Apps - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a AS...
e107 <= 0.7.20 Code Execution Vulnerability
Exploit for multiple platform in category web applications =========================================== e107 agent"Mozilla/5.0"; if $proxy print " Using proxy $proxy \n"; $ua-envproxy'1'; my $req = new HTTP::Request POST = $path; $req-contenttype'application/x-www-form-urlencoded';...
The Coming Wave of Mobile Attacks
The pace of innovation on mobile phones and other smart wireless devices has accelerated greatly in the last few years, adding features, speed and computing power. But now the attackers are beginning to outstrip the good guys on mobile platforms, developing innovative new attacks and methods for...
60cycleCMS 2.5.2 - DOCUMENT_ROOT Multiple Local File Inclusions
60cycleCMS 2.5.2 - DOCUMENTROOT Multiple Local File Inclusions fucking the Web Apps attack edition /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \\ \ \ \ \...
Facebook App TVShowChat SQL Injection
================================================================= FaceBook's servers was hacked by Inj3ct0r team. Hack of the year! ================================================================= Original: http://inj3ct0r.com/exploits/11638 + English translation Inj3ct0r official website =...
DEBIAN-CVE-2010-0826
The Free Software Foundation FSF Berkeley DB NSS module aka libnss-db 2.2.3pre1 reads the DBCONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module...
ALPHA CMS v3.2 <= Local File Inclusion Vulnerability
fucking the Web Apps attack edition / / / / L /' / , / / /' , / /' /' / /' / / / / / / L / / / // // // ///////////L // ////// // // Hack0wn! Security Project / /&...
ALPHA CMS - Local File Inclusion
fucking the Web Apps attack edition /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \\ \ \ \ \ \ \ \ \ \\ \ \ \ // // // ///////////L\ \ //...
Pepsi CMS (Irmin cms) pepsi-0.6-BETA2 Multiple Local File Vulnerability
No description provided by source. Pepsi CMS Irmin cms pepsi-0.6-BETA2 Multiple Local File Vulnerability fucking the Web Apps LFI 1 - attack edition +Software: Pepsi CMS Irmin CMS +Version: pepsi-0.6-BETA2 +License: GNU/GPL +Source: http://sourceforge.net/projects/pepsicms/files/ +Risk: High +CWE...
"$referer" export lead to the cross-site flaws in all versions of Discuz!
hi; All versions of Discuz! have the cross-site vulnerabilities because of the export value of "$referer". Like: Discuz! 7.X Discuz! 6.X Discuz! 5.X Discuz!NT 3.X and so on. There are some htm pages in all versions of Discuz!, that are: /templates/default/attachpay.htm /templates/default/ecrate.h...
MiTM Attacks Can Help Steal Data from SaaS
Researchers from Indiana University and Microsoft were able to infer sensitive data by analyzing the distinct size and other attributes of each exchange between a user and a website interaction. Using man-in-the-middle attacks, they could glean the information even when transactions were encrypte...
Options for Local Security Checks
This script allows users to set some Options for Local Security Checks which are stored in the knowledge base and used by other tests. Description of the options: - Also use SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
LDAP - Injection
Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y n3ro,eplaciano, all.indonesian like a coding,...
PHP Apps Links Insecure Cookie Handling
Exploit Title: PHP Apps Links Insecure Cookie Handling Vulnerability Date: 15.09.2009 Author: JIKO Software Link: http://www.mixarab.com/scripts/links.zip Version: app version Tested on: relevant os CVE : if exists Code : ----------exploit Debut Insecure Cookie Handling Vulnerability ----------M...
LDAP - Injection
LDAP - Injection + Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y n3ro,eplaciano,...
Rogue iPhone Apps Explored at Black Hat
Lax security screening at Apple’s App Store and a design flaw are putting iPhone users at risk of downloading malicious apps that could steal data and spy on them, a Swiss researcher warns at Black Hat DC. Read the full article. cnet...