Tribisur 2.0 - SQL Injection

Tribisur 2.0 - SQL Injection !/usr/bin/php -q And now the bugged code :- : So we can exploit it with this simple PoC: forum.php?action=liste&cat=-1+union+select+0,concatpseudo,0x3a,passe,0,0,0,0,0,0,0,0+from+utiliz+where+id=1 Bug 2 in catmain.php : So like the first we can exploit it with:...

Tribisur 2.0 - SQL Injection

!/usr/bin/php -q And now the bugged code :- : So we can exploit it with this simple PoC: forum.php?action=liste&cat=-1+union+select+0,concatpseudo,0x3a,passe,0,0,0,0,0,0,0,0+from+utiliz+where+id=1 Bug 2 in catmain.php : So like the first we can exploit it with:...

Code injection

DenyHosts 2.6 processes OpenSSH sshd "not listed in AllowUsers" log messages with an incorrect regular expression that does not match an IP address, which might allow remote attackers to avoid detection and blocking when making invalid login attempts with a username not present in AllowUsers, as...

Linux initscripts weak permissions

Weak permissions for /var/log/btmp files cause information leak about unsuccessful logon attempt...

mxbb233-rfi.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + mxBB Module mxglance 2.3.3 Remote File Include Vulnerability + + + + Discovered by bd0rk || SOH-Crew + + + + www.soh-crew.it.tt + + + + The german Coding and IT-Security Ressource + + +...

mxBB Module mx_glance 2.3.3 - Remote File Inclusion

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + mxBB Module mxglance 2.3.3 Remote File Include Vulnerability + + + + Discovered by bd0rk || SOH-Crew + + + + www.soh-crew.it.tt + + + + The german Coding and IT-Security Ressource + + +...

CVE-2007-5058

Cross-site scripting XSS vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web script or HTML via the username field in a login attempt, which is not properly handled when the Monitor Web Syslog scre...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web script or HTML via the username field in a login attempt, which is not properly handled when the Monitor Web Syslog scre...

CVE-2007-3730

The CVE-2007-3730 issue affects HP OpenVMS TCP/IP Services 5.6 (POP server) where the default configuration fails to log the source IP address and attempted username for login attempts. This logging deficiency could help remote attackers remain anonymous or avoid identification when probing or at...

CVE-2007-3551

Buffer overflow in bbs100 before 3.2 allows remote attackers to cause a denial of service crash by attempting to login as the Guest user when another Guest user is already logged in, possibly related to the stateloginprompt function in statelogin.c...

Multiple Symantec antiviral products Reporting Server code execution

It's possible to spoof executable report file. Password hash is leaked during failed logon attempt...

CVE-2007-1681

CVE-2007-1681 relates to a format-string vulnerability in Sun Java Web Console (Lockhart) specifically in libwebconsole_services.so, affecting Sun Java Web Console versions 2.2.2–2.2.5. The issue allows remote attackers to crash the application, potentially disclose sensitive information, and pos...

phpbbxtra20-rfi.txt

----------------------------------------------- PhpbbXtra v2.0 phpbbrootpath Remote File Include Vulnerability ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: include$phpbbrootpath . 'includes/bbcode.'.$phpEx;...

mxBB Module ErrorDocs 1.0 - common.php Remote File Inclusion

mxBB Module ErrorDocs 1.0 - common.php Remote File Inclusion = mxBB Module mxerrordocs 1.0 Remote File Include Vulnerability = Mod-Download: http://forums.phpmix.org/download.php?id=27 = Bugfounder: bd0rk || SOH-Crew = Vulnerable code in common.php = Greetings: str0ke, broken-error, Martn & m0rph...

PNphpBB.txt

Vendor: http://www.pnphpbb.com/ Vulnerable File: includes/functionsadmin.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . 'includes/functions.' . $phpEx ; Method To Use:...

Mambo Component CopperminePhotoGalery - Remote File Inclusion

Mambo Component CopperminePhotoGalery - Remote File Inclusion CopperminePhotoGallery Component Found By k1tk4t Indonesia This bug allows a remote atacker to execute commands via RFI file: cpg.php bug: require $mosConfigabsolutepath."/administrator/components/comcpg/config.cpg.php"; path: add in...

CVE-2006-3914

Cross-site scripting XSS vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript when submitting an essay response, which has no server-side validation before bein...

[NT] Microsoft Internet Explorer Drag-and-Drop Redeux

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Check default community names of the SNMP Agent

The script sends a connection request to the server and attempts to login with default communities. Successful logins are storen in the KB. SPDX-FileCopyrightText: 2005 SecuriTeam SPDX-FileCopyrightText: New code and default communities since 2009 Greenbone AG Some text descriptions might be...

AutoLinks Pro 2.1

NewAngels Advisory 1 AutoLinks Pro 2.1 - Remote File Include Vulnerability ============================================================================= Software: AutoLinks Pro Version: 2.1 Type: Remote PHP File Include Vulnerability Risc: High Date: 16.08.05 Vendor: ScriptsCenter Page:...