CVE-2009-2918

creationtimestamp| type| source ---|---|--- 2009-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9449...

Adobe JRun 4 (logfile) Directory Traversal Vulnerability (auth)

Exploit for windows platform in category remote exploits =============================================================== Adobe JRun 4 logfile Directory Traversal Vulnerability auth =============================================================== Directory Traversal vulnerability found in script...

CBAuthority - ClickBank Affiliate Management SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== CBAuthority - ClickBank Affiliate Management SQL Injection Vulnerability ========================================================================...

WordPress 2.8.3 - Remote Admin Reset Password

WordPress 2.8.3 - Remote Admin Reset Password ============================================= - Release date: August 10th, 2009 - Discovered by: Laurent Gaffié - Severity: Medium ============================================= I. VULNERABILITY ------------------------- WordPress = 2.8.3 Remote admin...

In-portal 4.3.1 - index.php?env Local File Inclusion

In-portal 4.3.1 - index.php?env Local File Inclusion @ ===================================================================================@ / Title : Local File Inclusion Vulnerability \ Software : In-Portal 4.3.1 Vendor : http://www.in-portal.net/ - - Date : 01 August 2009 Indonesia Author :...

FreeBSD : ecartis buffer overflows and input validation bugs (3e9be8c4-8192-11d8-9645-0020ed76ef5a)

Timo Sirainen reports multiple buffer overflows that may be triggered while parsing messages, as well as input validation errors that could result in disclosure of mailing list passwords. These bugs were resolved in the August 2003 snapshot of ecartis. %NASLMINLEVEL 70300 C Tenable Network...

Joomla Component Cmimarketplace (viewit) Directory Traversal Vuln

No description provided by source. Joomla Component Cmimarketplace Directory Traversal Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component:...

Joomla Cmimarketplace Directory Traversal

Joomla Component Cmimarketplace Directory Traversal Vulnerability Vulnerability found by: Valon Kerolli Contact: valonatitshqip.com Site: www.itshqip.com ScriptName: "Joomla" Component: "Cmimarketplace comcmimarketplace" Date: "August 2008" Author: "Magnetic Merchandising Inc." E-mail:...

Joomla! Component Cmimarketplace - 'viewit' Directory Traversal

Joomla Component Cmimarketplace Directory Traversal Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component: "Cmimarketplace comcmimarketplace" Date...

flash: clipboard hijack attack

The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008...

flash: clipboard hijack attack

The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008...

CVE-2008-3919

Unspecified vulnerability in multiple JustSystems Ichitaro products allows remote attackers to execute arbitrary code via a crafted JTD document, as exploited in the wild in August 2008...

security flaw

Certain Red Hat Enterprise Linux RHEL 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification Trojan Horse that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not...

CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

Oracle 10g - LT.FINDRICSET SQL Injection (IDS Evasion)

Oracle 10g - LT.FINDRICSET SQL Injection IDS Evasion // / Oracle 10g LT.FINDRICSET SQL Injection Exploit / // / sploit grant DBA to scott / / evil cursor injection / / No "create procedure" privileg needed! / / + Funny IDS evasion vith base64 / // / tested on oracle 10.1.0.2.0 / // // / Date of...

HP-UX Security Patch : PHSS_29516

OV DM6.00 Consolidated Patch August 2003 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26674; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

tomsgb10-xss.txt

Software: Guestbook Title: Toms Gästebuch 1.00 Version: 1.0 Type: XSS Date: Sat Aug 11 21:52:08 CEST 2007 Vendor: Fitz Thomas Page: http://www.toms-seiten.at/ vulnerability: ---------------------------- http://example.com/form.php?action=show&homepage=XSS&mail=XSS&name=XSS...

VulnCheck KEV: CVE-2007-4428

Lhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, a different issue than CVE-2006-4116...

VulnCheck KEV: CVE-2007-4246

Unspecified vulnerability, possibly a buffer overflow, in Justsystem Ichitaro 2007 and earlier allows remote attackers to execute arbitrary code via a modified document, as actively exploited in August 2007 by malware such as Tarodrop.D Tarodrop.Q, a different vulnerability than...

GetMyOwnArcade (search.php query) Remote SQL Injection Vulnerability

No description provided by source. GetMyOwnArcade search.php $query SQL-Injection Discovered By: RoXur777 August 11th 2007 Google-Dork: "Powered by GetMyOwnArcade" / $query is not being filtered before getting passed to a query. Therefore, we can inject SQL code into the SQL-Query. Using...