Linux Kernel 2.x sock_sendpage() Local Root Exploit (Android Edition)

No description provided by source. Source for exploiting CVE-2009-2692 on Android; Hole is closed in Android kernels released August 2009 or later. orig: http://zenthought.org/content/file/android-root-2009-08-16-source back: http://milw0rm.com/sploits/android-root-20090816.tar.gz...

Fotoshow PRO - category SQL Injection

Fotoshow PRO - category SQL Injection »====================================================================================================================-X » » » Fotoshow PRO™ category Remote SQL Injection Vulnerability » » » » ======= ------d-------m------ ==== ==== » » || = | |o o...

Adobe JRun 4 (logfile) Directory Traversal Vulnerability (auth)

Exploit for windows platform in category remote exploits =============================================================== Adobe JRun 4 logfile Directory Traversal Vulnerability auth =============================================================== Directory Traversal vulnerability found in script...

CBAuthority - ClickBank Affiliate Management SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== CBAuthority - ClickBank Affiliate Management SQL Injection Vulnerability ========================================================================...

CVE-2009-2918

creationtimestamp| type| source ---|---|--- 2009-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9449...

Fotoshow PRO SQL Injection

»====================================================================================================================-X » » » Fotoshow PRO™ category Remote SQL Injection Vulnerability » » » » ======= ------d-------m------ ==== ==== » » || = | |o o| | || || || » » || = |||| || || » » ======= /|\ |...

WordPress 2.8.3 - Remote Admin Reset Password

WordPress 2.8.3 - Remote Admin Reset Password ============================================= - Release date: August 10th, 2009 - Discovered by: Laurent Gaffié - Severity: Medium ============================================= I. VULNERABILITY ------------------------- WordPress = 2.8.3 Remote admin...

In-portal 4.3.1 - index.php?env Local File Inclusion

In-portal 4.3.1 - index.php?env Local File Inclusion @ ===================================================================================@ / Title : Local File Inclusion Vulnerability \ Software : In-Portal 4.3.1 Vendor : http://www.in-portal.net/ - - Date : 01 August 2009 Indonesia Author :...

FreeBSD : ecartis buffer overflows and input validation bugs (3e9be8c4-8192-11d8-9645-0020ed76ef5a)

Timo Sirainen reports multiple buffer overflows that may be triggered while parsing messages, as well as input validation errors that could result in disclosure of mailing list passwords. These bugs were resolved in the August 2003 snapshot of ecartis. %NASLMINLEVEL 70300 C Tenable Network...

Joomla Component Cmimarketplace (viewit) Directory Traversal Vuln

No description provided by source. Joomla Component Cmimarketplace Directory Traversal Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component:...

Joomla! Component Cmimarketplace - 'viewit' Directory Traversal

Joomla Component Cmimarketplace Directory Traversal Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component: "Cmimarketplace comcmimarketplace" Date...

Joomla Cmimarketplace Directory Traversal

Joomla Component Cmimarketplace Directory Traversal Vulnerability Vulnerability found by: Valon Kerolli Contact: valonatitshqip.com Site: www.itshqip.com ScriptName: "Joomla" Component: "Cmimarketplace comcmimarketplace" Date: "August 2008" Author: "Magnetic Merchandising Inc." E-mail:...

flash: clipboard hijack attack

The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008...

flash: clipboard hijack attack

The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008...

CVE-2008-3919

Unspecified vulnerability in multiple JustSystems Ichitaro products allows remote attackers to execute arbitrary code via a crafted JTD document, as exploited in the wild in August 2008...

security flaw

Certain Red Hat Enterprise Linux RHEL 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification Trojan Horse that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not...

CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

Oracle 10g - LT.FINDRICSET SQL Injection (IDS Evasion)

Oracle 10g - LT.FINDRICSET SQL Injection IDS Evasion // / Oracle 10g LT.FINDRICSET SQL Injection Exploit / // / sploit grant DBA to scott / / evil cursor injection / / No "create procedure" privileg needed! / / + Funny IDS evasion vith base64 / // / tested on oracle 10.1.0.2.0 / // // / Date of...

HP-UX Security Patch : PHSS_29516

OV DM6.00 Consolidated Patch August 2003 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26674; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

tomsgb10-xss.txt

Software: Guestbook Title: Toms Gästebuch 1.00 Version: 1.0 Type: XSS Date: Sat Aug 11 21:52:08 CEST 2007 Vendor: Fitz Thomas Page: http://www.toms-seiten.at/ vulnerability: ---------------------------- http://example.com/form.php?action=show&homepage=XSS&mail=XSS&name=XSS...