FAA US Academy (AFS) - Auth Bypass Vulnerability

Document Title: =============== FAA US Academy AFS - Auth Bypass Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=171 Release Date: ============= 2012-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 171 Common...

KLA10394 Multiple vulnerabilities in Siemens

Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...

VolksBank ZU Application SQL Injection

Title: ====== VolksBank ZU Application - Auth Bypass Vulnerability Date: ===== 2012-01-20 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=382 VL-ID: ===== 382 Introduction: ============= Die Volksbank AG trifft eine Reihe von Sicherheitsvorkehrungen, die einen wirksamen...

Avaya WinPDM UniteHostRouter 3.8.2 - Remote Command Execution

Avaya WinPDM UniteHostRouter 3.8.2 - Remote Command Execution Abysssec Public Exploit more info www.abysssec.com Avaya WinPDM UniteHostRouter = v2 || v4 = v3 + 1, v5 = strpbrkv3 + 1, ":/? \n\r", v5 v2 result = 0; else v6 = v5 - v4; memcpya2, v4, v6; // vulnerable memcpy BYTE a2 + v6 = 0; result =...

Avaya WinPDM UniteHostRouter 3.8.2 Buffer Overflow

Abysssec Public Exploit more info www.abysssec.com Avaya WinPDM UniteHostRouter = v2 || v4 = v3 + 1, v5 = strpbrkv3 + 1, ":/? \n\r", v5 v2 result = 0; else v6 = v5 - v4; memcpya2, v4, v6; // vulnerable memcpy BYTE a2 + v6 = 0; result = 1; return result; signed int cdecl sub403160patchedconst char...

Avaya WinPDM UniteHostRouter <= 3.8.2 Pre-Auth Command Execute

Exploit for windows platform in category remote exploits Abysssec Public Exploit more info www.abysssec.com Avaya WinPDM UniteHostRouter = v2 || v4 = v3 + 1, v5 = strpbrkv3 + 1, ":/? \n\r", v5 v2 result = 0; else v6 = v5 - v4; memcpya2, v4, v6; // vulnerable memcpy BYTE a2 + v6 = 0; result = 1;...

VolksBank ZU Application - Auth Bypass Vulnerability

Document Title: =============== VolksBank ZU Application - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=382 Release Date: ============= 2012-01-20 Vulnerability Laboratory ID VL-ID: ==================================== 382...

PHPDomainRegister 0.4a-RC2-dev - Multiple Vulnerabilities

PHPDomainRegister 0.4a-RC2-dev - Multiple Vulnerabilities Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs...

Canopus Internet Banking FIVE SQL Injection

Title: ====== Canopus Internet Banking FIVE - Auth Bypass Vulnerability Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=305 VL-ID: ===== 305 Introduction: ============= Automation of banks, small and medium sized, money transfer systems, corporate...

PHPDomainRegister 0.4a-RC2-dev - Multiple Vulnerabilities

Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs m4n i-Hmx Cyber-Crystal | | Dr.Bnned ahwak2000 sa^Dev!L |...

PHPDomainRegister v0.4a-RC2-dev Multiple Vulnerabilities

Exploit for php platform in category web applications Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs m4n...

PHPDomainRegister 0.4a-RC2-dev Cross Site Scripting / SQL Injection

Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs m4n i-Hmx Cyber-Crystal | | Dr.Bnned ahwak2000 sa^Dev!L |...

Canopus IB FIVE Application - Auth Bypass Vulnerability

Document Title: =============== Canopus IB FIVE Application - Auth Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/380.wmv View: http://www.youtube.com/watch?v=Kh5Qd3mMIs Release Date: ============= 2012-01-13 Vulnerability Laboratory ID...

Canopus IB FIVE Application - Auth Bypass Vulnerability

Document Title: =============== Canopus IB FIVE Application - Auth Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/380.wmv View: http://www.youtube.com/watch?v=Kh5Qd3mMIs Release Date: ============= 2012-01-13 Vulnerability Laboratory ID...

Canopus Internet Banking FIVE - Auth Bypass Vulnerability

Document Title: =============== Canopus Internet Banking FIVE - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=305 Release Date: ============= 2012-01-11 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Canopus Internet Banking FIVE - Auth Bypass Vulnerability

Document Title: =============== Canopus Internet Banking FIVE - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=305 Release Date: ============= 2012-01-11 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Paddelberg Topsite Script Insecure Cookie

Exploit Title: Paddelberg's topsite-script admin auth bypass. Google Dork: intext:"powered by php scripte webmaster resource" Date: 8. 1. 2012 Author: Christian Inci Software Link: http://www.paddelberg.de/gratis-toplisten-script/gratis-download/ Version: = 1.23 22. 9. 2007 Tested on: 1.23 Vendor...

Default credentials

Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files...

PHP Inventory 1.3.1 Remote &#40;Auth Bypass&#41; SQL Injection Vulnerability

Advisory: PHP Inventory 1.3.1 Remote Auth Bypass SQL Injection Vulnerability Advisory ID: INFOSERVE-ADV2011-08 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on PHP Inventory 1.3.1 Vendor URL: http://www.phpwares.com/ Vendor Status: fixed CVE-ID:...

PHP Inventory 1.3.1 SQL Injection

Advisory: PHP Inventory 1.3.1 Remote Auth Bypass SQL Injection Vulnerability Advisory ID: INFOSERVE-ADV2011-08 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on PHP Inventory 1.3.1 Vendor URL: http://www.phpwares.com/ Vendor Status: fixed CVE-ID:...