txtshop-lfi.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- txtshop - beta 1.0 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: txtshop $ Version: eNYe-Sec - www.enye-sec.org --Bug -- 4. if !$language$language="ch"; 5...

CVE-2008-4585

Belong Software Site Builder 0.1 beta allows remote attackers to bypass intended access restrictions and perform administrative actions via a direct request to admin/home.php...

Skype extension for Firefox BETA 2.2.0.95 Clipboard Writing Vulnerability

No description provided by source. !--------------------------------------------------------------------------- Skype extension for Firefox BETA 2.2.0.95 Clipboard Writing Vulnerability PoC download: https://developer.skype.com/SkypeToolbars Author: irk4zatyahoo.pl homepage:...

Skype extension for Firefox BETA 2.2.0.95 Clipboard Writing Vulnerability

Exploit for unknown platform in category remote exploits ========================================================================= Skype extension for Firefox BETA 2.2.0.95 Clipboard Writing Vulnerability ========================================================================= test it! function...

Skype Extension for Firefox Beta 2.2.0.95 - Clipboard Writing

test it! function copytoclipboard text if skypetool var copyit = text + '\0+'; //use null byte to copy value, because '+' char must be in string skypetool.copynum copyit ; function checkit //copytoclipboard'malicious text!!!!!!!!!!!\n\n\n!!'; //copytoclipboard'http://irk4z.wordpress.com/';...

buxto-cookie.txt

Bux.to Clone script Insecure Cookie Handling Vulnerability + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke,Codex + Download : http://depositfiles.com/files/6633532 + Dork : c SriptBux 2008 | Powered By ScriptBux...

JVN#26621646 EC-CUBE cross-site scripting vulnerability

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. This vulnerability is different from JVN61543834, JVN36085487, and JVN99916563. Impact An arbitrary script could be executed on the user's web browser...

JVN#99916563 EC-CUBE cross-site scripting vulnerability

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. This vulnerability is different from JVN61543834, JVN26621646, and JVN36085487. Impact An arbitrary script could be executed on the user's web browser...

[SECURITY] Fedora 9 Update: Miro-1.2.4-3.fc9

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

Mozilla Firefox/SeaMonkey UTF-8基于栈的缓冲区溢出漏洞

BUGTRAQ ID: 31397 CVE ID：CVE-2008-0016 CNCVE ID：CNCVE-20080016 Mozilla Firefox/SeaMonkey是一款开放源代码的WEB浏览器和WEB应用套件。 Mozilla Firefox/SeaMonkey处理UTF-8 URL存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 Mozilla...

Vikingboard 0.2 Beta - register.php SQL Column Truncation Unauthorized Access

Vikingboard 0.2 Beta - register.php SQL Column Truncation Unauthorized Access source: https://www.securityfocus.com/bid/31408/info Vikingboard is prone to an unauthorized-access vulnerability. Successfully exploiting this issue can allow attackers to register and log in as existing users...

lansuite-lfi.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl lansuite success $stats = new stats; // Boxes if !$IsAboutToInstall and !$GET'contentonly' and $GET'design' != 'base'...

CVE-2008-4176

SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL commands via the oyun parameter...

CVE-2008-4145

SQL injection vulnerability in userreadlinks.php in Addalink 1.0 beta 4 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

addalink-sql.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link D.O.M Labs - Security Researchers - www.domlabs.org Vuln Code: -------------- 32: $readoutlinktable="SELECT FROM $linktable WHERE approved='1' AND categoryid='$categoryid' ORDER BY id DESC LIMIT $start,$steps"; 33:...

addalink 4 - category_id SQL Injection

addalink 4 - categoryid SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link D.O.M Labs - Security Researchers - www.domlabs.org Vuln Code: -------------- 32: $readoutlinktable="SELECT FROM $linktable WHERE approved='1' AND categoryid='$categoryid' ORDER BY id DE...

addalink 4 Beta - Write Approved Links

addalink 4 Beta - Write Approved Links -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= addalink eNYe-Sec - www.enye-sec.org Linklist is a miniwebsite that you can use in your webpage. Basically it manages a database of links using PHP+MySQL. Users can send...

Google Chrome Browser 0.2.149.27 Automatic File Download Exploit

No description provided by source. Author: nerex E-mail: nerexatlivedotcom Google's new Web browser Chrome allows files e.g., executables to be automatically downloaded to the user's computer without any user prompt. This proof-of-concept was created for educational purposes only. Use the code it...

FreeBSD Ports: openssl, openssl-beta

The remote host is missing an update to the system as announced in the referenced advisory. VID 68233cba-7774-11d8-89ed-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: krb5, krb5-beta

The remote host is missing an update to the system as announced in the referenced advisory. VID 0bb7677d-52f3-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...