马克斯CMS(Maxcms) admin_inc.asp SQL注入漏洞

在文件admin/ admininc.asp中： Sub checkPower //第103行 dim loginValidate,rsObj : loginValidate = "maxcms2.0" err.clear on error resume next set rsObj=conn.db"select mrandom,mlevel from premanager where musername='"&rCookie"musername"&"'","execute" rCookie函数在文件inc/ CommonFun.asp中 Function rCookiecookieNa...

DEBIAN-CVE-2011-3127

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for 1 admin or 2 login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

CVE-2011-3126

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects...

DEBIAN-CVE-2011-3129

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames...

DEBIAN-CVE-2011-3122

Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Media security."...

CVE-2011-3122

CVE-2011-3122 affects WordPress 3.1.x (before 3.1.3) and WordPress 3.2 Beta 2, with media/security-related issues described as unspecified in the initial record. The connected advisories confirm multiple vulnerabilities across WordPress releases and recommend upgrading to newer upstream versions ...

Unfixed XSS vulnerability at beta.washington.org

Security researcher NOPO TEAM, has submitted on 26/07/2011 a cross-site-scripting XSS vulnerability affecting beta.washington.org, which at the time of submission ranked 133562 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2011. It is...

2011 Linux Auto Rooter Beta 1.0 Coded by CrosS

2011 Linux Auto Rooter Beta 1.0 Coded by CrosS Source Code : !/usr/bin/perl Coded By CrosS 2011 Linux Auto r00t3r print "\n"; print " Beta 1.0 Auto rooter by CrosS \n"; print " Usage : \n"; print " perl $0 root = To root \n"; print " perl $0 del = Delete Exploit \n"; print " \n"; print " as...

RootRepeal – Rootkit Detector v1.3.5 Download Now

RootRepeal – Rootkit Detector v1.3.5 Download Now RootRepeal is a new rootkit detector currently in public beta. It is designed with the following goals in mind: Easy to use – a user with little to no computer experience should be able to use it. Powerful – it should be able to detect all publicl...

RootRepeal – Rootkit Detector v1.3.5 Download Now

RootRepeal – Rootkit Detector v1.3.5 Download Now RootRepeal is a new rootkit detector currently in public beta. It is designed with the following goals in mind: Easy to use – a user with little to no computer experience should be able to use it. Powerful – it should be able to detect all publicl...

CVE-2011-2171

Technical details for CVE-2011-2171 are not publicly provided in the supplied documents. The Connected records do not specify affected product/version, root cause, impact, or remediation. Monitor for updates from official sources.

CVE-2011-2171

Unspecified vulnerability in the dbugs package in Google Chrome OS before R12 0.12.433.38 Beta has unknown impact and attack vectors...

Exponent 2.0.0 Beta 1.1 Shell Upload

------------------------------------------------------------------------ Software................Exponent 2.0.0 beta 1.1 Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://www.exponentcms.org/ Discovery Date..........5/4/2011 Tested...

Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC

Exploit for php platform in category web applications Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC by outlaw.dll body, table, tr, td background-color: 00489C; font-family: Verdana; font-size: 16px; color: FFFFFF; .-""""-. .-""""-. / \ / \ / \ / \ // \ / \ // \ / \ |\ //| |\ //|...

Exponent CMS 2.0 Beta 1.1 Cross Site Request Forgery

Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC by outlaw.dll body, table, tr, td background-color: 00489C; font-family: Verdana; font-size: 16px; color: FFFFFF; .-""""-. .-""""-. / \ / \ / \ / \ // \ / \ // \ / \ |\ //| |\ //| \ || / \ || / \ / \ / \ / \ / .-""""-. '..'.-""""-...

Mageia 1 Beta 2 released [ Testing Edition ]

Mageia 1 Beta 2 released Testing Edition Three weeks after the first beta arrived, the Mageia development team has announced the release of the second beta for version 1.0 of its Mandriva Linux fork. According to the project roadmap, Mageia 1 Beta 2 will be followed by a release candidate on 17 M...

Discuz! X2 Beta 存储型XSS

简要描述： Discuz! X2 Beta 存储型XSS 详细说明： Discuz! X2 Beta 【家园】相册描述 存储型XSS漏洞。 漏洞证明：...

Mandriva 2011 Beta 2 is Available for Testing !

Mandriva 2011 Beta 2 is Available for Testing ! Mandriva 2011 beta 2 was supposed to be released a week ago, but the release schedule was delayed by last minute defects discovered by the development and testing teams. In order to get hold of beta 2, you can visit your favorite Mandriva mirror and...

Stable and Beta Channel Updates

The Chrome Stable and Beta channels have been updated to 10.0.648.133 for Windows, Mac, Linux and Chrome Frame. This release fixes the following security issue: Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private unt...

SiteStar V2.0 任意文件上传漏洞

SiteStar V2.0没有正确限制文件的上传，远程攻击者可能利用此漏洞上传任意文件到Web目录，最终导致在服务器上执行任意命令。 /script/multiupload/uploadify.php 文件： ?php if !empty$FILES $tempFile = $FILES'Filedata''tmpname'; $targetPath = $SERVER'DOCUMENTROOT' . $POST'folder' . '/'; $targetFile = strreplace'//','/',$targetPath . $FILES'Filedata''name'; //...