My Mini Bill (orderid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= My Mini Bill orderid Remote SQL Injection Vulnerability ========================================================= My MiniBill myorders.php Remote SQL Injection Founder: ThE g0bL!N...

New ICE bill would overhaul federal cybersecurity

A bill set to be introduced in the Senate on Tuesday would make wholesale changes to the way that the federal government handles information security, including the establishment of a Nation Officer for Cyberspace, which would sit right below the president. According to a story on...

SA-CONTRIB-2009-004 - Notify - Privilege escalation

A user triggering the cron processing of the Notify module may end up getting logged in as another user when the Notify operations do not complete succesfully. Versions Affected Versions of Notify for Drupal 5.x prior to 5.x-1.2 Drupal core is not affected. If you do not use the Notify module,...

Unfixed XSS vulnerability at www.billgatesisdead.com

Security researcher Fugitif, has submitted on 18/10/2007 a cross-site-scripting XSS vulnerability affecting www.billgatesisdead.com, which at the time of submission ranked 851113 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007. It is...

CVE-2006-6023

Affected software: Bloo 1.0, in phoo.base.php. Vulnerability: PHP remote file inclusion via a URL provided to the descriptorFileList parameter, allowing remote code execution; root cause noted as descriptorFileList being used in a function definition. Impact: remote arbitrary PHP code execution (...

CentOS 3 / 4 : sysreport (CESA-2005:598)

An updated sysreport package that fixes an insecure temporary file flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Sysreport is a utility that gathers information about a system's hardware and configuration. The information ca...

sysreport security update

CentOS Errata and Security Advisory CESA-2005:598 An updated sysreport package that fixes an insecure temporary file flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Sysreport is a utility that gathers information about a...

CVE-2000-1131

CVE-2000-1131 concerns Bill Kendrick’s web site guestbook (GBook), where remote Command Execution is possible via shell metacharacters in the _MAILTO form variable. The vulnerability stems from improper handling of user-supplied input, enabling arbitrary commands to be run on the server. Reported...