Blue Utopia Local File Inclusion

--------------------------------------------------------------------------------------------- scriptname: Blue Utopia all version Vendor: http://blueutopia.com/ vuln type: Local File Inclusion Vulnerability Author: PLATEN contact: PLATEN.SecureatGmail.com...

[BMSA-2009-02] XML injection in PyBlosxom

BLUE MOON SECURITY ADVISORY 2009-02 =================================== :Title: XML Injection in PyBlosxom :Severity: Low :Reporter: Blue Moon Consulting :Products: PyBlosxom v1.4.3 :Fixed in: -- Description ----------- PyBlosxom is a lightweight file-based weblog system. The project started as a...

Sql injection

SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter...

CVE-2009-0425

SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter...

CVE-2009-0425

SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter...

CVE-2009-0425

CVE-2009-0425 describes an SQL injection in the PHP file index.php of Blue Eye CMS versions 1.0.0 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands through the clanek parameter, enabling partial confidentiality and integrity impact with a high severity (CVSS...

Blue Coat Systems ProxySG 3.x Default Password (deprecated)

Binary data 4843.prm...

[BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below

BLUE MOON SECURITY ADVISORY 2009-01 =================================== :Title: Authentication bypass in Interspire Shopping Cart :Severity: Critical :Reporter: Truong Van Tri and Blue Moon Consulting :Products: Interspire Shopping Cart v4.0.1 Ultimate edition :Fixed in: v4.0.2 Description...

Blue Eye CMS 1.0.0 Blind SQL Injection

--+++===============================================================+++-- --+++====== Blue Eye CMS ". "\n+ Ex. : php xpl.php localhost /BlueEye admin". "\n\n"; exit ; function query $user, $pos, $chr $query = "x' OR ASCIISUBSTRINGSELECT password FROM blueeyeusers WHERE user = '$user',$pos,1=$chr ...

Blue Eye CMS <= 1.0.0 (clanek) Blind SQL Injection Exploit

No description provided by source. --+++===============================================================+++-- --+++====== Blue Eye CMS = 1.0.0 Blind SQL Injection Exploit ======+++-- --+++===============================================================+++-- ?php function usage echo "\n+ Blue Eye CM...

Blue Eye CMS <= 1.0.0 (clanek) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== Blue Eye CMS ". "\n+ Ex. : php xpl.php localhost /BlueEye admin". "\n\n"; exit ; function query $user, $pos, $chr $query = "x' OR ASCIISUBSTRINGSELECT password FROM blueeyeusers...

Blue Eye CMS 1.0.0 - clanek Blind SQL Injection

Blue Eye CMS 1.0.0 - clanek Blind SQL Injection --+++===============================================================+++-- --+++====== Blue Eye CMS ". "\n+ Ex. : php xpl.php localhost /BlueEye admin". "\n\n"; exit ; function query $user, $pos, $chr $query = "x' OR ASCIISUBSTRINGSELECT password FRO...

Blue Eye CMS 1.0.0 - 'clanek' Blind SQL Injection

--+++===============================================================+++-- --+++====== Blue Eye CMS ". "\n+ Ex. : php xpl.php localhost /BlueEye admin". "\n\n"; exit ; function query $user, $pos, $chr $query = "x' OR ASCIISUBSTRINGSELECT password FROM blueeyeusers WHERE user = '$user',$pos,1=$chr ...

Maxum Rumpus 6.0 Multiple Remote Buffer Overflow Vulnerabilities

No description provided by source. BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description ----------- Rumpus turns any Mac in...

Maxum Rumpus 6.0 Multiple Remote Buffer Overflow Vulnerabilities

Exploit for unknown platform in category dos / poc ================================================================ Maxum Rumpus 6.0 Multiple Remote Buffer Overflow Vulnerabilities ================================================================ BLUE MOON SECURITY ADVISORY 2008-09...

Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities

BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description ----------- Rumpus turns any Mac into a file transfer server. Rumpus...

Microsoft VISTA TCP/IP stack buffer overflow

phion Security Advisory 21/10/2008 Microsoft VISTA TCP/IP stack buffer overflow Summary ----------------------------- Microsoft Device IO Control wrapped by the iphlpapi.dll API shipping with Windows Vista 32 bit and 64 bit contains a possibly exploitable, buffer overflow corrupting kernel memory...

CVE-2008-5121

dne2000.sys in Citrix Deterministic Network Enhancer DNE 2.21.7.233 through 3.21.7.17464, as used in 1 Cisco VPN Client, 2 Blue Coat WinProxy, and 3 SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNEIOCTL DeviceIoControl request to the \.\DNE...

CVE-2008-5121

CVE-2008-5121 affects dne2000.sys used by Citrix Deterministic Network Enhancer (DNE) versions 2.21.7.233 through 3.21.7.17464, which are deployed with Cisco VPN Client, Blue Coat WinProxy, and SafeNet SoftRemote/HighAssurance Remote. The vulnerability is a local privilege escalation via a crafte...

CVE-2008-4515

Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection mechanism, which allows remote attackers to bypass authentication and access the 1 summary, 2 detail, 3 overrides, and 4 pwemail pages by disabling JavaScript...