CVE-2011-3027

Removed by vendor...

Postgres Schema Dump

This module extracts the schema information from a Postgres server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Postgres Schema Dump', 'Description' = % This module extracts the schema...

MSSQL Schema Dump

This module attempts to extract the schema from a MSSQL Server Instance. It will disregard builtin and example DBs such as master, model, msdb, and tempdb. The module will create a note for each DB found, and store a YAML formatted output as loot for easy reading. This module requires Metasploit:...

SiteGenius Blind SQL injection Vulnerability

Exploit for php platform in category web applications ===================================================== SiteGenius Blind SQL injection vulnerability ===================================================== Exploit title : SiteGenius Blind SQL injection vulnerability Date : 02 \ 08 \ 2011 Author ...

HUGE-inc Portal SQL Injection

+Title : HUGE Sql Injection vulnerability +Vender : http://www.hugeinc.com +Auther : Bl4ck.Viper Turkish Hacker +Email : [email protected] +Date : 05/07/2011 +Home : www.skote-vahshat.com +MyArchive : www.xpl.skote-vahshat.com Err0r 0n : index.php Exploit : http://target.com/index.php?ID=SQL...

Information disclosure

IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly enforce privilege requirements for table access, which allows remote authenticated users to modify SYSSTAT.TABLES statistics columns via an UPDATE statement. NOTE: some of these details are obtained from third...

CVE-2011-1847

CVE-2011-1847 affects IBM DB2 9.5 prior to FP7 and 9.7 prior to FP4 on Linux/Unix/Windows. The issue stems from the Relational Data Services component failing to enforce privilege requirements for table access, allowing remote authenticated users to update SYSSTAT.TABLES statistics columns via UP...

Wireshark 1.5.1 Development Release !

Wireshark 1.5.1 Development Release ! Wireshark 1.5.1 has been released. Installers for Windows, OS X, and source code are now available. New and Updated Features The following features are new or have been significantly updated since version 1.4: 1. Wireshark can import text dumps, similar to...

Tramot CMS SQL Injection

Coder : baltazar a.k.a b4ltazar CMS name : Tramot CMS WebSite : http://www.tramot.com/ Dork : inurl:kateg= site:hr intext:tramot : site:hr intext:developed by tramot inurl:kateg= Admin panel : http://www.site.hr/admin Column number : U must check, sometimes it is 6 or 9 or 11 ... Table : users...

coRED CMS SQL Injection

Coder : baltazar a.k.a b4ltazar CMS name : cows online Redaktionssystem Dork : inurl:/cored/ site:de Admin panel : http://www.site.de/coRED/admin/login.php Column number : 18 also found different number of columns...

Escort Directory CMS - SQL Injection

Exploit Title: Escort Directory CMS SQL Injection Vunerability Google Dork: "Powered By Escort Web design" Platform: php Date: 09.02.2011 Author: NoNameMT Software Link: http://www.escortwebsitedesign.co.uk/directory-design/ Price: 750 € Tested on: Windows 7 Mail: [email protected] Homepage:...

Model Agentur Script - SQL Injection

Exploit Title: Model Agentur Script SQL Injection Vunerability Platform: php Date: 05.02.2011 Author: NoNameMT Software Link: http://www.media-products.de/model-agentur-p-269.html AND http://www.media-products.de/model-agentur-v2-p-420.html Price: 19,95 € / 29,95 € Version: 1.0 / 2.0 Tested on:...

Escort und Begleitservice Agentur Script - SQL Injection

Exploit Title: Escort und Begleitservice Agentur Script SQL Injection Vunerability Google Dork: inurl:showprofile.php?custid= Platform: php, webapp Date: 05.02.2011 Author: NoNameMT Software Link: http://www.media-products.de/escort-service-begleitagentur-v10-p-211.html Price: 22,50 € Version: 1....

MySQL: mysqld DoS (assertion failure) by using temporary InnoDB engine tables with nullable columns (MySQL bug #54044)

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service mysqld daemon crash by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure...

CVE-2010-3680

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service mysqld daemon crash by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure...

CVE-2010-3680

CVE-2010-3680 affects Oracle MySQL 5.1 prior to 5.1.49. It allows remote authenticated users to cause a denial of service (mysqld crash) by creating temporary tables with nullable columns while using InnoDB, triggering an assertion failure. Mitigation: upgrade MySQL to a version where the issue i...

Dejcom Market CMS SQL Injection

Exploit Title: Dejcom Market Cms SQL injection Date: 01/12/2010 Author: Mormoroth Dork : "Powered By Dejcom Market CMS" Version: ALL Version Exploit: %27 or 1=select top 1 tablename from informationschema.tables where tablename not...

CVE-2010-3680

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service mysqld daemon crash by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure...

Webspell wCMS-Clanscript4.01.02net - static Blind SQL Injection

----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Date : 29.09.2010 +Script : Webspell wCMS-Clanscript4.01.02net= static&static Blind SQL Injection Exploit +Price : $00,00 +Language :PHP +Discovered by Easy Laster +code...

Auto Dealer - SQL Injection

----------------------------Information------------------------------------------------ +Name : Auto Dealer = SQL Injection Vulnerability Proof of Concept +Autor : Easy Laster +ICQ : 11-051-551 +Date : 06.07.2010 +Script : BS Auto Dealer +Price : $24.95 +Language :PHP +Discovered by Easy Laster...