iMoveis v1.1 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== iMoveis v1.1 SQL Injection Vulnerability ======================================== Date : 26/10/2010 Author : EraGoN Software link : http://baixar7.com/download/acc-imoveis-script-php.rar/3d1e7bf4b9...

quagga bgpd DoS

bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service crash via a malformed 1 OPEN message or 2 a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled...

Joomla Community Builder Enhanced Local File Inclusion

Hello full-disclosure! Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Ris...

LFI / RCE vlunerability in Joomla Community Builder Enhenced (CBE) Component

Hello full-disclosure! Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Ris...

Joomla Community Builder Enhenced Component LFI/RCE Vulnerability

Exploit for php platform in category web applications ======================================================================= Joomla Community Builder Enhenced CBE Component LFI/RCE Vulnerability ======================================================================= Description: Joomla CBE suffe...

MySQL Community Server 5.1 < 5.1.51 Multiple Denial of Service Vulnerabilities

Binary data 801142.prm...

MySQL Community Server 5.1 < 5.1.51 Multiple Denial of Service Vulnerabilities

Binary data 5677.prm...

MySQL Community Server < 5.1.51 Multiple Vulnerabilities

The version of MySQL Community Server installed on the remote host is earlier than 5.1.51 and is, therefore, potentially affected by multiple vulnerabilities: - A privilege escalation vulnerability exists when using statement-based replication. Version specific comments used on a master server wi...

JomSocial 1.8.8 Shell Upload

There is a file upload vulnerability in version 1.8.8 and earlier of JomSocial, the popular community extension for Joomla!. Successful exploitation of this exploit requires the site to be configured to allow users to upload video files directly, which is disabled by default. If this feature is...

JomSocial 1.8.8 Shell Upload Vulnerability

Exploit for php platform in category web applications ========================================== JomSocial 1.8.8 Shell Upload Vulnerability ========================================== There is a file upload vulnerability in version 1.8.8 and earlier of JomSocial, the popular community extension fo...

All Eyes On Stuxnet At Annual Virus Researcher Summit

The world will know more about the mysterious Stuxnet virus by week’s end, after top virus researchers reveal the findings of their post mortem on Stuxnet at the annual Virus Bulletin Conference. HED: All eyes on Stuxnet at annual virus researcher summit DEK: Researchers will reveal new details...

Storyteller CMS Local File Inclusion

== Title: Storyteller CMS var Local File Include Vuln Version: n/a Link: http://www.esselbach.com/freeware.php?id=2 == Author: BorN To K!LL - h4ck3r Contact: [email protected] == Vuln code: in GetTemplate function , line 113 to 127 function GetTemplate$var if fileexists"templates/$var.tmp.php"...

Accton-based switches (3com, Dell, SMC, Foundry, EdgeCore) Backdoor

Exploit for windows platform in category remote exploits =================================================================== Accton-based switches 3com, Dell, SMC, Foundry, EdgeCore Backdoor =================================================================== On the 15th of august 2009, at the...

Cisco IOS Software Multiple SNMP Community String Vulnerabilities - Cisco Systems

Multiple Cisco IOS Software and CatOS software releases contain several independent but related vulnerabilities involving the unexpected creation and exposure of SNMP community strings. These vulnerabilities can be exploited to permit the unauthorized viewing or modification of affected devices. ...

Cisco IOS Software SNMP Read-Write ILMI Community String Vulnerability - Cisco Systems

Cisco IOS Software releases based on versions 11.x and 12.0 contain a defect that allows a limited number of SNMP objects to be viewed and modified without authorization using a undocumented ILMI community string. Some of the modifiable objects are confined to the MIB-II system group, such as...

WebSuite Content Management System SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================== WebSuite Content Management System SQL Injection Vulnerability ============================================================== Exploit Title: WebSuite Content Management System SQL...

MySQL Community Server < 5.1.49 Multiple Vulnerabilities

The version of MySQL Community Server installed on the remote host is earlier than 5.1.49 and thus potentially affected by multiple vulnerabilities: - DDL statements could cause the server to crash. 55039 - Joins involving a table with a unique SET column could cause the server to crash. 54575 -...

New Conference Wants to Bring Malware Writers Out of the Shadows

ED: Malcon Conference hopes to bring malware writers out of the shadows DEK: Malcon, a new, Mumbai-based conference, says that the security community can benefit from what malware authors have to teach. The computer security community is used to vilifying the hackers and malware authors who choos...

MySQL Community Server 5.1 < 5.1.49 Multiple Denial of Service Vulnerabilities

Binary data 801140.prm...

Tplayer V1R10 - Denial of Service

!/usr/bin/python print "--------------------Exploit By 41.w4r10r------------------------------\n" print "-------------------41.w4r10r@gmail.com-----------------------------\n" print "----------------Tplayer V1R10 DoS Exploit------------------------------\n" print "-------------Vendor Site :...