[Full-disclosure] Exploit Oracle DB27 - CPU Octobre

Exploit Oracle DB27 SQL exec sys.pbsde.init'AA',TRUE,'MARYANNDAVIDSONMARYANNDAVIDSONMARYA NNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSONMA RYANNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSO NMARYANNDAVIDSONMARYANNDAVIDSON',NULL; BEGIN...

PaFileDB31SQL.txt

SePro Advisory 5 PaFileDB 3.1 - SQL-Injection =========================================================== Vendor: PhpArena URL: http://www.phparena.net/ Date: 17.08.05 App.: PaFileDB Version: 3.1 Type: SQL-Injection Risc: High Credits: ================================ Newangels &...

CVE-2001-1520

The provided connected records confirm that CVE-2001-1520 affects the Xircom REX 6000 PDA, where local users can obtain the 10‑digit PIN by starting a serial monitor, connecting via Rextools, and capturing the cleartext PIN. The root cause centers on exposing the PIN through local serial access; ...

OneWorldStore - OWAddItem.asp SQL Injection

OneWorldStore - OWAddItem.asp SQL Injection source: https://www.securityfocus.com/bid/13181/info OneWorldStore is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

jPORTAL 2.3.1 - 'Banner.php' SQL Injection

source: https://www.securityfocus.com/bid/13103/info JPortal is reportedly affected by an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...

highlight.txt

IHS Iran Hackers Sabotage Public advisory by : NT [email protected] If You Have RUNCMS Installation Address You Can Use highligh.php Hole And Get DataBase ConfigurationName,User,Password Tested In RUNCMS 1.1A ------------------------------------------- Input This Line To Your Browser AddressBar :...

Sun AnswerBook2 < 1.4.5 XSS

Binary data 2678.prm...

SQL Server Cleartext 'sa' Account 'sql' Password Attempted Login (deprecated)

Binary data 1119.prm...

CVE-2002-0358

CVE-2002-0358 affects SGI IRIX systems where the MediaMail and MediaMail Pro binaries (located in /usr/binX11/MediaMail) could be coerced by certain user-supplied arguments to dump core. The underlying issue is a local privilege/ information-disclosure risk due to core dumps from privileged mail ...

PHP-Nuke does not adequately authenticate users thereby allowing attackers to change user information

Overview PHP-Nuke's saveuser function does not adequately authenticate users. Attackers may exploit this vulnerability to change user data and gain access to accounts. Description PHP-Nuke is a set of PHP scripts designed to simplify web site creation and maintenance. PHP-Nuke's saveuser function...

CVE-2001-1105

The CVE-2001-1105 entry affects RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1 as used in Cisco iCND 2.0. The vulnerability is that the product caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and access sensitive data after an initial fail...

CVE-2001-1211

Ipswitch IMail 7.0.4 and earlier contains a vulnerability in the CGI programs aliasadmin and listadm1 that allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted on the same server. The issue arises because these CGI scri...

CVE-1999-1167

CVE-1999-1167 describes a Cross-site scripting vulnerability in the Third Voice Web annotation utility. The issue allows remote attackers to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious JavaScript into an annotation. Affected component is the ...

CVE-2001-0645

CVE-2001-0645 affects Symantec/AXENT NetProwler 3.5.x. The provided materials indicate the presence of several default passwords that could permit an attacker to (1) access the management tier via the admin password, and (2) connect to a MySQL ODBC from the management tier using a blank password....

CVE-2001-0261

Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files...

CVE-2000-1092

CVE-2000-1092 affects EZshopper v3.0 and v2.0 where loadpage.cgi fails to properly validate the parameter; inserting a leading “/” can cause local file listing and reading of EZshopper data files. The root cause is insufficient input validation allowing directory traversal-like behavior, enablin...

ADK flaw in recent versions of PGP

Overview Additional Decryption Keys ADKs is a feature introduced into PGP Pretty Good Privacy versions 5.5.x through 6.5.3 that allows authorized extra decryption keys to be added to a user's public key certificate. However, an implementation flaw in PGP allows unsigned ADKs which have been...

CVE-2000-0326

Meeting Maker uses weak encryption a polyalphabetic substitution cipher for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts...

CVE-1999-0607

QuikStore shopping cart vulnerability CVE-1999-0607 affects the CGI script quikstore.cgi in QuikStore. The issue is that quikstore.cfg is stored under the web document root with insufficient access controls, allowing remote attackers to read the cleartext administrator password and gain privilege...

Ogopogo Autothenticate 1.1.5 - Weak Password Encryption

source: https://www.securityfocus.com/bid/552/info Autothenticate is an extension for MacOS that remembers usernames and passwords from visited websites, and atomatically enters them when the site is visited again. It can be configured to store the username and password, the username only, or...