Zyke CMS 1.1 - Bypass

======================================================================================== | Title : Zyke CMS V1.1 By pass Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Script : Powered by ZykeCMS 2010 | Tested on: windows SP2 Français V.Pnx2 2....

Safari 4.0.5 Webkit Stack Exhaustion Denial Of Service

Webkit Safari Stack Exhaustion DoS Found By: DrIDE Credit To: Mattias Karlsson Reference: http://www.exploit-db.com/exploits/12401 Tested On: Windows 7 + Safari 4.0.5 loop1; var a = ""; function loop1 document.writea; setIntervalloop2,0; function loop2 document.writea; setIntervalloop1,0;...

UBB.threads 6.4.4 Forum Cross Site Scripting

Title: UBB.threads™ 6.4.4 forum xss Vulnerability EDB-ID: CVE-ID: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Download Exploit Code Download N/A ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! Title : UBB.threads™ 6.4.4 forum xss Vulnerability ! Author : Dr.0rYX and Cr3w-DZ ! MAIL...

Xftp FTP Client 3.0 PWD Remote Buffer Overflow Exploit

$Id: xftpclientpwd.rb 9143 2010-04-26 18:56:46Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

WM Downloader Buffer Overflow Exploit

New Ticket: WM Downloader version 3.0.0.9 Buffer Overflow MSF Exploit Title: WM Downloader version 3.0.0.9 Buffer Overflow MSF Date: 4/25/10 Author: Blake Version: 3.0.0.9 Tested on: Windows XP SP3 running in Virtualbox This file is part of the Metasploit Framework and may be subject to...

Kasseler CMS 2.0.5 - Bypass Download Backup

Kasseler CMS 2.0.5 - Bypass Download Backup ======================================================================================== | Title : kasseler cms 2.0.5 = by Pass / Download Backup Vulnerability | Author : indoushka | email : [email protected] | Dork : Copyright ©2007-2009 by Kassele...

openSUSE Security Update : clamav (openSUSE-SU-2010:0149-1)

clamav has been updated to version 0.96. Citing freshmeat.net : This Release introduces new malware detection mechanisms and other significant improvements to the scan engine. Key features include the bytecode interpreter, heuristic improvements, signature improvements, support for new archives,...

TR Forum 1.5 - Cross-Site Request Forgery (Add Admin)

TR Forum 1.5 - Cross-Site Request Forgery Add Admin ======================================================================================== | Title : TR Forum 1.5 insert admin CSRF Vulnerability | Author : EL-KAHINA | email : No-Mail | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 França...

WM Downloader 3.0.0.9 - Local Buffer Overflow (Metasploit)

WM Downloader 3.0.0.9 - Local Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

PHP Classifieds 6.09 - E-mail Dump

======================================================================================== | Title : PHP Classifieds V6.09 E-mail Dump Vulnerability | Author : indoushka | Home : www.dz-blackhat.com | Tested on: Lunix Français v.9.4 Ubuntu | Bug : E-mail Dump ====================== Exploit By...

Oracle Database 'XML DB component' Unspecified vulnerability

Oracle database is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:databaseserver";...

Memorial Web Site Script - Multiple Arbitrary Delete Vulnerabilities

Memorial Web Site Script - Multiple Arbitrary Delete Vulnerabilities ----------------------------------------------------------------------------------------- Memorial Web Site Script Multiple Arbitrary Delete Vuln...

phpGreetCards 3.7 Cross Site Scripting

Exploit Title: phpGreetCards XSS Vulnerabilities Date: 22.04.2010 Author: Valentin Category: webapps/0day Version: 3.7 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = phpGreetCards XSS...

GNU libnss_db 2.2.3 库本地信息泄露漏洞

BUGTRAQ ID: 39132 CVE ID: CVE-2010-0826 nssdb软件包提供了一套C库扩展，允许将Berkeley DB数据库用作别名、组、主机、网络、协议、用户、RPC、服务和影子口令的主来源。 nssdb库在遇到解析错误时可能会显示DBCONFIG文件的某些内容，本地用户可以通过将DBCONFIG符号链接到受限制的文件上然后执行使用该库的suid root应用程序来读取敏感信息。 GNU libnssdb 2.2.3 厂商补丁： GNU --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

60cycle CMS 2.5.2 Cross Site Request Forgery

======================================================================================== | Title : 60 cycleCMS V 2.5.2 CSRF Change Username & Password Exploit | Author : EL-KAHINA | Home : www.iqs3cur1ty.com/vb | Web Site : http://php.opensourcecms.com/scripts/details.php?scriptid=337 | Tested on...

Joomla! Component JoltCard 1.2.1 - SQL Injection

Joomla! Component JoltCard 1.2.1 - SQL Injection Exploit Title: Joomla Component comjoltcard SQL Injection Vulnerability Date: 17.04.2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

RedHat Update for nss_db RHSA-2010:0347-01

Check for the Version of nssdb OpenVAS Vulnerability Test RedHat Update for nssdb RHSA-2010:0347-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Design/Logic Flaw

Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to bypass intrusion-prevention functionality via a request that has an appended long string containing an unspecified manipulation...

CVE-2010-1329

CVE-2010-1329 affects Imperva SecureSphere Web Application Firewall and Database Firewall, with vulnerable versions ranging from 5.0.0.5082 to 7.0.0.7078. The issue allows remote attackers to bypass intrusion-prevention functionality by sending a request that includes an appended long string cont...

Magneto Net Resource ActiveX v4.0.0.5 NetConnectionEnum Exploit

Exploit for windows platform in category remote exploits =========================================================================== Magneto Net Resource ActiveX v4.0.0.5 NetConnectionEnum Exploit Universal =========================================================================== 'Magneto...