websvn-xssfhce.txt

WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Handling Issues: There are some file handling issues in the RSS functionality used by WebSVN. The issue is caused by the following bit o...

astrospaces-sql.txt

AstroSPACES profile.php SQL Powered by Philippine Website Developers and AstroSPACES © P3NET 2006-2007 AUTHOR : TurkishWarriorr Sehitler Ölmez Vatan Bölünmez .... HOME : http://www.1923turk.org DORK : Powered By AstroSPACES EXPLOIT :...

AstroSPACES (id) Remote SQL Injection Vulnerability

No description provided by source. AstroSPACES profile.php SQL Powered by Philippine Website Developers and AstroSPACES © P3NET 2006-2007 AUTHOR : TurkishWarriorr Sehitler Ölmez Vatan Bölünmez .... HOME : http://www.1923turk.org DORK : Powered By AstroSPACES EXPLOIT :...

AstroSPACES 1.1.1 - id SQL Injection

AstroSPACES 1.1.1 - id SQL Injection AstroSPACES profile.php SQL Powered by Philippine Website Developers and AstroSPACES © P3NET 2006-2007 AUTHOR : TurkishWarriorr Sehitler Ölmez Vatan Bölünmez .... HOME : http://www.1923turk.org DORK : Powered By AstroSPACES EXPLOIT :...

AstroSPACES (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== AstroSPACES id Remote SQL Injection Vulnerability =================================================== AstroSPACES profile.php SQL Powered by Philippine Website Developers and AstroSPACES ...

AstroSPACES 1.1.1 - 'id' SQL Injection

AstroSPACES profile.php SQL Powered by Philippine Website Developers and AstroSPACES © P3NET 2006-2007 AUTHOR : TurkishWarriorr Sehitler Ölmez Vatan Bölünmez .... HOME : http://www.1923turk.org DORK : Powered By AstroSPACES EXPLOIT :...

Technote 7 - 'shop_this_skin_path' Remote File Inclusion

-----------webDEViL - w3bd3vil at gmail dot com ----------- -----------Technote 7 Remote File Inclusion------------------------ ----------developers site: http://www.technote.co.kr-------------- bash-3.1 cat technote7/skinshop/standard/3plugintwindow/twindownotice.php ...snip... $TWINSET'dirpath'...

Technote 7 - shop_this_skin_path Remote File Inclusion

Technote 7 - shopthisskinpath Remote File Inclusion -----------webDEViL - w3bd3vil at gmail dot com ----------- -----------Technote 7 Remote File Inclusion------------------------ ----------developers site: http://www.technote.co.kr-------------- bash-3.1 cat...

eLineStudio Site Composer (ESC) <= 2.6 Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: eLineStudio Site Composer ESC =2.6 Multiple Vulnerabilities Vendor: www.elinestudio.com Vulnerable Version: 2.6 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

Cosminexus Developer's Kit for Java Buffer Overflow and Denial of Service Vulnerabilities

Overview The image-processing APIs in Cosminexus Developer's Kit for Java is vulnerable to buffer overflow and a Denial od Service DoS. Impact An attacker could cause a Denial of Service DoS or execute arbitrary code. Solution Please refer to the 'Vendor Information' section for official...

RantX 1.0 Insecure Admin Authentication Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ RantX 1.0 Insecure Admin Authentication Vulnerability +==-- --==+================================================================================+==-- Discovered By:...

RantX 1.0 - Insecure Admin Authentication

RantX 1.0 - Insecure Admin Authentication --==+================================================================================+==-- --==+ RantX 1.0 Insecure Admin Authentication Vulnerability +==-- --==+================================================================================+==--...

RantX 1.0 - Insecure Admin Authentication

--==+================================================================================+==-- --==+ RantX 1.0 Insecure Admin Authentication Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 14 MAY 200...

blogworx-sql.txt

BlogWorx 'view.asp' Multiple SQL Injection Vulnerability Discovered By : U238 WebPage : http://noexec.blogspot.com mail : setuid.noexec0x1a.qhotmaild0t.com Script : http://devworx.somee.com/projects/project.asp?pid=20 Script alternativ : http://www.codedworld.com/download/blogworx/74764.html...

Debian Security Advisory DSA 583-1 (lvm10)

The remote host is missing an update to lvm10 announced via advisory DSA 583-1. OpenVAS Vulnerability Test $Id: deb5831.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 583-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 588-1 (gzip)

The remote host is missing an update to gzip announced via advisory DSA 588-1. OpenVAS Vulnerability Test $Id: deb5881.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 588-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

DynaWeb Developers MMS Gallery 'id'目录遍历漏洞

DynaWeb Developers MMS Gallery是一款基于PHP的WEB应用程序。 DynaWeb Developers MMS Gallery不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于脚本对用户提交的'id'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 DynaWeb Developers MMS Gallery 1.0 目前没有解决方案提供： http://www.mms2web.com/index.php...

[SECURITY] Fedora 7 Update: kdesdk-3.5.8-2.fc7

A collection of applications and tools used by developers, including: cervisia: a CVS frontend kbabel: PO file management kbugbuster: a tool to manage the KDE bug report system kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays...

Pole five-stroke input method of a vulnerability-vulnerability warning-the black bar safety net

Find pole five-stroke input method an exploit With this vulnerability you can bypass the system login password, thereby entering the system. Test system: vista Test keyboard version: compiled version: 2007.2.26.0.98 Specific process is this: the elect of this input method, right-click the input...

Microsoft MFC FindFile function heap buffer overflow

Overview A buffer overflow vulnerability in the Microsoft Foundation Class MFC Library could allow an attacker to execute arbitrary code on an affected system. Description The Microsoft Foundation Class MFC Library is a Microsoft library that wraps parts of the Windows API in C++ classes. The MFC...