ZeusCMS 0.2 - Database Backup Dump / Local File Inclusion

============================================================================== » Note : Tribute to the martyrs of Gaza . ============================================================================== » ZeusCMS v0.2 DBD/LFI Multiple Vulnerabilities...

ZeusCMS 0.2 - Database Backup Dump Local File Inclusion

ZeusCMS 0.2 - Database Backup Dump Local File Inclusion ============================================================================== » Note : Tribute to the martyrs of Gaza . ============================================================================== » ZeusCMS v0.2 DBD/LFI Multiple...

myPHP Guestbook Database Disclosure

Demo: http://www.roeschensitzung.de/myPHPGuestbook/backup/backup.sql ============================================================================== » Note : Tribute to the martyrs of Gaza . ============================================================================== » myPHP Guestbook Database...

vBulletin 3.5.2 - Cross-Site Scripting

vBulletin 3.5.2 - Cross-Site Scripting Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 =============================================== WWW.sec-war.com =============================================== 3.5.2 - Introduction XS...

myPHP Guestbook 2.0.4 - Database Backup Dump

myPHP Guestbook 2.0.4 - Database Backup Dump ============================================================================== » Note : Tribute to the martyrs of Gaza . ============================================================================== » myPHP Guestbook Database Backup Dump Vulnerability...

vBulletin v3.5.2 XSS Vulnerabilities

Exploit for unknown platform in category web applications ==================================== vBulletin v3.5.2 XSS Vulnerabilities ==================================== Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 3.5.2...

myPHP Guestbook v2.0.2 Database Backup Dump Vulnerability

Exploit for unknown platform in category web applications ========================================================= myPHP Guestbook v2.0.2 Database Backup Dump Vulnerability =========================================================...

kernel: use flag in do_coredump()

The docoredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to OEXCL but does not use it, which allows context-dependent attackers to modify arbitrary files via a rewrite attack during a core dump...

CVE-2009-4610

Multiple cross-site scripting XSS vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to jsp/dump.jsp in the JSP Dump feature, or the 2 Name or 3 Value parameter to the default URI for the Session Dump Servlet under...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to jsp/dump.jsp in the JSP Dump feature, or the 2 Name or 3 Value parameter to the default URI for the Session Dump Servlet under...

kernel security and bug fix update

2.6.9-89.0.18.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

win xp sp2 PEB ISbeingdebugged shellcode

win xp sp2 PEB ISbeingdebugged shellcode. Shellcode exploit for windows platform name: win xp sp2 PEB ISbeingdebugged shellcode Author: Anonymous Date: 14.12.2009. here is the ASM code made using masm32 if program is being run under debugger the shellcode wil start beeping :D...

Design/Logic Flaw

GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorizedkeys files in users' home directories, related to deb-specific/sshdumpupdate.pl and cronjobs/cvs-cron/sshcreate.php...

Spammer Gets Over 4-Year Sentence

Alan M. Ralsky, the “Godfather of Spam,” was sentenced to 51 months in prison for long term involvement in pump and dump schemes. Read the full article. Washington Post...

Engeman 6.x.x SQL Injection

Engeman is a Brasilian software for maintenance control. Version tested: 6.x.x and prior. Next versions appears vulnerable too. The attacker can inject sql codes in username textbox: SQL dump affter injection: select nome,senha,diasexp,dataltsen,permitetroca from cfgusr where nome='NULL' OR NOME'...

Linux Kernel < 2.6.14.6 procfs Kernel Memory Disclosure Exploit

Exploit for linux platform in category local exploits =============================================================== Linux Kernel include include include include include include include include include...

kernel: do_coredump() vs ptrace_start() deadlock

The ptracestart function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the docoredump function, which allows local users to cause a denial of service deadlock via vectors involving the ptrace system call and a coredumping thread...

Re: Asante FM2008 10/100 Ethernet switch backdoor login

Asante have released v1.07 of this switch's firmware which removes the "superuser" "asante" CLI credentials. After uploading this firmware into my switch, I examined a TFTP dump and could not identify similar credentials. It does not positively rule in or out that the backdoor is gone, but Asante...

The return of image-based spam

After a two year absence, IBM X-Force is reporting iss.net a significant spike in image-based spam. “Since March 20th, we have been witnessing a rebirth of image-based spam. At first, we saw a small trial of image-based spam, reaching 5-10%. Then, in late April, we saw another blast this time a...

Mandriva Update for kernel MDKSA-2007:078 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:078 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...