w3af v.1.1 - Web Application Attack and Audit Framework Released

w3af v.1.1 - Web Application Attack and Audit Framework Released w3af is a Web Application Attack and Audit Framework. The project's goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. To read our short and long term objectives. w3af i...

Easy Hosting control panel to manage authentication bypass the defect and repair-vulnerability warning-the black bar safety net

Title: Easy Hosting Control Panel Admin Auth Bypass Author: Jasman www.2cto.com Download address: https://launchpad.net/ehcp & amp; http://www.ehcp.net Affected version: 0.29.10 - 0.29.13 Test platform: Ubuntu, Debian Overview Easy Hosting Control Panel designed for hosting of multiple domains on...

Easy Hosting Control Panel FTP Account Security Bypass Vulnerability

Easy Hosting Control Panel is prone to a security-bypass vulnerability. Attackers could exploit the issue to add arbitrary FTP accounts to the affected application. Easy Hosting Control Panel versions 0.29.10 up to and including 0.29.13 are vulnerable. OpenVAS Vulnerability Test $Id:...

[SECURITY] Fedora 16 Update: kolourpaint-4.7.1-1.fc16

An easy-to-use paint program...

CVE-2010-4844

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

Sql injection

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

CVE-2010-4844

CVE-2010-4844 describes an SQL injection vulnerability in content.php of MH Products Easy Online Shop, exploitable via the kat parameter to execute arbitrary SQL commands. The provided documents do not specify affected versions, root cause details beyond the injection flaw, or any remediation ste...

CVE-2010-4844

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

PT-2011-1779

Name of the Vulnerable Software and Affected Versions MH Products Easy Online Shop affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the kat parameter in the content.php file. Recommendations At the...

HP Easy Printer Care Software HPTicketMgr.dll Directory Traversal (CVE-2011-2404)

A code execution vulnerability has been reported in HP Easy Printer Care Software. The vulnerability is due to insufficient input validation by an ActiveX control within the affected product. A remote attacker may exploit this vulnerability by enticing an affected user to open a malicious link...

CVE-2010-4844: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

CVE-2011-3774

php Easy Survey Package phpESP 2.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/landing.php and certain other files...

CVE-2011-3774

The CVE-2011-3774 entry affects php Easy Survey Package (phpESP) 2.1.1. The vulnerability is a remote information disclosure where a direct request to certain .php files (e.g., public/landing.php and similar) causes an error message that reveals the installation path. This detail is present in NV...

PT-2011-4664

Name of the Vulnerable Software and Affected Versions php Easy Survey Package phpESP version 2.1.1 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as public/landing.php, which...

CVE-2011-3774: Exposure of Sensitive Information to an Unauthorized Actor

php Easy Survey Package phpESP 2.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/landing.php and certain other files...

WordPress WP Easy Stats Plugin 1.8 - Remote File Inclusion

WP Easy Stats plugin is prone to remote file include vulnerability. It allows an attacker to include a remote file and get access to the server. Solution Upgrade the plugin...

Easy Audio Editor Local SEH Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python print"" print" Exploit Title: Easy Audio Editor Local SEH Exploit " print" Author: Angel Injection " print" Tested On: Windows xp sp3 " print" Usage: Import File, Select It, " print"" windows/exec - 303 bytes CMD=calc.ex...

HP Easy Printer Care Software HPTicketMgr.dll ActiveX Control Remote Code Execution

Added: 08/29/2011 CVE: CVE-2011-2404 BID: 49100 OSVDB: 74510 Background HP Easy Printer Care Software is a tool to control and monitor up to 20 HP printers. Problem HP Easy Printer Care Software HPTicketMgr.dll is vulnerable to directory traversal due to insufficient input validation by the...

HP Easy Printer Care Software HPTicketMgr.dll ActiveX Control Remote Code Execution

Added: 08/29/2011 CVE: CVE-2011-2404 BID: 49100 OSVDB: 74510 Background HP Easy Printer Care Software is a tool to control and monitor up to 20 HP printers. Problem HP Easy Printer Care Software HPTicketMgr.dll is vulnerable to directory traversal due to insufficient input validation by the...

HP Easy Printer Care Software HPTicketMgr.dll ActiveX Control Remote Code Execution

Added: 08/29/2011 CVE: CVE-2011-2404 BID: 49100 OSVDB: 74510 Background HP Easy Printer Care Software is a tool to control and monitor up to 20 HP printers. Problem HP Easy Printer Care Software HPTicketMgr.dll is vulnerable to directory traversal due to insufficient input validation by the...