RoundCubeWebmail 0.2.x Cross Site Scripting

Exploit Title: RoundCube Webmail XSS Voulerability Date: 6.01.2010 Author: j4ck & Globus from elitehackers.pl Software Link: Software link : http://roundcube.net/download Version: 0.2.X , | possible voulerability in higher versions. Tested on: Code : XSS:...

Code injection

The embedded database engine service aka ovdbrun.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to cause a denial of service daemon crash via an invalid Error Code field in a packet...

IBM SolidDB solid.exe远程拒绝服务漏洞

BUGTRAQ ID: 37053 CVE ID: CVE-2009-3840 IBM solidDB是可实现电信级性能的关系数据库。 IBM SolidDB包含有一个内嵌式的数据库服务组件（solid.exe），该服务默认启用，在2315/tcp端口上接受远程连接。在从网络接收到报文时，服务会基于报文中所指定的出错代码编号确定并显示出错代码字符串。如果攻击者发送了带有无效出错代码编号的特制报文，就可以触发异常，强制终止服务。以下是有漏洞部分的代码段： /----- 0061611F 0FB65424 02 MOVZX EDX,BYTE PTR SS:ESP+2 00616124...

CORE-2009-1027: IBM SolidDB invalid error code vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ IBM SolidDB invalid error code vulnerability 1. Advisory Information Title: IBM SolidDB invalid error code vulnerability Advisory Id: CORE-2009-1027 Advisory URL:...

IBM SolidDB invalid error code vulnerability

Exploit for unknown platform in category dos / poc ============================================ IBM SolidDB invalid error code vulnerability ============================================ Title: IBM SolidDB invalid error code vulnerability CVE-ID: OSVDB-ID: Author: Core Security Published: 2009-11-...

Core Security Technologies Advisory 2009.0814

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ HP Openview NNM 7.53 Invalid DB Error Code vulnerability 1. Advisory Information Title: HP Openview NNM 7.53 Invalid DB Error Code vulnerability Advisory Id:...

HP Openview NNM 7.53 Invalid DB Error Code Vulnerability

Exploit for unknown platform in category dos / poc ======================================================== HP Openview NNM 7.53 Invalid DB Error Code Vulnerability ======================================================== Title: HP Openview NNM 7.53 Invalid DB Error Code Vulnerability CVE-ID:...

HP OpenView Network Node Manager (OV NNM) 7.53 - Invalid DB Error Code

HP OpenView Network Node Manager OV NNM 7.53 - Invalid DB Error Code -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ HP Openview NNM 7.53 Invalid DB Error Code vulnerability 1. Advisory Information Title: HP Openvi...

photovideotube 1.11 - Multiple Vulnerabilities

photovideotube 1.11 - Multiple Vulnerabilities / | \ | | / \ \ | |/ /\ / // \ \ \ Y // | | / / / / / :: Egy Coders Team Researcher /- PhotoVideoTube v 1.1 = Multiple Vulnerabilities /- Insecure Cookie Handling & Cookie Grabber & Upload Shell /- http://photovideotube.com/ /- see demo script...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

I-Rater Platinum SQL Injection

I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admin 'or' 1=1 in password : Photo Rating Script Pro ...

I-Rater ProPlantinum 4.0 - Authentication Bypass

I-Rater ProPlantinum 4.0 - Authentication Bypass I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admi...

Null pointer dereference

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service system crash via an RX response with a large error-code value that is interpreted as a pointer and dereferenced,...

DEBIAN-CVE-2009-1250

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service system crash via an RX response with a large error-code value that is interpreted as a pointer and dereferenced,...

CVE-2009-1250

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service system crash via an RX response with a large error-code value that is interpreted as a pointer and dereferenced,...

CVE-2009-1250

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service system crash via an RX response with a large error-code value that is interpreted as a pointer and dereferenced,...

CVE-2009-1250

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service system crash via an RX response with a large error-code value that is interpreted as a pointer and dereferenced,...

Serv-U7 provide the right experience Essentials-vulnerability warning-the black bar safety net

Since the author is lazy, does not provide log cleanup feature, it will leave a log: One, the su7 is the right there are several? There are two forms to get rid of su7 in. 1, login to the Administrator Console page ==get the OrganizationId for Add User ==get the global user of the“next new user I...