CVE-2012-2122 : Serious Mysql Authentication Bypass Vulnerability

CVE-2012-2122 : Serious Mysql Authentication Bypass Vulnerability A serious security bug in MariaDB and MySQL Disclosed, According to Advisory All MariaDB and MySQL versions up to 5.1.61, 5.2.11, 5.3.5, 5.5.22 are vulnerable. This issue got assigned an id CVE-2012-2122. "When a user connects to...

Changomedia - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

JW Player 5.9 Cross Site Scripting / Content Spoofing

Hello list! I want to warn you about security vulnerabilities in JW Player. These are Content Spoofing and Cross-Site Scripting vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are JW Player 5.9.2156 and 5.9.2206, except one vulnerability and...

Advanced Poll v2.03 SQL / XSS Vulnerabilties

Exploit for php platform in category web applications Advanced Poll v2.03 Multiple Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.proxy2.de/ .:. Dork : "Powered by Advanced Poll Version...

IXESHE Malware Avoids Easy Detection to Remain a Persistent Threat

Trend Micro today issued a report on an advanced persistent threat that uses stealthy data-stealing malware called IXESHE “i-sushi” to infect machines. So far it’s hit East Asian governments, Taiwanese electronics manufacturers and German telecommunications firms operating across Asia. Though the...

CVE-2012-2452

creationtimestamp| type| source ---|---|--- 2012-05-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37312 2012-05-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37313 2020-02-11 22:37:23+00:00| seen| https://t.me/cibsecurity/9769...

Like Those Wikipedia Ads? They Mean You're Infected With Malware!

The Wikimedia Foundation is warning its millions of visitors that if they’re seeing ads appearing on any of the Foundation’s Web sites, then their computer is probably infected with malware. The Foundation issued a statement on Monday clarifying that it never runs ads on the Web site for Wikipedi...

Presto! PageManager Network Group Service Packet Network Request Parsing Arbitrary File Access

The installation of Presto! PageManager on the remote host is bundled with a file transfer service referred to as 'NetGroup' or 'Network Group Service' that allows an unauthenticated, remote attacker to retrieve the contents of arbitrary files on the affected host. Note that this service is also...

WordPress 2 Click Social Media Buttons 0.32.2 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

WordPress CodeStyling Localization 1.99.16 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

WordPress Mingle Forum 1.0.33 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

WordPress Subscribe2 8.0 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

WordPress Leaflet 0.0.1 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

WordPress WP Survey And Quiz Tool 2.9.2 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

ESA-2012-019: EMC Documentum Information Rights Management Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-019: EMC Documentum Information Rights Management Multiple Vulnerabilities. EMC Identifier: ESA-2012-019 CVE Identifiers: CVE-2012-2276, CVE-2012-2277 Severity Rating: CVSS v2 Base Score: 6.3 AV:N/AC:M/Au:S/C:N/I:N/A:C Affected products: EMC...

PHP Grade Book 1.9.4 Multiple CSRF Vulnerability

Exploit for php platform in category web applications PHP Grade Book 1.9.4 Multiple CSRF Vulnerability ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.phpgradebook.com/ .:. Tested On Demo :...

SuSE 10 Security Update : IBM Java 1.6.0 (ZYPP Patch Number 8094)

IBM Java 1.6.0 has been updated to SR10-FP1, fixing various security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

SuSE 10 Security Update : IBM Java 1.6.0 (ZYPP Patch Number 8100)

IBM Java 1.5.0 has been updated to SR13-FP1, fixing various security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

CVE-2012-2513

creationtimestamp| type| source ---|---|--- 2012-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18853 2012-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20705...

CVE-2012-1507

creationtimestamp| type| source ---|---|--- 2012-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37145 2012-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37143 2012-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37144...