4Images 1.7.6-9 - Cross-Site Request Forgery / PHP Code Injection

!/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xSs m4n i-Hmx h311c0d3 |.sp. abo.B4sil | HcJ Cyb3r...

KLA10394 Multiple vulnerabilities in Siemens

Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...

Joomla Component com_sanpham SQL Injection Vulnerability

Exploit for php platform in category web applications Joomla Component comsanpham SQL Injection Vulnerability Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : email protected Found : 20 January 2012 - 07:45 PM. Tested On : Windows 7 Ultimate. Google Dork :...

Joomla Component com_car SQL Injection Vulnerability

Exploit for php platform in category web applications Joomla Component comcar SQL Injection Vulnerability 0day Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : email protected Found : 20 January 2012 - 07:45 PM. Tested On : Windows 7 Ultimate. Google Dork :...

Joomla Boss Local File Inclusion

Joomla Component comboss LFI Vulnerability 0day Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : [email protected] Found : 20 January 2012 - 07:45 PM. Tested On : Windows 7 Ultimate. Google Dork : inurl:"/index.php?option=comboss" x exploits: 0day no more...

VUPEN Security Research - Adobe Acrobat and Reader Image Processing Integer Overflow (APSB12-01)

VUPEN Security Research - Adobe Acrobat and Reader Image Processing Integer Overflow Vulnerability APSB12-01 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Adobe Acrobat and Reader are the global standards for electronic...

Linux IGMP Remote Denial Of Service (Introduced in linux-2.6.36)

No description provided by source. / linux-undeadattack.c Linux IGMP Remote Denial Of Service Introduced in linux-2.6.36 CVE-2012-0207 credits to Ben Hutchings: http://womble.decadent.org.uk/blog/igmp-denial-of-service-in-linux-cve-2012-0207.html written By Kingcope Year 2012 Ripped & modified co...

CVE-2012-0989

creationtimestamp| type| source ---|---|--- 2012-01-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36582...

SuSE 11.1 Security Update : Acrobat Reader (SAT Patch Number 5649)

Acrobat Reader was updated to version 9.4.7 to fix two security issues. CVE-2011-2462 / CVE-2011-4369 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

Koobface Gang Apparently Hiding in Plain Sight

The individuals allegedly responsible for wreaking havoc on Facebook with the infamous Koobface botnet are living lavishly, blatantly flaunting their ill-gotten gains and taking little precautions to cover their tracks. Their locations, travels, business ventures, social media personas, Internet...

Cisco IOS XSS and XSRF Vulnerabilities

On June 19, 2009, Cisco released a security response for cross-site scripting and cross-site request forgery vulnerabilities in the HTTP server in IOS. Exploitation of these vulnerabilities could result in attacker supplied JavaScript or HTML being injected into web pages. Further, a remote...

Cisco IOS ICMP Redirect Denial of Service

It is possible to cause a denial of service by flooding the remote device with ICMP requests, which will cause the redirect cache to grow. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17794; scriptversion"1.8"; scriptcvsdate"Date: 2018/11/15 20:50:20";...

Pragyan CMS v 3.0 Remote File Disclosure

Exploit for php platform in category web applications Title Pragyan CMS v 3.0 = Remote File Disclosure Author Or4nG.M4n Download http://space.dl.sourceforge.net/project/pragyan/pragyan/3.0/PragyanCMS-v3.0-beta.tar.bz2 vuln download.lib.php line 16 vuln index.php line 234 $GET'fileget' exploit...

Gregarius 0.6.1 - Multiple SQL Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/51338/info Gregarius is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication...

CVE-2012-6644

creationtimestamp| type| source ---|---|--- 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36530 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36529 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36524 2012-01-09...

CVE-2012-5292

creationtimestamp| type| source ---|---|--- 2012-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36521 2012-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36522 2012-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36523...

CVE-2011-4191

creationtimestamp| type| source ---|---|--- 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18327 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18328 2012-01-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18351...

Wind noise CMS 0DAY exploits-exploits warning-the black bar safety net

Keywords: inurl:User/Regservice. asp The wind noise the registration page... Vulnerability page:/user/SetNextOptions. asp Use method: Constructor injection user/SetNextOptions. asp? sType=1&EquValue=aaaa&SelectName=aaa&ReqSql=select+1,adminname,3,4,5,6,7,8++from+FSMFAdmin “adminname”admin user na...

CVE-2012-5342

creationtimestamp| type| source ---|---|--- 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37942 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37940 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37941...

Yaws-Wiki 1.88 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Yaws-Wiki 1.88 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/51276/info Yaws is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...