EnanoCMS 1.1.7pl1 Blind SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Attackers Target Twitter XSS Bug

A dangerous XSS bug surfaced on Twitter on Monday, and researchers have seen active exploits for the bug, which allows an attacker to steal the session cookie of a Twitter user with a simple click-and-you’re-owned technique. Experts say that the attacks seem to be emanating from domains in Brazil...

CVE-2010-4913

creationtimestamp| type| source ---|---|--- 2010-09-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14935...

SAP NetWeaver Integration Directory — Multiple XSS

Application: SAP NetWeaver XI Versions Affected: SAP NetWeaver XI Vendor URL: Bugs: XSS Exploits: YES Reported: 09.06.2010 Vendor response: 10.06.2010 Date of Public Advisory: 09.03.2011 CVE-number: Author: Dmitriy Evdokimov Description SAP NetWeaver Integration Directory has multiple linked XSS...

CVE-2010-4919

creationtimestamp| type| source ---|---|--- 2010-09-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14914...

ChillyCMS 1.1.3 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: chillyCMS Multiple Vulnerabilities Vendor: http://frozenpepper.de/ Vulnerable Version: 1.1.3 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: chillyCMS is a Content Management System. Its main features are:...

Users Still Making Life Easy for Scareware Crews

Scareware and rogue AV programs have enjoyed a very good run in the last few years, making millions of dollars for their creators and generally making life miserable for victims. And while there’s been some innovation recently in the mechanisms attackers use to keep the programs resident on...

SAP Crystal Reports 2008 — ActiveX Insecure Methods

Application: SAP Crystal Report Server 2008 Versions Affected: SAP Crystal Report Server 2008 Vendor URL: http://www.sap.com Exploits: YES Bugs: Insecure methods Reported: 09.03.2010 Vendor response: 10.03.2010 Date of SAP Security Note Published: 8.10.2010 Date of Public Advisory: 14.01.2011...

Rumba XML 2.4 - 'index.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42914/info Rumba XML is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and...

Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities

Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/42908/info Amiro.CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful...

Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42908/info Amiro.CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to r...

Multiple Multicast Vulnerabilities in Cisco IOS Software - Cisco Systems

Two crafted Protocol Independent Multicast PIM packet vulnerabilities exist in Cisco IOS software that may lead to a denial of service DoS condition. Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available. TRUSTED...

CVE-2010-3003

creationtimestamp| type| source ---|---|--- 2010-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34546 2010-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34543 2010-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34544 2010-08-31...

XOOPS 2.0.14 - article.php SQL Injection

XOOPS 2.0.14 - article.php SQL Injection / \ / | | | \ / | | | | | | | | | | || | | | | | | | | '| | | | | | | | | | |/ \ / |/ / / | | | | || | || | || || | / || | | | / | | || / / |/ || ,|\|,| +-+-+-+-+ |C|r|e|w| +-+-+-+-+ XOOPS 2.0.14 article.php SQL Injection Vulnerability Discovered By...

chillyCMS 1.1.3 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================== chillyCMS 1.1.3 Multiple Vulnerabilities ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

μTorrent (uTorrent) 2.0.3 - DLL Hijacking

Title: uTorrent =2.0.3 Dll Hijacking Local Exploits By: DrIDE Tested: Windows 7RC Note: These are additional DLL's with unsafe Load Paths Reference: http://www.exploit-db.com/exploits/14726/ If the payload .DLL file is renamed to any of these files and placed in the utorrent.exe directory, the...

CVE-2010-3143

creationtimestamp| type| source ---|---|--- 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14745 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14778...

CVE-2010-5240

creationtimestamp| type| source ---|---|--- 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14786 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14787...

CVE-2010-3131

creationtimestamp| type| source ---|---|--- 2010-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14730 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14783...

CVE-2010-3129

creationtimestamp| type| source ---|---|--- 2010-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14726 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14748...