PHP Address Book 4.0.x SQL Injection

-------------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --PHP-AddressBook v-4.0.X-- -------------------------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/php-addressbook/ --DOWNLOAD:...

AlumniServer 1.0.1 SQL Injection

--------------------------------------------------------- SQL INJECTION VULNERABILITY --AlumniServer v-1.0.1-- --------------------------------------------------------- CMS INFORMATION: --WEB: http://www.alumniserver.net/ --DOWNLOAD: http://www.alumniserver.net/ --DEMO: N/A --CATEGORY:...

AlumniServer 1.0.1 - Authentication Bypass

AlumniServer 1.0.1 - Authentication Bypass || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ VIVA SPAIN!...GANAREMOS EL MUNDIAL!...o.O PROUD TO BE SPANISH!...

CVE-2009-2882

creationtimestamp| type| source ---|---|--- 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33106 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33108 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33107 2009-06-24...

CVE-2009-3513

creationtimestamp| type| source ---|---|--- 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33121 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33120 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33119...

CVE-2009-0714

creationtimestamp| type| source ---|---|--- 2009-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9007 2009-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9006...

CVE-2009-4690

creationtimestamp| type| source ---|---|--- 2009-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33098 2009-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33097...

PHP 5.2.10 safe_mode Bypass

PHP safemode bypass with exec/system/passthru Once again php public new version :php5.2.10 ,and it fix lots of bugs, like this : Bug 45997safemode bypass with exec/system/passthru incorrect fix php5.2.10 ... b = strrchrcmd, PHPDIRSEPARATOR; ifdef PHPWIN32 if b && b == '\' && b == cmd...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:134)

Security vulnerabilities have been discovered and corrected in Mozilla Firefox 3.x : CVE-2009-1392: Firefox browser engine crashes CVE-2009-1832: Firefox double frame construction flaw CVE-2009-1833: Firefox JavaScript engine crashes CVE-2009-1834: Firefox URL spoofing with invalid unicode...

CVE-2009-2286

creationtimestamp| type| source ---|---|--- 2009-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8982 2009-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9302...

Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion (Denial of Service)

Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion Denial of Service !/usr/bin/perl -w udp IAX protocol fuzzer Created: Blake Cornell Exploits found with this code can be found at http://www.securityscraper.com/ Released under the VoIPER project Do not hesitate to show enthusiasm and support...

CVE-2009-2134

creationtimestamp| type| source ---|---|--- 2009-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8941...

MS09-021: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)

The remote host contains a version of Microsoft Excel / Excel Viewer / 2007 Microsoft Office system or the Microsoft Office Compatibility Pack that is affected by several buffer overflow and memory corruption vulnerabilities. If an attacker can trick a user on the affected host into opening a...

KLA10033 Multiple ACE vulnerabilities in Adobe Acrobat & Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat & Reader. getAnnots and customDictionaryOpen methods in JavaScript API can be exploited to cause denial of service or execute arbitrary code through a specially designed pdf file. Original advisories Adobe bulletin Exploitation...

CVE-2009-1140

creationtimestamp| type| source ---|---|--- 2009-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33024...

Microsoft Windows Search Script Injection Vulnerability

Description Microsoft Windows Search is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied input when previewing search results. Successful exploits will cause malicious script code to run in the local context, allowing attackers to steal potentially...

SAP GUI 6.4 ActiveX (Accept) Remote Buffer Overflow PoC

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES...

CVE-2009-2016

creationtimestamp| type| source ---|---|--- 2009-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8894...

CVE-2009-2164

creationtimestamp| type| source ---|---|--- 2009-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8884 2009-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8885...

SQL INJECTION VULNERABILITY--LightOpen CMS Devel 0.1-->

--------------------------------------------------------- SQL INJECTION VULNERABILITY--LightOpen CMS Devel 0.1-- --------------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/lightopencms/ --DOWNLOAD: http://sourceforge.net/projects/lightopencms...