discforums-sql.txt

Author: !DoktOR! Date found: 30.09.08 Product: Discussion Forums 2k Version: 3.3 URL: http://developer.berlios.de/projects/df2k/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

Oracle Application Server (SOA) — Linked XSS vulnerability

Application:Oracle Application ServerSOA Versions Affected:Oracle Application ServerSOA version 10.1.3.1.0 Vendor URL: http://oracle.com Bugs:Multiple XSS Exploits: YES Reported: 10.01.2008 Vendor response:11.01.2008 Date of Public Advisory:13.01.2009 CVE: CVE-2008-4014 Description: XSS IN...

CVE-2008-4453

creationtimestamp| type| source ---|---|--- 2008-09-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6638...

DoS vulnerability in Opera

Здравствуйте 3APA3A! Сообщаю вам о найденной мною новой Denial of Service уязвимости в Opera. Данная уязвимость является частью моего проекта Day of bugs in browsers http://websecurity.com.ua/2453/. DoS: Эксплоит: http://websecurity.com.ua/uploads/2008/Opera20DoS20Exploit3.html Уязвима версия Ope...

pilotgroup-sql.txt

--==+================================================================================+==-- --==+ Pilot Online Training Solution Remote SQL Injection Vulnerbility +==-- --==+================================================================================+==--...

Pro Chat Rooms 3.0.3 (guid) SQL Injection Vulnerabilities

No description provided by source. Author: !DoktOR! Date found: 28.09.08 Product: Pro Chat Rooms Version: 3.0.3 Price: $55 URL: www.prochatrooms.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

Pluck update.php Remote Privilege Escalation

The remote host is running pluck, a simple content management system written in PHP. The installation of pluck on the remote host allows an anonymous remote attacker to call the 'update.php' script, which is intended only for upgrading from one version of pluck to another. Note that an attacker m...

CVE-2008-4364

creationtimestamp| type| source ---|---|--- 2008-09-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6610...

CVE-2008-4718

creationtimestamp| type| source ---|---|--- 2008-09-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6607 2008-09-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6592...

atomic-sqlxss.txt

----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net ---------------------------------------------------------- Bug founded by d3v1l Date: 25.09.2008 [email protected]...

CVE-2008-4335

creationtimestamp| type| source ---|---|--- 2008-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6572 2008-09-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6574...

CVE-2008-4336

creationtimestamp| type| source ---|---|--- 2008-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6572...

CVE-2008-4244

creationtimestamp| type| source ---|---|--- 2008-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6521 2008-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6546...

Multiple Vendor FTP Server - Long Command Handling Security

Multiple Vendor FTP Server - Long Command Handling Security source: https://www.securityfocus.com/bid/31289/info FTP servers by multiple vendors are prone to a security vulnerability that allows attackers to perform cross-site request-forgery attacks. Successful exploits can run arbitrary FTP...

New Automatic File Download vulnerabilities in Google Chrome

Здравствуйте 3APA3A! Сообщаю вам о найденной мною новых Automatic File Download уязвимостях в браузере Google Chrome. В браузере Chrome имеются уязвимости, которая позволяют загружать произвольные файлы, в том числе exe, без предварительного уведомления пользователя. Данные две Automatic File...

CVE-2008-4074

creationtimestamp| type| source ---|---|--- 2008-09-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6433 2008-09-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6426...

CVE-2008-4073

creationtimestamp| type| source ---|---|--- 2008-09-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6426 2008-09-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6433...

MS08-052: Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593)

The remote host is running a version of Windows that has multiple buffer overflow vulnerabilities when viewing VML, EMF, GIF, WMF and BMP files that could allow an attacker to execute arbitrary code on the remote host. To exploit these flaws, an attacker would need to send a malformed image file ...

CVE-2008-4370

creationtimestamp| type| source ---|---|--- 2008-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6411...

CVE-2009-2762

creationtimestamp| type| source ---|---|--- 2008-09-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6397 2008-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6421 2009-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9410...