Information disclosure

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data...

DeluxeBB 1.3 Information Disclosure

====================================================================== DeluxeBB new; $bro-agent"Mozilla/5.0 Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.14 Gecko/20080404 Firefox/2.0.0.14"; $bro-defaultheader"Cookie" = "membercookie=$membercookie; memberpw=$memberpw; memberid=$memberid"; sub gener...

DeluxeBB <= 1.3 Private Info Disclosure

Exploit for php platform in category web applications ======================================= DeluxeBB new; $bro-agent"Mozilla/5.0 Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.14 Gecko/20080404 Firefox/2.0.0.14"; $bro-defaultheader"Cookie" = "membercookie=$membercookie; memberpw=$memberpw;...

DeluxeBB 1.3 - Private Information Disclosure

====================================================================== DeluxeBB new; $bro-agent"Mozilla/5.0 Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.14 Gecko/20080404 Firefox/2.0.0.14"; $bro-defaultheader"Cookie" = "membercookie=$membercookie; memberpw=$memberpw; memberid=$memberid"; sub gener...

Douran Portal 3.9.7.55 Cross Site Scripting / Shell Upload

=========================================================== + Douran Portal alert'ITSecTeam' Demo : http://isaar.ir/DesktopModules/Gallery/OrderForm.aspx?itemtitle=alert'ITSecTeam' 2 Remote File Upload : Note : Worked In Older 3.8.2.2 Poc : You Can Upload Y...

douran portal 3.9.7.55 - Multiple Vulnerabilities

=========================================================== + Douran Portal alert'ITSecTeam' 2 Remote File Upload : Note : Worked In Older 3.8.2.2 Poc : You Can Upload Your File Without Check Authorization You Can Upload : string acceptedFiles =...

kernel: net/sched/act_police.c infoleak

The tcfactpolicedump function in net/sched/actpolice.c in the actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc4 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel...

Fedora 14 : rekonq-0.6.1-1.fc14 (2010-15874)

Mem leak fixed in the bars - Bookmarklets support - No more focus stealing on external url calls - Chinese sites right encoding - OpenSearch suggestions localized - Fixed urlbar crash in disconnected mode - AdBlock performance improvements - UrlBar Improvements - Suggestions - History Review -...

nileweb School CMS injection vulnerability and repair programme-vulnerability warning-the black bar safety net

nileweb School CMS program index. php parameter filtering is not strictly the presence of injection vulnerabilities. Batch google. cn inurl:index. php? action= http://localhost/index.php?action=cms/showpaget&pageid=-21+/! uniOn/+select+1,convertgrOupcOncatusername,0x3a,password using...

JBossEAP status servlet info leak

JBoss Enterprise Application Platform aka JBossEAP or EAP before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string...

XFS - Deleted Inode Local Information Disclosure

/ stalehandle.c - attempt to create a stale handle and open it Copyright C 2010 Red Hat, Inc. All Rights reserved. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version...

PT-2010-4524 · Php · Nusoap

Name of the Vulnerable Software and Affected Versions: NuSOAP version 0.9.5 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to an arbitrary PHP script that uses NuSOAP classes. This could potentially lead to unauthoriz...

gokhun asp stok 1.0 - Multiple Vulnerabilities

============================================ Gokhun ASP Stok v1.0 - Multiple Remote Vulnerabilities ============================================ My + Author : KnocKout + Greatz : DaiMon Contact : [email protected] Software info Script : Gokhun ASP Stok v1.0 Software: http://www.gokhun.com &...

Apple Patches Mac OS X Info Stealing Hole

Apple has pushed out a Mac OS X security update to plug a security hole that allows access to shared folders without a valid password. Read the full article. ZDNet...

wpQuiz 2.7 - Authentication Bypass

Powered by wpQuiz - Auth bypass Vulnerability My + Author : KnocKout + Greatz : DaiMon Contact : [email protected] Software info Script : wpQuiz Version : 2.7 Download : http://webscripts.softpedia.com/script/Quizz/wpQuiz-41098.html Vulnerability Style : Auth bypass Google Dork : "Powered by...

System Shop - 'Module aktka' SQL Injection

/ | / | | | | | | | | | | | | | | | \ | || | | /| | | | | || || | \ | | | | |/||| \| || Exploit Title: System Shop SQL Injection - Module aktkat= Date: 12.09.2010 Author: secret Software Link: www.system-shop.at Version: latest version Tested on: XP / Linux Dorks : inurl:"aktkat" / "Powered by...

MyHobbySite 1.01 - SQL Injection Authentication Bypass

MyHobbySite 1.01 - SQL Injection Authentication Bypass Exploit Title: MyHobbySite 1.01 SQL injection, Bypass Authentication Vulnerability Date: 12-09-2010 Author: YuGj VN Email: [email protected] Software Link: http://www.myhobbysite.net/index.php?page=15 Version: v1.01 Bug Code: if...

MyHobbySite 1.01 SQL Injection / Authentication Bypass Vulnerability

Exploit for php platform in category web applications ==================================================================== MyHobbySite 1.01 SQL Injection / Authentication Bypass Vulnerability ==================================================================== Exploit Title: MyHobbySite 1.01 SQL...

Nmap NSE: SMB System Info

This script attempts to get the information about the remote system from the registry. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-system-info.nse OpenVAS Vulnerability Test $Id: gbnmapsmbsysteminfo.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB System Info...

Nmap NSE: SMB System Info

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...