CVE-2011-2607

Cross-site scripting XSS vulnerability in IBM Rational Team Concert RTC 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165513...

CVE-2011-2607: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Rational Team Concert RTC 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165513...

Mozilla Multiple dangling pointer vulnerabilities (MFSA 2011-23)

Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service application crash or possibly execut...

Mozilla Multiple dangling pointer vulnerabilities (MFSA 2011-23)

Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service application crash or possibly execut...

CVE-2009-5058

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.5 services for Lotus Domino allows remote authenticated users to cause a denial of service daemon crash by deleting an item that is accessed through a connector, aka SPR RELS7LARKR...

Mobius Forensic Toolkit v0.5.7 released !

Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files for easy integration with other tool. Changelog Six news registry reports were...

Android 1.x/2.x HTC Wildfire - Local Privilege Escalation

/ android 1.x/2.x the real youdev feat. init local root exploit. Modifications to original exploit for HTC Wildfire Stage 1 soft-root c 2010 Martin Paul Eve Changes: -- Will not remount /system rw NAND protection renders this pointless -- Doesn't copy self, merely chmods permissions of original...

CVE-2010-4720: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Auto comjeauto component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the view item page...

PT-2011-1670

Name of the Vulnerable Software and Affected Versions JExtensions JE Auto com jeauto version 1.1 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is related to the view item page, although the specific vectors are not specified. Recommendations For...

Joomla! Component com_b2portfolio 1.0.0 - Multiple SQL Injections

Joomla! Component comb2portfolio 1.0.0 - Multiple SQL Injections B2 Portfolio Joomla Component 1.0.0 Multiple SQL Injection Vulnerability Name B2 Portfolio Vendor http://www.pulseextensions.com Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net...

PayPal Shop Digital - SQL Injection

PayPal Shop Digital - SQL Injection +Name : PayPal Shop Digital www.cyber-warrior.org +Greetz to All System-Hacker, BlackApple , F0RTYS3V3N and All KinqSqlZCrew Members --------------------------------------------------------------------------------------- Var mı içinizde beni tanıyan? Yaşanmadan...

PayPal Shop Digital - SQL Injection

+Name : PayPal Shop Digital www.cyber-warrior.org +Greetz to All System-Hacker, BlackApple , F0RTYS3V3N and All KinqSqlZCrew Members --------------------------------------------------------------------------------------- Var mı içinizde beni tanıyan? Yaşanmadan çözülemeyen sır benim. Kalmasada...

CVE-2010-4517: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Auto comjeauto component 1.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php...

Joomla Component com_jeauto LFI Vulnerability

Exploit for php platform in category web applications ============================================= Joomla Component comjeauto LFI Vulnerability ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /...

DVD Rental Software - SQL Injection

Exploit Title: DVD Rental Software SQL injection Vulnerability Date: 19/11/2010 Author: JaMbA Team: SwT Script url: http://www.commodityrentals.com/dvd.php Version: N/A Tested on: Demo CVE : EXPL0!T...

PT-2011-1429

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.0 through 5.0.91 Oracle MySQL versions 5.1 through 5.1.48 Description The issue allows remote authenticated users to cause a denial of service, resulting in the mysqld daemon crash. This is achieved by using EXPLAIN wit...

No title provided

SQL injection vulnerability in templatesexport.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the exportitemid parameter...

Windows Shell LNK file CONTROL item command execution

Added: 07/22/2010 CVE: CVE-2010-2568 BID: 41732 OSVDB: 66387 Background Microsoft Windows supports LNK files, also known as shortcuts, which are references to other files. Shortcuts can be placed in a location which is convenient for users such as the Desktop or Start menu, from which they can be...

PHPAuctionSystem PHP Code Execution

====================================================== PHPAuctionSystem Upload Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

PHPAuctionSystem - Arbitrary File Upload

PHPAuctionSystem - Arbitrary File Upload Name : PHPAuctionSystem Upload Vulnerability Date : june, 16 2010 Vendor url :http://www.phpauctions.info/ Critical Level : HIGH Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,gunslinger greetz to :All ICW...