Exploit Easy RM to MP3 2.7.3.700 - Ruby

Exploit for unknown platform in category local exploits ======================================= Exploit Easy RM to MP3 2.7.3.700 - Ruby ======================================= Title: Exploit Easy RM to MP3 2.7.3.700 - Ruby CVE-ID: OSVDB-ID: Author: John Babio Published: 2009-12-24 Verified: yes...

SA-CONTRIB-2009-080 - Simplenews Statistics - Multiple vulnerabilities

The Simplenews Statistics module provides newsletter statistics such as the open rate and CTR click-through rate. The module suffers multiple vulnerabilities, including Cross Site Request Forgeries CSRF, Cross Site Scripting problem Cross Site Scripting and Open Redirect. This problem allows an...

SA-CONTRIB-2009-079 - vCard - Cross Site Scripting

The vCard module adds a vCard download link to every user's profile. This link makes it easy to add users from a Drupal site to a local address book. When the themevcard function is added to a theme and default content from the vCard module is output, the site will be vulnerable to Cross Site...

Fedora Core 11 FEDORA-2009-7498 (mumbles)

The remote host is missing an update to mumbles announced via advisory FEDORA-2009-7498. OpenVAS Vulnerability Test $Id: fcore20097498.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7498 mumbles Authors: Thomas Reinke Copyright: Copyright c 2009...

SA-CONTRIB-2009-044 - Bubbletimer - Multiple vulnerabilities

Bubbletimer allows users to create timesheets based on nodes. It suffers from a cross-site scripting XSS vulnerability due to not properly sanitizing node titles before they are displayed. It is also vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly add...

Unfixed XSS vulnerability at www.johncassidyphoto.co.uk

Security researcher Xylitol, has submitted on 06/10/2009 a cross-site-scripting XSS vulnerability affecting www.johncassidyphoto.co.uk, which at the time of submission ranked 2684397 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/2010. I...

Staying safe online: The need for cybersecurity

On the day that President Obama releases a cybersecurity policy review, hear from experts and officials in the field. This video features Janet Napolitano, Secretary of Homeland Security; William Pelgrin, Chief Cybersecurity Officer of New York; John Thompson, CEO of Symantec; Leslie Harris of th...

SA-CONTRIB-2009-025 - Fivestar - Cross-site request forgery

The Fivestar module provides a voting widget for content and records votes using Ajax. The URL used by the javascript to register votes is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Fivestar 5.x-1.x prior to...

Fedora Update for R FEDORA-2008-7619

Check for the Version of R OpenVAS Vulnerability Test Fedora Update for R FEDORA-2008-7619 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

TYPO3 sa-2009-001 Weak Encryption Key File Disclosure

This module exploits a flaw in TYPO3 encryption ey creation process to allow for file disclosure in the jumpUrl mechanism. This flaw can be used to read any file that the web server user account has access to view. Module Options msf use auxiliary/admin/http/typo3/sa2009001 msf undefinedsa2009001...

Linux/x86 - /sbin/iptables -POUTPUT DROP Shellcode (60 bytes)

Linux/x86 - /sbin/iptables -POUTPUT DROP Shellcode 60 bytes. Shellcode exploit for Linuxx86 platform Name = John Babio Twitter = 3vi1john Arch = Linux/x86-32 bits Code ///sbin/iptables -POUTPUT DROPPolicy of drop to OUTPUT chain const char sc =...

Joomla Component Volunteer 2.0 (job_id) SQL Injection Vulnerability

No description provided by source. Joomla Component comvolunteerjobid SQL-injection Author : boom3rang Site : www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! nameVolunteer/name !...

Joomla! Component Volunteer 2.0 - SQL Injection

Joomla Component comvolunteerjobid SQL-injection Author : boom3rang Site : www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! Volunteer ! 05.04.2007 ! John Pan ! [email protected] ! 2.0 Example:...

Joomla Component Kbase 1.0 Remote SQL Injection Vulnerability

No description provided by source. Joomla Component Kbase SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: hitmanatkhg-crewdotws Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, warning, chs, redc00de - -=Kosova Hackers Group=- ScriptName: "Joomla" Component: "Kbase comkbas...

Joomla! Component Kbase 1.0 - SQL Injection

Joomla! Component Kbase 1.0 - SQL Injection Joomla Component Kbase SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: hitmanatkhg-crewdotws Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, warning, chs, redc00de - -=Kosova Hackers Group=- ScriptName: "Joomla" Component: "Kbas...

Joomla Kbase 1.0 SQL Injection

Joomla Component Kbase SQL Injection Vulnerability Vulnerability found by: Valon Kerolli Contact: valonatitshqip.com Site: www.itshqip.com ScriptName: "Joomla" Component: "Kbase comkbase" Version: "1.2" Date: "?.?.2008" Author: "John Messingham Development Services" Author E-mail: "[email protected]"...

Joomla! Component Kbase 1.0 - SQL Injection

Joomla Component Kbase SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: hitmanatkhg-crewdotws Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, warning, chs, redc00de - -=Kosova Hackers Group=- ScriptName: "Joomla" Component: "Kbase comkbase" Version: "1.2" Date: "?.?.2008"...

MS Windows GDI+ Proof of Concept (MS08-052) #2

No description provided by source. ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...

mswingdi-poc.txt

------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference: http://www.sweetscape.com/010editor/templates/files/GIFTemplate.bt PoC...

Microsoft Windows - GDI+ (PoC) (MS08-052) (2)

------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference: http://www.sweetscape.com/010editor/templates/files/GIFTemplate.bt PoC...