1263 matches found
Kerala Computer Emergency Response Team launches operations !
The Kerala Government has announced the launch of the Computer Emergency Response Team, Kerala CERT-K as the nodal agency for monitoring various cyber security related incidents in the State. Chief Minister Shri V S Achuthanandan formally announced the launch of operations today. The agency will...
NoScript Cross Site Scripting Via SQL Injection
Hi List NoScript fails to detect the reflective XSS from trusted domains when an attack is conducted through SQLXSSI. The bypass in NoScript has been successfully conducted by using "Reflective XSS" through Union SQL poisoning attacks by exploiting the reverted errors in the browser. The attack...
NitroSecurity ESM 8.4.0a - Remote Code Execution
NitroSecurity ESM 8.4.0a - Remote Code Execution -- Product description: NitroView ESM is an enterprise-class security information and event management system that identifies, correlates, and remediates threats faster than any other SIEM on the market. -- Problem Description: During research it w...
kdegraphics security update
CentOS Errata and Security Advisory CESA-2010:0753 Updated kdegraphics packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CV...
Important: Red Hat Security Advisory: kdegraphics security update
Updated kdegraphics packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...
Storyteller CMS Local File Inclusion
== Title: Storyteller CMS var Local File Include Vuln Version: n/a Link: http://www.esselbach.com/freeware.php?id=2 == Author: BorN To K!LL - h4ck3r Contact: [email protected] == Vuln code: in GetTemplate function , line 113 to 127 function GetTemplate$var if fileexists"templates/$var.tmp.php"...
Softbiz Article Directory Script (sbiz_id) Blind SQL Injection
Exploit for php platform in category web applications ============================================================== Softbiz Article Directory Script sbizid Blind SQL Injection ============================================================== =========================================================...
PHP Classifieds ADS Blind SQL Injection
Title: PHP CLASSIFIEDS ADS Price: $49 Link : http://www.sellatsite.com/sellatsite/phpclass.asp Author: BorN To K!LL - h4ck3r 3xploit: /detail.php?sid=Blind-Injection 3xample: http://www.example.com/classi/detail.php?sid=80 and 1=1-- // True ,, http://www.example.com/classi/detail.php?sid=80 and...
PHP Classifieds ADS - sid Blind SQL Injection
PHP Classifieds ADS - sid Blind SQL Injection Title: PHP CLASSIFIEDS ADS Price: $49 Link : http://www.sellatsite.com/sellatsite/phpclass.asp Author: BorN To K!LL - h4ck3r 3xploit: /detail.php?sid=Blind-Injection 3xample: http://www.example.com/classi/detail.php?sid=80 and 1=1-- // True ,,...
FFDshow - Overflow (SEH) Exception Leading to Null Pointer on Read
FFDshow SEH Exception leading to NULL pointer on Read Author: Matthew Bergin Website: http://berginpentesting.com/ Email: [email protected] Date: 09/02/10 Filename: C:\Program Files\K-Lite Codec Pack\FFDshow\ffdshow.ax Version: v1.1.3530.0 License: GNU General Public License Description...
K-Meleon for windows about neterror Stack Overflow DoS
Exploit for windows platform in category dos / poc ====================================================== K-Meleon for windows about neterror Stack Overflow DoS ====================================================== K-Meleon for windows about:neterror Stack Overflow DoS Vendor...
ffdshow Video Codec - Denial of Service
ffdshow Video Codec - Denial of Service !/usr/bin/perl Exploit Title: Malformed MP4 Local DoS for ffdshow Video Codec tryouts rev. 3467 20100713 x86 Date: 08/08/2010 Author: Nishant Das Patnaik Web: http://nishantdaspatnaik.yolasite.com Software Link:...
ffdshow Video Codec Denial of Service
Exploit for windows platform in category dos / poc ===================================== ffdshow Video Codec Denial of Service ===================================== !/usr/bin/perl Exploit Title: Malformed MP4 Local DoS for ffdshow Video Codec tryouts rev. 3467 20100713 x86 Date: 08/08/2010 Author...
K-Meleon For Windows 1.5.3 / 1.5.4 Stack Overflow
K-Meleon for windows about:neterror Stack Overflow DoS Vendor URL:http://kmeleon.sourceforge.net/ Advisore:http://lostmon.blogspot.com/2010/08/k-meleon-for-windows-aboutneterror-dos.html Vendor notified:Yes exploit available: YES K-Meleon is an extremely fast, customizable, lightweight web browse...
Fwd: {Lostmonґs Group} K-Meleon for windows about:neterror Stack Overflow DoS
K-Meleon for windows about:neterror Stack Overflow DoS Vendor URL:http://kmeleon.sourceforge.net/ Advisore:http://lostmon.blogspot.com/2010/08/k-meleon-for-windows-aboutneterror-dos.html Vendor notified:Yes exploit available: YES K-Meleon is an extremely fast, customizable, lightweight web browse...
K-Meleon 1.x - URI Handling Multiple Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/42200/info K-Meleon is prone to multiple denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to crash the application. Given the nature of these vulnerabilities, the attacker ma...
K-Meleon 1.x - URI Handling Multiple Denial of Service Vulnerabilities
K-Meleon 1.x - URI Handling Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/42200/info K-Meleon is prone to multiple denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to crash the...
dotDefender 4.02 Cross Site Scripting
dotDefender is prone to a XSS because it doesn't satinate the input vars correctly. Injecting obfusctated JavaScript code based on references vars assignment, the dotDefender WAF is vulnerable. Class: Input Validation Error Remote: Yes Credit: David K. SH4V Vulnerable: till 4.02 Exploit: //POST...
