8894 matches found
CVE-2008-4094
Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...
CVE-2008-4094
Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...
kernel: setrlimit(RLIMIT_CPUINFO) with zero value doesn't inherit properly across children
Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMITCPU to 0 until after the change is made, which allows local users to bypass intended resource limits...
Joomla! Component EZ Store Remote - Blind SQL Injection
!/usr/bin/perl Note:Sometimes you have to change the regexp to viewcategory/catid,".$cid." use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Joomla Component EZ Store Blind SQL Injection Exploit \n"; print " Author:His0k4 ALGERIAN HaCkeR \n"; print " \n"; print "...
Scripts24 iPost 1.0.1 (id) Remote SQL Injection Vulnerability
No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability iPOST go.php action www.scripts24.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/go.php?action=report&id= Real id her...
Openlink Virtuoso Server Detection
Openlink Virtuoso Server, a hybrid database server available as a commercial as well as an open source product is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid33588; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate...
MojoJobs (mojoJobs.cgi mojo) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " MojoJobs Blind SQL Injection Exploit \n"; print " mojoJobs.cgi mojo \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected] \n"; prin...
MojoPersonals (mojoClassified.cgi mojo) Blind SQL Injection Exploit
Exploit for cgi platform in category web applications =================================================================== MojoPersonals mojoClassified.cgi mojo Blind SQL Injection Exploit =================================================================== !/usr/bin/perl use LWP::UserAgent; use...
MojoJobs (mojoJobs.cgi mojo) Blind SQL Injection Exploit
Exploit for cgi platform in category web applications ======================================================== MojoJobs mojoJobs.cgi mojo Blind SQL Injection Exploit ======================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"...
Joomla Component n-forms 1.01 Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================= Joomla Component n-forms 1.01 Blind SQL Injection Exploit ========================================================= !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1...
CVE-2008-2811
The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service application crash via an image whose display requires more pixels than nscoordMAX, relat...
mamboarticles-sql.txt
!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambo Component Articles Blind SQL Injection Exploit \n"; print " Author:Ded MustD!e www.antichat.ru \n"; print " \n"; print " Dork : inurl:option=articles artid \n"; print " Usage: perl exploit.pl ho...
PHPmotion 2.0 - 'update_profile.php' Arbitrary File Upload
= $limitsize 269. // Display file size error 270. // /////////////////////// 271. $show = 1; 272. $messagetype = $config"notificationsuccess";//the messsage displayed at the top coner 273. $errormessage = 'Your image is...
PHPmotion 2.0 - update_profile.php Arbitrary File Upload
PHPmotion 2.0 - updateprofile.php Arbitrary File Upload = $limitsize 269. // Display file size error 270. // /////////////////////// 271. $show = 1; 272. $messagetype = $config"notificationsuccess";//the messsage displayed at t...
Mambo Component Articles - artid Blind SQL Injection
Mambo Component Articles - artid Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambo Component Articles Blind SQL Injection Exploit \n"; print " Author:Ded MustD!e www.antichat.ru \n"; print " \n"; print " Dork :...
function sleep() in all versions of PHP
There is a quite big problem with sleep function in php, The maxexecutiontime set to 60sec. in safe mode can be easy passed by using sleep funcion, for example this script: ?php sleep9999999; echo 'Hello World'; ? Will print hello world after 9999999 seconds... so maxexecutiontime simply dosnt wo...
Adobe Flash Player integer overflow vulnerability
Overview Adobe Flash contains an integer overflow vulnerability. This vulnerability may allow an attacker to execute code on an affected system. Description The Adobe Flash Player is a player for the Flash media format and enables frame-based animations and multimedia to be viewed within a web...
Openfire: Denial of service
Background Openfire formerly Wildfire is a Java implementation of a complete Jabber server. Description Openfire's connection manager in the file ConnectionManagerImpl.java cannot handle clients that fail to read messages, and has no limit on their session's send buffer. Impact Remote authenticat...
phpbp-sql.txt
.-----------------------------------------------------------------------------. | vuln.: phpBP HACKBOX.pl query"SELECT FROM $confprefixbanners WHERE id=$GETid" or $db-errFILE, LINE; 13 14 if$db-numrows==0 15 16 redirect'index.php?module=error?error=bannerserror2'; 17 exit; 18 19 20...