Phone Applications - Remote SQL Injection Vulnerabilities

Document Title: =============== Phone Applications - Remote SQL Injection Vulnerabilities References: =========== Download: http://www.vulnerability-lab.com/upub/resources/videos/25.wmv View: http://www.youtube.com/watch?v=2uCHYjOmdk Release Date: ============= 2011-06-20 Vulnerability Laboratory...

Polymedia Ltd. SQL injection Vulnerability

Exploit for php platform in category web applications ===================================== + Exploit Title : Polymedia Ltd. SQL injection Vulnerability + Author : CriminalCoder + Category : WebApps + d0rk : "Website by Polymedia Ltd." "inurl:php?=" + Vendor : http://www.polymedia-bg.com/ + Twitt...

FTPRush - Stack Buffer Overflow Vulnerability

Document Title: =============== FTPRush - Stack Buffer Overflow Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/20.wmv View: http://www.youtube.com/watch?v=Fxr35RAcaUA Release Date: ============= 2011-06-16 Vulnerability Laboratory ID VL-ID:...

FTPRush - Stack Buffer Overflow Vulnerability

Document Title: =============== FTPRush - Stack Buffer Overflow Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/20.wmv View: http://www.youtube.com/watch?v=Fxr35RAcaUA Release Date: ============= 2011-06-16 Vulnerability Laboratory ID VL-ID:...

Concept Medya Admin Auth ByPass

Exploit for php platform in category web applications Exploit Title: Concept Medya Admin Auth ByPass Date: 13 June 2011 Author: CriminalCoder beyz4de.wordpress.com Category: webapps Google dork: inurl:loginkontrol.asp Tested on: Windows Xp SP3 Home: spyroot.in & rootarea.com + Default admin panel...

IL и XSS уязвимости во многих темах для WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information Leakage и Cross-Site Scripting уязвимостях во многих темах для WordPress. В разных шаблонах имеется test.php - скрипт с phpinfo - что приводит к Information Leakage утечка FPD и другой важной информации о сервере и XSS в PHP 4.4.1,...

AR Infotech SQL Injection Vulnerability

Exploit for php platform in category web applications ---- /\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\- -/ --------------------------------|-------------------------------------------------------| -/ + Exploit Title : AR Infotech SQL injection Vulnerability | -/ + Date :...

WordPress WooThemes Live Wire theme - Cross-Site Scripting

WordPress WooThemes Live Wire theme is prone to a cross-site scripting vulnerability. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication credentials. Other attacks are also...

Microsoft Windows Live Messenger 'dwmapi.dll' DLL装载任意代码执行漏洞

Bugtraq ID: 48055 Microsoft Windows Live Messenger是一款微软提供的流行的即时通信工具。 Microsoft Windows Live Messenger 'dwmapi.dll'以不安全方式装载DLL库，攻击者可以诱使用户在远程WebDAV或SMB共享上打开.plsk文件，可以登录用户安全上下文装载任意库 Microsoft Windows Live Messenger 14.0.8089 Microsoft Windows Live Messenger 14.0.8117.416 Microsoft Windows Live...

Microsoft Windows Live Messenger 14 - dwmapi.dll DLL Loading Arbitrary Code Execution

Microsoft Windows Live Messenger 14 - dwmapi.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/48055/info Microsoft Windows Live Messenger is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a...

MSN Live Messenger 14.0 Plus! DLL Hijack

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Microsoft Windows Live Messenger 14 - 'dwmapi.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/48055/info Microsoft Windows Live Messenger is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share...

Fedora 15 "Lovelock" released - Download Now !

Fedora 15 "Lovelock" released - Download Now ! This is the latest version of the Fedora Linux operating system's Desktop Edition. It's everything you need to try out Fedora — you don't have to erase anything on your current system to try it out, and it won't put your files at risk. Take Fedora fo...

Mandriva 2011 Beta 2 is Available for Testing !

Mandriva 2011 Beta 2 is Available for Testing ! Mandriva 2011 beta 2 was supposed to be released a week ago, but the release schedule was delayed by last minute defects discovered by the development and testing teams. In order to get hold of beta 2, you can visit your favorite Mandriva mirror and...

Solaris 10 (x86) : 121429-15 (deprecated)

SunOS 5.10x86: Live Upgrade Zones Support Patch. Date this patch was last updated by Sun : Apr/19/11 This plugin has been deprecated and either replaced with individual 121429 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Уязвимости в темах Live Wire 2.0 и Live Wire Style для WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Full path disclosure, Abuse of Functionality и Denial of Service уязвимостях в темах Live Wire 2.0 и Live Wire Style для WordPress. Это ещё две темы, которые вместе с Live Wire Edition входят в серию Live Wire. Это коммерческ...

Уязвимости в TimThumb и во многих темах для WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Full path disclosure, Abuse of Functionality и Denial of Service уязвимостях в TimThumb и во многих темах для WordPress. Уязвимыми являются TimThumb и все веб приложения в частности темы для WordPress, которые его используют...

Live Wire 2.0 For WordPress Cross Site Scripting / Denial Of Service

Hello list! I want to warn you about Cross-Site Scripting, Full path disclosure, Abuse of Functionality and Denial of Service vulnerabilities in Live Wire 2.0 and Live Wire Style themes for WordPress. These are another two themes which are a part of Live Wire series together with Live Wire Editio...

WordPress Theme Live Wire 2.3.1 - Multiple Vulnerabilities

WordPress Theme Live Wire 2.3.1 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/47299/info Live Wire for Wordpress is prone to multiple security vulnerabilities. These vulnerabilities include multiple denial-of-service vulnerabilities, a cross-site scripting vulnerability, an...

Fedora Update for maniadrive FEDORA-2011-3636

Check for the Version of maniadrive OpenVAS Vulnerability Test Fedora Update for maniadrive FEDORA-2011-3636 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...