U&M Software Event Lister 1.0 - Authentication Bypass

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

U&M Software Signup 1.1 - Authentication Bypass

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

U&M Software Signup 1.1 Auth Bypass Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

U&M Software JustBookIt 1.0 Auth Bypass Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

umjustbookit-bypass.txt

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

Sun M-class hardware denial of service

Sun/Fujitsu M4000-M9000 machines are very expensive multicpu sparc64 architecture machines, scaling all the way up to 64 processors, 256 cores, and 512 threads. They use the Fujitsu SPARC64 VI and more recently VII processors. The smallest models are large 6U 84kg, and the larger models are fridg...

Unfixed XSS vulnerability at www.u-m-p.org

Security researcher Zeryus, has submitted on 20/05/2008 a cross-site-scripting XSS vulnerability affecting www.u-m-p.org, which at the time of submission ranked 184964 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/05/2008. It is currently...

OpenBSD 4.2 - rtlabel_id2name() Local Null Pointer Dereference Denial of Service

OpenBSD 4.2 - rtlabelid2name Local Null Pointer Dereference Denial of Service / OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $...

CVE-2007-6664

SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter...

CVE-2007-6302

Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f aka 3.5.2F allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments, aka "ZDI-CAN-162."...

Fedora 7 : net-snmp-5.4-16.fc7 (2007-3019)

Fri Oct 19 2007 Jan Safranek 5.4-16 - License: field fixed to 'BSD and CMU' - fix hrSWInst 250237 - fix leak in UDP transport 247771 - fix remote DoS attack CVE-2007-5846 - Mon Oct 8 2007 Jan Safranek 5.4-15 - License: field changed to MIT - fix segfault on parsing smuxpeer without password...

CVE-2007-5308

SQL injection vulnerability in galerie.php in PHP Homepage M phpHPm 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

Sql injection

SQL injection vulnerability in galerie.php in PHP Homepage M phpHPm 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

CVE-2007-5308

SQL injection vulnerability in galerie.php in PHP Homepage M phpHPm 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

CVE-2007-5308

The CVE-2007-5308 entry concerns SQL injection in galerie.php of PHP Homepage M (phpHPm) 1.0 when magic_quotes_gpc is disabled. Remote attackers can modify the id parameter in a show action to execute arbitrary SQL commands (impacting confidentiality, integrity, and availability). The NVD entry l...

Unfixed XSS vulnerability at m-pe.tv

Security researcher kusomiso.com, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting m-pe.tv, which at the time of submission ranked 4873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed XSS vulnerability at m-pe.tv

Security researcher kusomiso.com, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting m-pe.tv, which at the time of submission ranked 4873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

PHP Homepage M 1.0 galerie.php Remote SQL Injection Exploit

No description provided by source. ?php if $argv1 == '' echo "--PHP Homepage M V.1.0 galerie.php Exploit----\n"; echo "only with magicquotesgpc OFF\n"; echo "by PHCN Mahjong\n"; echo "Usage : phpHPmv1.php http://127.0.0.1 / 1\n"; echo '----------------------------------------------'; else $host =...

phphome-sql.txt

',30; $user = explode'',$user; $user = strrev$user1; $user = substr$user,4,100; $user = strrev$user; echo "--EXPLOIT FINISHED--\n"; echo "userid : $userid\n"; echo "username: $user\n"; echo "password: $pw\n"; echo '--------------------'; ?...

PHP Homepage M 1.0 - galerie.php SQL Injection

PHP Homepage M 1.0 - galerie.php SQL Injection ',30; $user = explode'',$user; $user = strrev$user1; $user = substr$user,4,100; $user = strrev$user; echo "--EXPLOIT FINISHED--\n"; echo "userid : $userid\n"; echo "username: $user\n"; echo "password: $pw\n"; echo '--------------------'; ? milw0rm.co...