THC-HYDRA v7.0 new version released for Download

THC-HYDRA v7.0 new version released for Download THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from...

Defence.pk Gets Hacked pr0tect0r A.K.A. mrNRG

Defence.pk Gets Hacked pr0tect0r A.K.A. mrNRG Defence.pk An independent defence organization committed to the research and analysis of Pakistan's security and strategic affairs Hacked by Indian Hacker pr0tect0r A.K.A. mrNRG. Defence.PK, one of the largest and most active Pakistani forum on...

CentOS Update for dbus-glib CESA-2010:0616 centos5 i386

Check for the Version of dbus-glib OpenVAS Vulnerability Test CentOS Update for dbus-glib CESA-2010:0616 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

cPanel 11.x (Fantastico) Local File Include / SM-b0x

Exploit for php platform in category web applications cPanel 11.x Fantastico Local File Include / SM-b0x ////\ //\ //\ //\ //\ //\ //\ //\ //\ :::/\ ::\:.\ \::\ \ \ \ :\ \ ::: \ \::: \ \::\ \:::/ /: / \:::/ ::/\ .\ \ //\:\ \ :: \ \:: /:/ /: / /::/ /\/\:: ::\ \::::/ :...

win32/PerfectXp-pc1/sp3 Tr Add Admin Shellcode 112 bytes

win32/PerfectXp-pc1/sp3 Tr Add Admin Shellcode 112 bytes. Shellcode exploit for win32 platform Title : win32/PerfectXp-pc1/sp3 Tr Add Admin Shellcode 112 bytes Author : KaHPeSeSe Screenshot : http://i53.tinypic.com/289yamq.jpg Desc. : usr: kpss , pass: 12345 , localgroup: Administrator Tested on ...

CVE-2011-0959: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Operations Manager CUOM before 8.6 allow remote attackers to inject arbitrary web script or HTML via 1 the extn parameter to iptm/advancedfind.do, 2 the deviceInstanceName parameter to iptm/ddv.do, the 3 cmd or 4 group parameter t...

Istgah CMS Cross Site Scripting / SQL Injection

=========================================================================== Istgah Cms Multiple Vulnerability =========================================================================== Name: Istgah Cms Multiple Vulnerability Vendor: http://www.iran-team.com/agahi1.html Price: $40 Date: 2011-04-1...

Race condition

Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System OTRS before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets...

CVE-2010-4765

The CVE affects Open Ticket Request System (OTRS) prior to 2.4.8. A race condition in Kernel::System::Main::FileWrite can allow remote authenticated users to corrupt the TicketCounter.log during ticket creation. Impact is data integrity loss and potential data corruption; exploitation requires au...

CVE-2010-4765

Removed by vendor...

CVE-2010-4765: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System OTRS before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets...

CVE-2011-1147: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based and heap-based buffer overflows in the 1 decodeopentype and 2 udptlrxpacket functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW...

CVE-2010-4748

Cross-site scripting XSS vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox. NOTE: some of these details are obtained from third party information...

CVE-2010-4748: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox. NOTE: some of these details are obtained from third party information...

Million network the Main Station due to filter poor lead to cross-site multi-use vulnerability-vulnerabilities and early warning-the black bar safety net

Brief description: The Main Station is due to submit content security checks generated by the vulnerability Detailed description: http://www.hichina.com/hasclient/whois1.asp?tongyong=yes&domain=xxx&code=0 0 0 0 Modify the three variables in any one place for' Since the Universal network of securi...

CVE-2011-0495: Out-of-bounds Write

Stack-based buffer overflow in the asturiencode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when running in pedantic mode allows remote authenticated users to execute arbitrary...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

CVE-2010-4215

Foswiki 1.1.0 and 1.1.1 are affected by CVE-2010-4215. The flaw resides in UI/Manage.pm, allowing remote authenticated users to escalate privileges by altering the GROUP and ALLOWTOPICCHANGE settings in Main.AdminGroup topic preferences. Evidence from multiple scanners/advisories confirms remote ...

CVE-2010-3697: Undefined Security Weakness

The waitforchildtodie function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requests, which allows remote attackers to cause a denial of service daemon crash by sending many requests...