Lucene search
K

624 matches found

0day.today
0day.today
added 2012/11/23 12:0 a.m.16 views

Beat Websites Blind Sql Injection Vulnerability

Exploit for php platform in category web applications .:. Author : Metropolis .:. Home : www.metropolis.fr.cr .:. Script : Beat Websites .:. Version : 1.0 .:. Download Script: http://beatwebsites.com/ .:. .:. Information Script: .:. You to Can Make Money Running Your Own Beat Website and Keep 100...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2012/11/16 12:0 a.m.14 views

Friends In War Make Or Break 1.3 SQL Injection

Exploit Title: friendsinwar Make or break V1.3 SQL Injection authbypass Vulnerability Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage: http://www.friendsinwar.com Software Link: http://www.friendsinwar.com/scriptdemo/makeorbreak/admin/login.php Tested on: Windows 7 Blog: d3b4g.me...

0.7AI score
Exploits0
Exploit DB
Exploit DB
added 2012/11/15 12:0 a.m.36 views

Friends in War Make or Break 1.3 - Authentication Bypass

Exploit Title: friendsinwar Make or break V1.3 SQL Injection authbypass Vulnerability Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage: http://www.friendsinwar.com Software Link: http://www.friendsinwar.com/scriptdemo/makeorbreak/admin/login.php Tested on: Windows 7 Blog: d3b4g.me...

7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2012/11/08 12:0 a.m.22 views

Fedora 16 : rt3-3.8.15-1.fc16 (2012-17218)

---------------------------------------------------------------------- ---------- ChangeLog : - Sun Oct 28 2012 Ralf Corsepius - 3.8.15-1 - Upstream update RH BZ 870407, CVE-2012-4730, CVE-2012-4732, CVE-2012-4734, CVE-2012-4735, CVE-2012-4884. - Sat Oct 6 2012 Ralf Corsepius - 3.8.14-1 - Upstrea...

6.8CVSS5.3AI score0.00395EPSS
Exploits0References10
Prion
Prion
added 2012/08/07 9:55 p.m.13 views

Race condition

The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors...

4.4CVSS7.5AI score0.00185EPSS
Exploits1References10Affected Software1
Exploit DB
Exploit DB
added 2012/08/06 12:0 a.m.15 views

Worksforweb iAuto - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54812/info Worksforweb iAuto is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the contex...

7.4AI score
Exploits0
0day.today
0day.today
added 2012/08/01 12:0 a.m.32 views

iAuto Mobile Application 2012 Multiple Vulnerabilities

Exploit for php platform in category web applications iAuto Mobile Application 2012 - Multiple Web Vulnerabilities Introduction: ============= With Internet on mobile devices booming, having a desktop-oriented version is just not enough anymore. Empower your visitors with content designed for...

7.1AI score
Exploits0
Nmap
Nmap
added 2012/07/27 7:38 p.m.171 views

http-exif-spider NSE Script

Spiders a site's images looking for interesting exif data embedded in .jpg files. Displays the make and model of the camera, the date the photo was taken, and the embedded geotag information. Script Arguments http-exif-spider.url the url to start spidering. This is a URL relative to the scanned...

10CVSS0.4AI score0.94176EPSS
Exploits33
OSV
OSV
added 2012/06/27 9:55 p.m.2 views

DEBIAN-CVE-2011-4957

The makeclickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service crash via a comment with a crafted URL that triggers many recursive calls...

5CVSS6.7AI score0.02802EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2012/04/26 9:17 p.m.6 views

Permanent Reverse TCP Backdoor for IPhone and IPad

Security Expert from Coresec explains the use of a Permanent Reverse TCP Backdoor "sbd-1.36" for IPhone and IPad developed by Michel Blomgren. sbd is a Netcat-clone, designed to be portable and offer strong encryption. It runs on Unix-like operating systems and on Microsoft Win32. sbd features...

7AI score
Exploits0
Packet Storm
Packet Storm
added 2011/08/31 12:0 a.m.31 views

Make Art CMS SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

0.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2011/05/31 12:0 a.m.22 views

Fedora 15 : viewvc-1.1.11-1.fc15 (2011-7185)

security fix: remove user-reachable override of cvsdb row limit - fix broken standalone.py -c and -d options handling - add --help option to standalone.py - fix stack trace when asked to checkout a directory issue 478 - improve memory usage and speed of revision log markup issue 477 - fix broken...

5CVSS5.5AI score0.00503EPSS
Exploits0References3
Oracle linux
Oracle linux
added 2011/05/28 12:0 a.m.57 views

python security, bug fix, and enhancement update

python: 2.6.6-20 Resolves: CVE-2010-3493 2.6.6-19 Resolves: CVE-2011-1015 2.6.6-18 Resolves: CVE-2011-1521 2.6.6-17 - recompile against systemtap 1.4 Related: rhbz569695 2.6.6-16 - recompile against systemtap 1.4 Related: rhbz569695 2.6.6-15 - fix race condition that sometimes breaks the build wi...

6.9CVSS7.3AI score0.09965EPSS
Exploits5
NVD
NVD
added 2011/05/23 10:55 p.m.13 views

CVE-2011-1920

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/depend temporary file, related to 1 bsd.lib.mk and 2 bsd.prog.mk...

3.3CVSS6.3AI score0.00054EPSS
Exploits1References9
Prion
Prion
added 2011/05/23 10:55 p.m.14 views

Design/Logic Flaw

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/depend temporary file, related to 1 bsd.lib.mk and 2 bsd.prog.mk...

3.3CVSS6.7AI score0.00054EPSS
Exploits1References9Affected Software2
Cvelist
Cvelist
added 2011/05/23 10:0 p.m.26 views

CVE-2011-1920

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/depend temporary file, related to 1 bsd.lib.mk and 2 bsd.prog.mk...

6.2AI score0.00054EPSS
Exploits1References9
OSV
OSV
added 2010/11/09 9:0 p.m.2 views

DEBIAN-CVE-2010-3867

Multiple directory traversal vulnerabilities in the modsitemisc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a 1 SITE MKDIR, 2 SITE RMDIR, 3 SITE SYMLINK...

7.1CVSS6.6AI score0.00588EPSS
Exploits3References1
ATTACKERKB
ATTACKERKB
added 2010/05/20 5:30 p.m.3 views

CVE-2010-1986

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption and application crash via JavaScript code that creates multiple arrays containing elements with long string values, and then appends long strings to the content of a P element, related ...

10CVSS5.7AI score0.07108EPSS
Exploits4References7
OSV
OSV
added 2010/02/25 12:30 a.m.1 views

DEBIAN-CVE-2010-0412

stap-server in SystemTap 1.1 does not properly restrict the value of the -B aka BUILD option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273...

7.5CVSS6.7AI score0.00488EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2010/02/25 12:30 a.m.12 views

CVE-2010-0412

stap-server in SystemTap 1.1 does not properly restrict the value of the -B aka BUILD option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273...

7.5CVSS5.9AI score0.00488EPSS
Exploits0References1
Rows per page
Query Builder