Authentication flaw

inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arbitrary user account via a modified lilil parameter, in conjunction with the ubild and pa parameters...

CVE-2007-6528

Directory traversal vulnerability in tiki-listmovies.php in TikiWiki before 1.9.9 allows remote attackers to read arbitrary files via a .. dot dot and modified filename in the movie parameter...

Design/Logic Flaw

Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle MITM attack between the client and the server, using a modified distribution definition file with the "allow-external-scripts" option...

CVE-2007-5863

Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle MITM attack between the client and the server, using a modified distribution definition file with the "allow-external-scripts" option...

CVE-2007-5988

blocks/shoutboxblock.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbitrary users via a modified nick field...

Design/Logic Flaw

blocks/shoutboxblock.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbitrary users via a modified nick field...

Trojan free kill technology the large inventory and antivirus settings-vulnerability and early warning-the black bar safety net

In the antivirus software growing strong campaign, with a Only is not killing the Trojans, has become the the majority of hacker enthusiasts desire. But is not killing the Trojans, released that day, it means that it has 命不久已 it. Teach a man to fish than teach a man to fish, so we launched thisfr...

CVE-2007-5067

Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since header to 1 xigui32.exe or 2 xitami.exe...

Buffer overflow

Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since header to 1 xigui32.exe or 2 xitami.exe...

CVE-2007-5067

Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since header to 1 xigui32.exe or 2 xitami.exe...

Xitami Web Server 2.5 - If-Modified-Since Remote Buffer Overflow

Xitami Web Server 2.5 - If-Modified-Since Remote Buffer Overflow !/usr/bin/python Xitami Web Server 2.5 If-Modified-Since 0day Remote Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Xitami 2.5c2 / XP SP2 Polish Shellcode: Windows Execute Command calc Details:.. Module...

Xitami Web Server 2.5 (If-Modified-Since) Remote BoF Exploit (0day)

Exploit for unknown platform in category remote exploits =================================================================== Xitami Web Server 2.5 If-Modified-Since Remote BoF Exploit 0day =================================================================== !/usr/bin/python Xitami Web Server 2.5...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified addname and addradminsuper parameters...

CVE-2007-4529

The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the 1 AdminAddServer, 2...

CVE-2007-4529

The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the 1 AdminAddServer, 2...

Buffer overflow

Unspecified vulnerability, possibly a buffer overflow, in Justsystem Ichitaro 2007 and earlier allows remote attackers to execute arbitrary code via a modified document, as actively exploited in August 2007 by malware such as Tarodrop.D Tarodrop.Q, a different vulnerability than CVE-2006-4326,...

cisspcom-sql.txt

Long time ago someone posted here SQL injection on CISSP page. No changes. I post slightly "modified" version to bug them again http://career.cissp.com/Bios/CompanyBio.asp?EmployerID=10328199%20union% 20select%201,2,3,select%20top%201%20name%20from%20sysobjects%20where%...

Design/Logic Flaw

user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPa...

CVE-2007-4143

user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPa...

CVE-2007-4143

user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPa...