393 matches found
CVE-2009-2336
CVE-2009-2336 affects WordPress and WordPress MU prior to 2.8.1, where the password reset/request behavior differs based on account existence, enabling remote username enumeration. The issue has a CVSS 2.0 base score of 5.0 (Network, Low attack complexity, No authentication). The vendor reportedl...
CVE-2009-2335
CVE-2009-2335 affects WordPress and WordPress MU prior to 2.8.1, where a failed login behaves differently depending on whether the user account exists, enabling remote enumeration of valid usernames. The vendor reportedly disputes the significance of the issue, calling the behavior for user conve...
CVE-2009-2336
The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue,...
CVE-2009-2432
WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message...
CVE-2009-2334
wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as...
CVE-2009-2334
wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as...
CVE-2009-2432
CVE-2009-2432 affects WordPress and WordPress MU prior to 2.8.1. The flaw allows remote attackers to disclose the installation path via a direct request to wp-settings.php, resulting in exposure of server filesystem information. This is an information-disclosure vulnerability with no documented e...
WordPress Core MU Plugins - admin.php Privileges Unchecked Multiple Information Disclosures
WordPress Core MU Plugins - admin.php Privileges Unchecked Multiple Information Disclosures -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ WordPress Privileges Unchecked in admin.php and Multiple Information...
Bopup Communications Server 3.2.26.5460 Remote SYSTEM Exploit
No description provided by source. / bopup-down.c Copyright c 2008 by [email protected] Bopup Communications Server remote SYSTEM exploit by mu-b - Sat Feb 08 2008 - Tested on: Bopup Communications Server 3.2.26.5460 Mar 18 2009 .text:00407A17 lea eax, ebp+pkt0x19 .text:00407A1D push eax...
Apple MACOS X xnu <= 1228.9.59 Local Kernel Root Exploit
No description provided by source. / xnu-workq-v2-64.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.9.59 local kernel root exploit by mu-b - Sat 16 Feb 2008 - Tested on: Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.2 xnu-1228.3.131/RELEASEI386...
Apple MACOS X xnu <= 1228.9.59 Local Kernel Root Exploit
Exploit for macOS platform in category local exploits ======================================================== Apple MACOS X xnu Apple MACOS X xnu include include include include include include / profil defines / define PROFILITEMSIZE 64 define PROFILBLKSIZE 65536 define PROFILBLKNUM 84 / workq...
ipsec-tools racoon frag-isakmp Denial of Service PoC
No description provided by source. / racoon-isakmp-dos.c Copyright c 2009 by [email protected] ipsec-tools racoon frag-isakmp DoS POC by mu-b - Thu Apr 02 2009 - Tested on: ipsec-tools-0.7.1 - Private Source Code -DO NOT DISTRIBUTE - http://www.digit-labs.org/ -- Digit-Labs 2009!@$! / include...
Solaris 10 / OpenSolaris - 'fasttrap' Local Kernel Denial of Service (PoC)
/ solaris-fasttrap-dos.c Copyright c 2008 by Solaris = 10/Opensolaris local kernel DoS POC by mu-b - Wed 19 Nov 2008 - Tested on: Sun Solaris 10 SPARC Sun OpenSolaris include include include include include include define DTRACEFASTTRAP "/devices/pseudo/fasttrap@0:fasttrap" void hammer void addr...
Fedora 10 : wordpress-mu-2.6.5-1.fc10 (2008-11104)
Mon Dec 1 2008 Bret McMillan - 2.6.5-1 - Update to 2.6.5 - http://wordpress.org/development/2008/11/wordpress-265 / - http://ocaoimh.ie/2008/11/25/wordpress-mu-265/ - Fixes 1 XSS security issue, 3 bugs Note that Tenable Network Security has extracted the preceding description block directly from...
Fedora 10 : wordpress-mu-2.6.5-2.fc10 (2009-3474)
Tue Apr 7 2009 Bret McMillan - 2.6.5-2 - Patch for CVE-2009-1030 - Mon Dec 1 2008 Bret McMillan - 2.6.5-1 - Update to 2.6.5 - http://wordpress.org/development/2008/11/wordpress-265 / - http://ocaoimh.ie/2008/11/25/wordpress-mu-265/ - Fixes 1 XSS security issue, 3 bugs Note that Tenable Network...
Fedora Core 10 FEDORA-2009-3474 (wordpress-mu)
The remote host is missing an update to wordpress-mu announced via advisory FEDORA-2009-3474. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
Fedora Core 10 FEDORA-2009-3474 (wordpress-mu)
The remote host is missing an update to wordpress-mu announced via advisory FEDORA-2009-3474. OpenVAS Vulnerability Test $Id: fcore20093474.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3474 wordpress-mu Authors: Thomas Reinke Copyright: Copyright...
[SECURITY] Fedora 10 Update: wordpress-mu-2.6.5-2.fc10
WordPress-MU is a derivative of the WordPress blogging codebase, to allow one instance to serve multiple users...
Mac OS X xnu <= 1228.3.13 (profil) Kernel Memory Leak/DoS PoC
No description provided by source. / xnu-profil-leak.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.3.13 local kernel memory leak/DoS POC by mu-b - Sat 16 Feb 2008 - Tested on: Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.2 xnu-1228.3.131/RELEASEI386 -...
Mac OS X xnu <=1228.x (vfssysctl) Local Kernel DoS PoC
No description provided by source. / xnu-vfssysctl-dos.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.x local kernel DoS POC by mu-b - Wed 19 Nov 2008 - Tested on: Apple MACOS X 10.5.5 xnu-1228.8.201/RELEASEI386 - Private Source Code -DO NOT DISTRIBUTE -...