9609 matches found
PCI DSS In Full Effect in Nevada and NH
On January 1, 2010, two important state data security and privacy laws took effect in Nevada and New Hampshire that create new obligations for most companies that do business in Nevada and for health care providers and business associates in New Hampshire. Read the full article. Hunton & Williams...
SNadd Beta Cross Site Request Forgery
Discovered by : Septemb0x + Script Name : SNadd Beta + Download Script : http://www.phpexplorer.com/goster/1191 + Bug Description : New article can be added Exploit Codes : Baþlýk: Yazý: " name="ekle" + Greetz : BARCOD3 - Bhdr - Phreaker - Nizam-ul Mülk - Türkeþhan - SenqRonize... All Friends...
VirtualDJ Trial 6.0.6 NYE Exploit
/VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ include include include include include /----prototypes---/ int fileCreatechar; int bufferWrite; int cpychar,char; char path;...
VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit (0day)
No description provided by source. /VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ includestdio.h includewindows.h includestring.h includegetopt.h includeunistd.h /----prototypes---/ int...
VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit (0day)
Exploit for unknown platform in category dos / poc ============================================================ VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit 0day ============================================================ Title: VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit 0day...
VirtualDJ Trial 6.0.6 New Year Edition - .m3u Local Overflow
VirtualDJ Trial 6.0.6 New Year Edition - .m3u Local Overflow /VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ include include include include include /----prototypes---/ int fileCreatecha...
VirtualDJ Trial 6.0.6 'New Year Edition' - '.m3u' Local Overflow
/VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ include include include include include /----prototypes---/ int fileCreatechar; int bufferWrite; int cpychar,char; char path;...
DEBIAN-CVE-2009-4459
Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...
Wing FTP Server v3.2.4 CSRF Vulnerability
No description provided by source. Application: WingFTP Server 3.2.4 maybe earlier versions too Link: http://www.wftpserver.com/ Vulnerability: CSRF Author: Ams Contact: mail: ax330d at gmail dot com site: http://www.0x416d73.name/ 1. About software "Wing FTP server is not only a FTP server. It's...
vBulletin ads_saed 1.5 (bnnr.php) SQL Injection Vulnerability
No description provided by source. vBulletin adssaed 1.5 bnnr.php SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.comhttp://www.IQ-TY.com Mail : [email protected]:[email protected] script name : adssaed d0rk : inurl:"vb/bnnr.php" Example : Go to url :...
Cisco switch password-cracking-vulnerability warning-the black bar safety net
Use the console cable is connected toswitch, through HyperTerminal or Secure CRT connection to switch; 2. Press and hold down the switch on the front panel MODE button, plug in the switch power supply; 3. About 4 0 seconds after the release of the Mod 1. Use the console cable is connected...
Golden FTP Server 'DELE' Command Directory Traversal Vulnerability
This host is running Golden FTP Server and is prone to Directory Traversal vulnerability. OpenVAS Vulnerability Test $Id: gbgoldenftpserverdirtravvuln.nasl 6515 2017-07-04 11:54:15Z cfischer $ Golden FTP Server 'DELE' Command Directory Traversal Vulnerability Authors: Antu Sanadi Copyright:...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to hijack the authentication of administrators for requests that create new users, including a new administrator, via an adduser action in the editusers module in index.php...
CVE-2009-3965
SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...
Sql injection
SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...
CVE-2009-3965
CVE-2009-3965 describes an SQL injection in rating.php of the application “New 5 star Rating” version 1.0, learnable via the det parameter. The underlying flaw enables remote attackers to execute arbitrary SQL commands, with the NVD noting a base score of 7.5 (HIGH) and network-exposed, low-compl...
CVE-2009-3965
SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...
CVE-2009-3965: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...
kalimat new system v 1.0 (index.php) SQL Injection
Exploit for unknown platform in category web applications ================================================== kalimat new system v 1.0 index.php SQL Injection ================================================== ===================================== | kalimat v 1.0 admin by pass index.php...