Sql injection

SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to 1 new/index.php, 2 news/index.php, and 3 top/topusers.php, which is not properly handled in database-pgsql.php...

CVE-2008-6189

SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to 1 new/index.php, 2 news/index.php, and 3 top/topusers.php, which is not properly handled in database-pgsql.php...

Design/Logic Flaw

Robin Rawson-Tetley Animal Shelter Manager ASM before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by 1 opening unspecified screens, related to the "double click selector bug"; or modifying a 2 animal, 3 owner, 4...

CVE-2008-6109

Robin Rawson-Tetley Animal Shelter Manager ASM before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by 1 opening unspecified screens, related to the "double click selector bug"; or modifying a 2 animal, 3 owner, 4...

CVE-2008-6109: Undefined Security Weakness

Robin Rawson-Tetley Animal Shelter Manager ASM before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by 1 opening unspecified screens, related to the "double click selector bug"; or modifying a 2 animal, 3 owner, 4...

Details Facebook the latest high-risk XSS security vulnerability-vulnerability warning-the black bar safety net

Recently, Facebook discovered high-riskXSSto security vulnerabilities, causing its users to suffer huge threat. This article will for these vulnerabilities are published in detail. Facebook in 2 0 0 8 year 1 2 on 1 5 December 2 0 0 9 years 1 months 4 days was traced to a series of high-riskXSSa...

Orca 2.0.2 Cross Site Scripting

--------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 + D0rk :Powered by Orca Interactive Forum...

Orca 2.0.2 - 'topic ' Cross-Site Scripting

--------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 + D0rk :Powered by Orca Interactive Forum...

Oracle 10g SYS.LT.REMOVEWORKSPACE SQL Injection Exploit

// /Oracle 10g SYS.LT.REMOVEWORKSPACE SQL Injection Exploit/ /grant DBA and create new OS user advanced extproc/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using advanced extproc method/ // /tested on oracle 10.1.0.5.0/ // // / Date of Public EXPLOIT: January 6, 2009 / /...

Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit

No description provided by source. // /Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit/ /grant DBA and create new OS user using scheduller/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using scheduler/ // /tested on oracle 10.1.0.5.0/ // // / Date of Public...

Oracle 10g SYS.LT.MERGEWORKSPACE SQL Injection Exploit

No description provided by source. // /Oracle 10g SYS.LT.MERGEWORKSPACE SQL Injection Exploit/ /grant DBA and create new OS user java/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using java procedures / // /tested on oracle 10.1.0.5.0/ // // / Date of Public EXPLOIT:...

Fedora Core 10 FEDORA-2009-0183 (thunderbird)

The remote host is missing an update to thunderbird announced via advisory FEDORA-2009-0183. OpenVAS Vulnerability Test $Id: fcore20090183.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0183 thunderbird Authors: Thomas Reinke Copyright: Copyright c...

Oracle 10g SYS.LT.MERGEWORKSPACE SQL Injection Exploit

// /Oracle 10g SYS.LT.MERGEWORKSPACE SQL Injection Exploit/ /grant DBA and create new OS user java/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using java procedures / // /tested on oracle 10.1.0.5.0/ // // / Date of Public EXPLOIT: January 6, 2009 / / Written by: Alexand...

Oracle 10g - SYS.LT.REMOVEWORKSPACE SQL Injection

Oracle 10g - SYS.LT.REMOVEWORKSPACE SQL Injection // /Oracle 10g SYS.LT.REMOVEWORKSPACE SQL Injection Exploit/ /grant DBA and create new OS user advanced extproc/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using advanced extproc method/ // /tested on oracle 10.1.0.5.0/ /...

Safari (Arguments) Array Integer Overflow PoC (New Heap Spray)

No description provided by source. BODY CODE id="sploit status"/CODE CODE id="heapspray status"/CODE SCRIPT...

Oracle 10g - SYS.LT.COMPRESSWORKSPACETREE SQL Injection (1)

Oracle 10g - SYS.LT.COMPRESSWORKSPACETREE SQL Injection 1 // /Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit/ /grant DBA and create new OS user using scheduller/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using scheduler/ // /tested on oracle 10.1.0.5.0/ /...

Oracle 10g - SYS.LT.MERGEWORKSPACE SQL Injection

// /Oracle 10g SYS.LT.MERGEWORKSPACE SQL Injection Exploit/ /grant DBA and create new OS user java/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using java procedures / // /tested on oracle 10.1.0.5.0/ // // / Date of Public EXPLOIT: January 6, 2009 / / Written by: Alexand...

Oracle 10g - 'SYS.LT.COMPRESSWORKSPACETREE' SQL Injection (1)

// /Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit/ /grant DBA and create new OS user using scheduller/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using scheduler/ // /tested on oracle 10.1.0.5.0/ // // / Date of Public EXPLOIT: January 6, 2009 / / Written...

Oracle 10g - SYS.LT.REMOVEWORKSPACE SQL Injection

// /Oracle 10g SYS.LT.REMOVEWORKSPACE SQL Injection Exploit/ /grant DBA and create new OS user advanced extproc/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using advanced extproc method/ // /tested on oracle 10.1.0.5.0/ // // / Date of Public EXPLOIT: January 6, 2009 / /...

Hex Workshop 5.1.4 (Color Mapping File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================= Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow PoC ================================================================= Hex Workshop 5.1.4 Color Mapping File Local Buffer...