8281 matches found
Moderate: Red Hat Security Advisory: Updated kernel packages for Red Hat Enterprise Linux 4.7
Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux 4. This is the seventh regular update. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel...
CPUJul2008 Advisory
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only th...
Unfixed XSS vulnerability at www.newyorkjobs.com
Security researcher holisticinfosec, has submitted on 13/07/2008 a cross-site-scripting XSS vulnerability affecting www.newyorkjobs.com, which at the time of submission ranked 146742 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/11/2008. I...
CVE-2008-2997
Cross-site scripting XSS vulnerability in index.php in Gravity Board X GBX 2.0 Beta allows remote attackers to inject arbitrary web script or HTML via the subject parameter in a postnewsubmit aka create new thread action...
Ability Server <= 2.34 Remote APPE Buffer Overflow Exploit
No description provided by source. / TESTED ON WINXP SP0 RUS c by Dark Eagle from unl0ck research team http://unl0ck.void.ru HAPPY NEW YEAR! Greetz go out to: nekd0, antiq, fl0wsec setnf, nuTshell, nosystem CoKi, reflux... / include string.h include stdio.h include winsock2.h include windows.h //...
CVE-2008-2488
admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts...
CVE-2008-2488
admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts...
Authentication flaw
MeltingIce File System 1.0 allows remote attackers to bypass application authentication, create new user accounts, and exceed application quotas via a direct request to admin/adduser.php...
CVE-2008-2348
The CVE-2008-2348 entry describes a vulnerability in MeltingIce File System 1.0 where remote attackers can bypass authentication and perform administrative actions (create new user accounts and exceed application quotas) via a direct request to admin/adduser.php. The associated data indicate netw...
CVE-2008-2104
The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check...
Hackers social engineering attacks new technologies:opportunities and-attack-vulnerability warning-the black bar safety net
Opportunities type of attack refers to a specific time, place, event, environmental conditions, take special tools for the invasion and destruction of the means, it belongs to social engineering attacks, and in 2 0 0 8 years will frequently appear. Trendy attacks As social engineering attacks,...
Sql injection
SQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the new parameter in a new action...
CVE-2008-1913
SQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the new parameter in a new action...
BosNews v4.0 Remote add user admin
-------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...
Blogator-script 0.95 Change User Password Vulnerbility
...:::::Blogator-script 0.95 Change User Password Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best frie...
destar 0.2.2-5 Arbitrary Add New User Exploit
No description provided by source. !/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py...
exploit_code.py.txt
!/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py required: urllib,urllib2 sys and re impor...
Destar 0.2.2-5 - Arbitrary Add New User
Destar 0.2.2-5 - Arbitrary Add New User !/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py...
destar 0.2.2-5 Arbitrary Add New User Exploit
Exploit for unknown platform in category web applications ============================================= destar 0.2.2-5 Arbitrary Add New User Exploit ============================================= !/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a...
Destar 0.2.2-5 - Arbitrary Add New User
!/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py required: urllib,urllib2 sys and re impor...