8377 matches found
maxcms2.0 creat new admin exploit
?php printr' +---------------------------------------------------------------------------+ maxcms2.0 creat new admin exploit by Securitylab.ir +---------------------------------------------------------------------------+ '; if $argc 3 printr'...
Dacio's Image Gallery 1.6 - Directory Traversal / Authentication Bypass / Arbitrary File Upload
=-=-Local Directory Traversal/bypass/shell upload/-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script::DacioimgGal-v1.6 ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download...
CVE-2008-6772
login/registerform.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user...
10 Dos and Don'ts for security job interviews
From CIO Joan Goodchild The pickings are slim in the job market and the time line of interviewing and then hiring new people is slow. But there are positions available in the security field, according to three veteran security recruiters that we spoke with recently. If you get a call that you’ve...
Cross site scripting
Cross-site scripting XSS vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field...
Fedora 10 : amarok-2.0.1.1-1.fc10 (2009-0550)
An update to the latest release, includes new features such as queuing, playlist search and filtering as well as 'stop after current track'. And, long awaited and finally available: sorting the collection by composer. Also includes a security fix concerning the parsing of malformed Audible digita...
MDVA-2008:135-1 : draksnapshot
This update fixes several issues in draksnapshot: The draksnapshot applet received the following fixes: - on desktop startup, it will wait for 30s before checking for available disc so that notification is positioned at the right place, on the applet icon - it prevents crashing if DBus is not...
Unfixed XSS vulnerability at www.newyorkfed.org
Security researcher Pragmatk, has submitted on 23/04/2009 a cross-site-scripting XSS vulnerability affecting www.newyorkfed.org, which at the time of submission ranked 89553 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...
Joomla rsmonials Cross Site Scripting
/ RSMonials XSS Exploit http://www.rswebsols.com/downloads/category/14-download-rsmonials-all?download=23%3Adownload-rsmonials-component Google Dork: allinurl:option=comrsmonials Anything entered into the form gets rendered as HTML, so you can add tags as long as they don't include quotes magic...
cpuapr2009.html
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only th...
MS09-016: Description of the ISA Server 2006 hotfix package: April 14, 2009
Resolves vulnerabilities that may cause ISA Server 2006 stop accepting new requests.INTRODUCTIONMicrosoft has released security bulletin MS09-016. To view the complete security bulletin, visit one of the following Microsoft Web sites:Home...
Mandriva Update for libgnomeui2 MDVA-2008:100 (libgnomeui2)
Check for the Version of libgnomeui2 OpenVAS Vulnerability Test Mandriva Update for libgnomeui2 MDVA-2008:100 libgnomeui2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for clamav MDKSA-2007:098 (clamav)
Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDKSA-2007:098 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Mandriva Update for timezone MDKA-2007:018-1 (timezone)
Check for the Version of timezone OpenVAS Vulnerability Test Mandriva Update for timezone MDKA-2007:018-1 timezone Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for clamav MDKSA-2007:098 (clamav)
Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDKSA-2007:098 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Mandriva Update for libgnomeui2 MDVA-2008:100 (libgnomeui2)
Check for the Version of libgnomeui2 OpenVAS Vulnerability Test Mandriva Update for libgnomeui2 MDVA-2008:100 libgnomeui2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for draksnapshot MDVA-2008:135-1 (draksnapshot)
Check for the Version of draksnapshot OpenVAS Vulnerability Test Mandriva Update for draksnapshot MDVA-2008:135-1 draksnapshot Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...
CVE-2008-6631
Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...
Adam Shostack on the Science of Security and Value of Thinking Differently
Dennis Fisher talks to Adam Shostack of Microsoft, about the evolution of thinking around “The New School of Information Security,” his new group blog and what surprised him most when he went to work at Microsoft. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of...