CVE-2008-2276: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in manageusercreate.php in Mantis 1.1.1 allows remote attackers to create new administrative users via a crafted link...

CVE-2008-2104

The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check...

Hackers social engineering attacks new technologies:opportunities and-attack-vulnerability warning-the black bar safety net

Opportunities type of attack refers to a specific time, place, event, environmental conditions, take special tools for the invasion and destruction of the means, it belongs to social engineering attacks, and in 2 0 0 8 years will frequently appear. Trendy attacks As social engineering attacks,...

CVE-2008-1923: Undefined Security Weakness

The IAX2 channel driver chaniax2 in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service traffic...

Sql injection

SQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the new parameter in a new action...

CVE-2008-1913

SQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the new parameter in a new action...

BosNews v4.0 Remote add user admin

-------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

Blogator-script 0.95 Change User Password Vulnerbility

...:::::Blogator-script 0.95 Change User Password Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best frie...

destar 0.2.2-5 Arbitrary Add New User Exploit

No description provided by source. !/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py...

exploit_code.py.txt

!/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py required: urllib,urllib2 sys and re impor...

destar 0.2.2-5 Arbitrary Add New User Exploit

Exploit for unknown platform in category web applications ============================================= destar 0.2.2-5 Arbitrary Add New User Exploit ============================================= !/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a...

Destar 0.2.2-5 - Arbitrary Add New User

Destar 0.2.2-5 - Arbitrary Add New User !/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py...

Destar 0.2.2-5 - Arbitrary Add New User

!/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py required: urllib,urllib2 sys and re impor...

Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line

a. Host to guest shared folder HGFS traversal vulnerabilityOn Windows hosts, if you have configured a VMware host to guest shared folder HGFS, it is possible for a program running in the guest to gain access to the host's file system and create or modify executable files in sensitive locations...

Gallarific - search.php?query Cross-Site Scripting

Gallarific - search.php?query Cross-Site Scripting source: https://www.securityfocus.com/bid/28163/info Gallarific is prone to a cross-site scripting vulnerability and multiple authentication-bypass vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the...

Code injection

ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content...

CVE-2008-0188

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its requester. Further investigation showed that it was not a new security issue. Notes: none...

CVE-2008-0189

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its requester. Further investigation showed that it was not a new security issue. Notes: none...

CVE-2008-0246

admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass Set Password action...

DEBIAN-CVE-2008-0192

Multiple cross-site scripting XSS vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the popuptitle parameter to 1 wp-admin/post.php or 2 wp-admin/page-new.php...