CVE-2009-2618

CVE-2009-2618 is an SQL injection vulnerability in the MDPro Surveys Module (MDPro) 1.083.x. The issue allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php. OpenVAS entries corroborate MDPro SQLi vulnerability in this module and pro...

Soulseek 157 NS < 13e/156.x - Remote Peer Search Code Execution (PoC)

Soulseek 157 NS 13e & 156. Remote Peer Search Code Execution ============================================= - Release date: July 02, 2009 - Discovered by: Laurent Gaffié ; http://g-laurent.blogspot.com/ - Severity: critical ============================================= I. VULNERABILITY...

CVE-2009-1916

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter...

CVE-2009-1916

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter...

Soulseek 157 NS Remote Buffer Overflow Exploit (SEH)

Exploit for windows platform in category remote exploits ==================================================== Soulseek 157 NS Remote Buffer Overflow Exploit SEH ==================================================== !/usr/bin/python x Bug :Soulseek 157 NS Remote Seh Overwrite Exploit x Tested on :...

Soulseek 157 NS - Remote Buffer Overflow (SEH)

Soulseek 157 NS - Remote Buffer Overflow SEH !/usr/bin/python x Bug :Soulseek 157 NS Remote Seh Overwrite Exploit x Credits & poc from : http://www.milw0rm.com/exploits/8777 x Tested on : Windows Xp sp3, Soulseek 157 NS 12d x The exploit attacks the user :"test4321" import struct import sys, sock...

Soulseek 157 NS - Remote Buffer Overflow (SEH)

!/usr/bin/python x Bug :Soulseek 157 NS Remote Seh Overwrite Exploit x Credits & poc from : http://www.milw0rm.com/exploits/8777 x Tested on : Windows Xp sp3, Soulseek 157 NS 12d x The exploit attacks the user :"test4321" import struct import sys, socket from time import s =...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:177)

Guido Landi found A stack-based buffer overflow in xine-lib that could allow a remote attacker to cause a denial of service crash and potentially execute arbitrary code via a long NSF title CVE-2008-1878. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable...

djbdns records poisoning

Ivalid processing of compressed response allows to inject additional NS records...

Firefox layout crashes with evidence of memory corruption

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the layout engin...

Firefox layout crashes with evidence of memory corruption

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the layout engin...

Ad Management Java - Authentication Bypass

☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.adserversolutions.com Software: Ad...

Banner Exchange Java - Authentication Bypass

☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.adserversolutions.com Software: Banne...

Gallery MX 2.0.0 - Blind SQL Injection

Gallery MX 2.0.0 - Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:picspre.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net/ Software: Gallery MX author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...

activephotogal-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Photo Gallery v 6.2 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

activevotes-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: ActiveVotes v 2.2 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active Force Matrix v2 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Force Matrix v 2 author: я3d D3v!L Date: 28.11.2008 Home:...

Multiple vulnerabilities in Envolution

Здравствуйте 3APA3A! Сообщаю вам о найденных мною многочисленных уязвимостях в системе Envolution, в частности Insuficient Anti-automation и Cross-Site Scripting. Insuficient Anti-automation: Уязвимость в user.php в модуле NS-NewUser...

Vulnerabilities in PostNuke Phoenix

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в PostNuke Phoenix. Insufficient Anti-automation: Уязвимость в user.php в модуле NS-NewUser...

Vulnerabilities in PostNuke

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в PostNuke. Insufficient Anti-automation: Уязвимость в user.php в модуле NS-NewUser...