2170 matches found
WordPress Tweet Old Post plugin <= 3.2.5 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress Tweet Old Post plugin Software Link: http://downloads.wordpress.org/plugin/tweet-old-post.zip Version: 3.2.5 tested --------------- PoC POST data --------------- URL:...
CVE-2011-2978
Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 does not prevent changes to the confirmation e-mail address aka oldemail field for e-mail change notifications, which makes it easier for remote...
PT-2011-4217
Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.16rc1 through 2.22.7 Bugzilla versions 3.0.x through 3.3.x Bugzilla versions 3.4.x before 3.4.12 Bugzilla version 3.5.x Bugzilla versions 3.6.x before 3.6.6 Bugzilla version 3.7.x Bugzilla versions 4.0.x before 4.0.2 Bugzil...
JDK: unspecified vulnerabilities fixed in 6u26 (Sound)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound, a different...
PT-2011-1008 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.0-rc4 Description: The bluetooth subsystem in the Linux kernel does not properly initialize certain data structures, allowing local users to obtain potentially sensitive information from kernel memory via a...
Adobe Reader 5.1 - XFDF Buffer Overflow (SEH)
Exploit Title: Adobe Reader 5.1 XFDF Buffer Overflow Vulnerability SEH Google Dork: N/A or filtype ".xfdf" Date: 04/01/2011 Author: [email protected] / http://extraexploit.blogspot.com Software Link: http://www.oldversion.com/download/acrobat51.exe Version: Acrobat formerly Adobe Reader 5.1...
UK Authorities Charge Suspected LulzSec Member for DDoS Attacks
A 19 year-old UK man was charged on Wednesday for the role he played in attacks on the UK’s Serious Organized Crime Agency SOCA as well as UK’s British Phonographic Industry BPI and International Federation of the Phonographic Industry IFPI, according to a statement released by the Metropolitan...
kernel: ipv4: netfilter: arp_tables: fix infoleak to userspace
net/ipv4/netfilter/arptables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by...
Anti-injection code is not anti-injection-vulnerability warning-the black bar safety net
Here we use the old y system to illustrate the problem. The vulnerability appears in the js. the asp file. If CheckStrRequest"ClassNo" "" then ClassNo = splitCheckStrRequest"ClassNo","|" 'Here is to get the variable using checkstr filter, but the feeling didn't play a role. Then divided into an...
14 Year Old Hacker Hired by Microsoft after doing phishing via Call of Duty Server !
14 Year Old Hacker Hired by Microsoft after doing phishing via Call of Duty Server ! These are the kinds of things dreams are made of, a 14 year old hacker on Call of Duty was just recruited by Microsoft. You heard me right, Microsoft. This is exactly what Sony should have done with George Hotz –...
InterPhoto Gallery 2.5.0 File Disclosure
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
WordPress OPS Old Post Spinner Plugin 'ops_file' Parameter Directory Traversal Vulnerability
WordPress OPS Old Post Spinner Plugin is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
DerbyCon Security Conference 2011
We are happy to announce that Offensive Security will be sponsoring DerbyCon. DerbyCon is a new hacker conference located in Louisville Kentucky. Our goal is to bring back an old style, community driven hacker con chocked full of amazing talks, live events and all around fun. The idea for DerbyCo...
openldap: DoS when submitting special MODRDN request
modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service daemon crash via a relative Distinguished Name DN modification request aka MODRDN operation that contains an empty value for the OldDN field...
Wordpress OPS Old Post Spinner 2.2.1 Plugin LFI Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................WordPress OPS Old Post Spinner 2.2 Vulnerability...........Local File Inclusion Download................http://1manfactory.com/ops Release...
WordPress OPS Old Post Spinner Plugin 2.2.1 - Local File Inclusion
This vulnerability can be exploited to include arbitrary files. Solution Update the plugin...
WordPress OPS Old Post Spinner 2.2 Local File Inclusion
------------------------------------------------------------------------ Software................WordPress OPS Old Post Spinner 2.2 Vulnerability...........Local File Inclusion Download................http://1manfactory.com/ops Release Date............2/25/2011 Tested On...............Windows 7 +...
WordPress Plugin OPS Old Post Spinner 2.2.1 - Local File Inclusion
WordPress Plugin OPS Old Post Spinner 2.2.1 - Local File Inclusion Source: http://packetstormsecurity.org/files/view/98751/WordPressOPSOldPostSpinner2.2-lfi.txt ------------------------------------------------------------------------ Software................WordPress OPS Old Post Spinner 2.2...
kernel: ipc/shm.c: reading uninitialized stack memory
The copyshmidtouser function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface."...
kernel: ipc/shm.c: reading uninitialized stack memory
The copyshmidtouser function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface."...