2920 matches found
ZippyYum 3.4 Insecure Data Storage
Title: CVE-2013-6986 Insecure Data Storage in Subway Ordering for California ZippyYum 3.4 iOS mobile application Published: DATE Reported to Vendor: May 2013 CVE Reference: CVE-2013-6986 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6986 CVSS v2 Base Score: 4.9 CVSS v2 Vector...
Oracle Linux 5 : Important:kernel (ELSA-2007-0940)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0940 advisory. 2.6.18-8.1.15.0.1.el5 - Fix bonding primary=ethX Bert Barbe IT 101532 ORA 5136660 - Add entropy module option to e1000/bnx2 John Sobecki ORA 6045759...
RHEL 5 / 6 : java-1.7.0-openjdk (RHSA-2013:0247)
Updated java-1.7.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
Pizza Hut defaced, Authorities denies theft of 240000 Credit Cards
Yesterday Australian Pizza Hut website was compromised by a hacking group going by the name of 0-Day and Pyknic. Hackers defaced the website and claim that they made off with 260,000 Australian credit card numbers. Hack was 1st noticed by Whirlpool Forum users. But a Pizza Hut spokeswoman said th...
XdCMS takeaway, food ordering, corporate website system multiple vulnerabilities and fixes-vulnerability warning-the black bar safety net
Vulnerability file: System/modeules/member/login.php ifempty$COOKIE'memberuser'||empty$COOKIE'memberuserid' //only judge the Cookie exists ę¼ę“ ę件 :www.xxx.com system/libs/base.class.php if empty$COOKIE'memberuser'|| empty$COOKIE'memberuserid' //only the judgment of the Cookies...
CentOS Update for glibc CESA-2012:0393 centos6
Check for the Version of glibc OpenVAS Vulnerability Test CentOS Update for glibc CESA-2012:0393 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Siteforbiz SQL injection Vulerablity
Exploit for php platform in category web applications Exploit Title: Siteforbiz SQL injection Vulerablity Date: 7-Jun-2012 Author: d4v1d Vendor or Software Link: siteforbiz.com Version: N.A Category:: Webapps Google dork: inurl:onlineordering.php Tested on: Windows OS Demo site:...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 4472)
This kernel update fixes the following security problems : - It was possible for local user to become root by exploiting a bug in the IA32 system call emulation. This affects x8664 platforms with kernel 2.4.x and 2.6.x before 2.6.22.7 only. CVE-2007-4573 - An information disclosure vulnerability ...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5370)
This kernel update fixes quite a number of security problems : - A remote attacker could crash the IPSec/IPv6 stack by sending a bad ESP packet. This requires the host to be able to receive such packets default filtered by the firewall. CVE-2007-6282 - A problem in SIT IPv6 tunnel handling could ...
Treat technology php online ordering system v2. 6 vulnerability-vulnerability warning-the black bar safety net
Title: treat technology php online ordering system v2. 6 vulnerability Time: 2011-10-30 Team:makebugs Author: fate http://t.qq.com/MakeBug http://hi.baidu.com/micropoor // \includes\libbase.php function realip ifisset$SERVER'HTTPCLIENTIP' $realip = $SERVER'HTTPCLIENTIP'; elseif...
kernel: netns vs proto registration ordering
The tunnels implementation in the Linux kernel before 2.6.34, when tunnel functionality is configured as a module, allows remote attackers to cause a denial of service OOPS by sending a packet during module loading...
Online Yemek Siparis Sistemi Cross Site Scripting
Exploit Title: Online Yemek SipariĆ¾ sistemi Author: Err0r Date: 01.05.2011 E-mail: [email protected] Category: Web App. Note : Warning. DEMO: http://webkentyazilim.com/paketler/onlinepizza/uyeol.asp Price : 300 TL Vuln Type: POST XSS Exploit : http://victim/patch/patch2/uyeol.asp Inject XSS...
kernel: netns vs proto registration ordering
net/ipv4/ipgre.c in the Linux kernel before 2.6.34, when ipgre is configured as a module, allows remote attackers to cause a denial of service OOPS by sending a packet during module loading...
Fedora 13 : phpMyAdmin-3.3.10-1.fc13 (2011-3733)
Changes for 3.3.10.0 2011-03-19 - structure Aria table size printed as unknown, thanks to erickoh75 - erickoh75 - structure Ordering by size gives incorrect results, thanks to Madhura Jayaratne - madhuracj - core 0 rows affected - core Edit relational page and page number - security Minor securit...
Fedora 15 : phpMyAdmin-3.3.10-1.fc15 (2011-3761)
Changes for 3.3.10.0 2011-03-19 - structure Aria table size printed as unknown, thanks to erickoh75 - erickoh75 - structure Ordering by size gives incorrect results, thanks to Madhura Jayaratne - madhuracj - core 0 rows affected - core Edit relational page and page number - security Minor securit...
CVE-2011-0005
Cross-site scripting XSS vulnerability in the comsearch module for Joomla! 1.0.x through 1.0.15 allows remote attackers to inject arbitrary web script or HTML via the ordering parameter to index.php...
mycart 2.0 - Multiple Vulnerabilities
mycart 2.0 - Multiple Vulnerabilities MyCart 2.0 Multiple Remote Vulnerabilities Name MyCart Vendor http://open.appideas.com Versions Affected 2.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-27 X. INDEX I. ABO...
PreProject Multi-Vendor Shopping Malls - SQL Injection / Authentication Bypass
--------------------------------------------------------------------------- +Title Multi-Vendor Shopping Malls SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 ---------------------------------------------------------------------------...
Restaurant Listing with Online Ordering - SQL Injection
Restaurant Listing with Online Ordering - SQL Injection 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...
Restaurant Listing with Online Ordering - SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...