1782 matches found
Jinzora <= 2.6 (extras/mt.php) Remote File Include Vulnerability
No description provided by source. ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ---- Jinzora 2.6 - Remote File Include Vulnerabilities site : Www.Hack-Medya.Org Script : http://www.jinzora.com/downloads/j2.6.zip Credits : ERNE Contact : [email protected] Thanks : Liz0zim, Bitter.Melish, D3ngsz, Rmx,...
PostNuke <= 0.750 readpmsg.php SQL Injection Exploit
No description provided by source. !/usr/bin/perl This tools is only for educational purpose K-C0d3r a x0n3-h4ck friend !!! This exploit should give admin nick and md5 password -= PostNuke SQL Injection version : x= 0.750=- -= =- -= Discovered by sp3x =- -= Coded by K-C0d3r =- -= irc.xoned.net...
DEBIAN-CVE-2012-0064
xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab...
CVE-2014-0388
Unspecified vulnerability in the PeopleSoft Enterprise HRMS Human Resources component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Org and Workforce Dev...
CVE-2013-5909
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Org and Workforce Dev...
Design/Logic Flaw
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Org and Workforce Dev...
Code injection
Unspecified vulnerability in the PeopleSoft Enterprise HRMS Human Resources component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Org and Workforce Dev...
CVE-2013-5909
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Org and Workforce Dev...
CVE-2013-5909
The CVE-2013-5909 entry concerns the PeopleSoft Enterprise HRMS component within Oracle PeopleSoft Products 9.1 and 9.2 . It describes an unspecified vulnerability that could allow a remote authenticated user to compromise confidentiality and integrity via unknown vectors related to Org and Workf...
PT-2014-2997
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products versions 9.1 through 9.2 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to Org and Workforce Development. Recommendations Fo...
CVE-2014-0388: Undefined Security Weakness
Unspecified vulnerability in the PeopleSoft Enterprise HRMS Human Resources component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Org and Workforce Dev...
PT-2014-3606
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products versions 9.1 through 9.2 Description The issue affects confidentiality and is related to the Org and Workforce Dev components. It can be exploited by remote authenticated users via unknown vectors. Recommendations Fo...
TYPO3后端用户管理反射型跨站脚本漏洞
TYPO3是一款基于PHP4/PHP5+MYsql的内容管理系统。 TYPO3后端用户管理Backend User Administration存在反射型跨站脚本漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 TYPO3 6.0.0 TYPO3 6.0.11 TYPO3 6.1.0 TYPO3 6.1.6 TYPO3 6.2 厂商补丁： TYPO3 ----- TYPO3 4.5.32, 4.7.17, 6.0.12, 6.1.7已经修复该漏洞，请到厂商的主页下载： http://typo3.org/...
ecshop最新版本前台二次注入系列(2)
简要描述： 二次注入第二枚，这个点的注入内容至少进出数据库6次才最终到达了注入结果页面，当然全程可控。 详细说明： 先上注入结果图： SQL注入流程： 1.插入注入代码goodsattr至订单商品/wholesale.php可以插入,即商品批发页面，这里的goodsattr和 WooYun: ecshop最新版本前台二次注入系列1 里goodsattrid是不同的，之前的漏洞即正常在商品页面加入购物车是不能控制goodsattr的，当时goodsattr从数据库商品属性表读取。 2.将1生成的订单在用户中心订单查看页执行“放回购物车”操作。 3.查看购物车页面，注入代码执行 代码分析：...
DEBIAN-CVE-2013-2002
Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XtResourceConfigurationEH function...
CVE-2013-1992
Multiple integer overflows in X.org libdmx 1.1.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 DMXGetScreenAttributes, 2 DMXGetWindowAttributes, and 3 DMXGetInputAttributes functions...
CVE-2013-2071: Exposure of Sensitive Information to an Unauthorized Actor
java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other application...
Joomla Jnews 8.0.1 Cross Site Scripting Vulnerability
Joomla Jnews version 8.0.1 suffers from an Open Flash-Chart cross site scripting vulnerability. Exploit Title: Joomla comjnews Open Flash-Chart XSS Release Date: 14/05/2013 Author: Deepankar Arora And Rafay Baloch Blog: http://rafayhackingarticles.net Vendor: www.joobi.co Versions Affected:...
Nitol Botnet Shares Code with Other China-Based DDoS Malware
Microsoft has learned that much of the code used by the Nitol malware family is copied from free malware resources hosted on Chinese websites. Microsoft posted portions of the code online this week where similar lines used for denial of service attack functionality are present in Nitol and on the...