lightweight-xssetc.txt

/ | | \ | | | | \ \ / / | |/ | | | / | | | | | | | |\ V / | | | | '/ |/ \ | | / | '/ | | || | | |\ | || | | | | | | || | | \ \ / | | | | | | | |/|| |,||| ||/ ,|| |/|||/|| , | ---------------------------------------------------------------------------|/ Exploit found by sToRm LNP:...

Authentication flaw

Plone CMS 3.x uses invariant data a client username and a server secret when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network...

CVE-2008-1396

CVE-2008-1396 affects Plone CMS 3.x . The issue is in how Plone computes the HMAC-SHA1 value for the authentication cookie: it uses invariant data (a client username and a server secret), which can enable remote attackers to gain permanent access to a user account by sniffing network traffic. The...

Debian Security Advisory DSA 429-2 (gnupg)

The remote host is missing an update to gnupg announced via advisory DSA 429-2. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

usb-blam.txt

I discovered rather inadvertently that laptops do not enjoy having their USB VCC shorted to GND one bit. It is a sure DoS, in fact if the machine has a stupid power supply, it could result in permanent damage. It is kind of scary for kiosk machines like the those ubiquitous Kodak photo centers. I...

Falcon CMS 1.4.3 (RFI/XSS) Multiple Remote Vulnerabilities

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

falconcms-rfixss.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multilple...

falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multilple...

falcon CMS 1.4.3 - Remote File Inclusion Cross-Site Scripting

falcon CMS 1.4.3 - Remote File Inclusion Cross-Site Scripting --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Falcon CMS 1.4.3 (RFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Falcon CMS 1.4.3 RFI/XSS Multiple Remote Vulnerabilities ========================================================== --------------------------------------------------------------- ...

vigilecms-multi.txt

--------------------------------------------------------------------------------------- . .. | / || | / |/ \ / / | | \ \ | | \ / \ / \ / // \ /\ /| | |/ | | /| | \ | \ \ |\ / || // || /|| / / / / / ---------------------------------------------------------------------------------------...

IceBB 1.0rc6 <= Remote SQL Injection

VigileCMS 1.4 Multiple Remote Vulnerabilities --------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------- Author : DevilAuron http://devilsnight.altervista.org Vendor : VigileCMS 1....

VigileCMS 1.4 Multiple Remote Vulnerabilities

VigileCMS 1.4 Multiple Remote Vulnerabilities --------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------- Author : DevilAuron http://devilsnight.altervista.org Vendor : VigileCMS 1....

Vigile CMS 1.4 - Multiple Vulnerabilities

Vigile CMS 1.4 - Multiple Vulnerabilities --------------------------------------------------------------------------------------- . .. | / || | / |/ \ / / | | \ \ | | \ / \ / \ / // \ /\ /| | |/ | | /| | \ | \ \ |\ / || // || /|| / / / / /...

VigileCMS 1.4 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================= VigileCMS 1.4 Multiple Remote Vulnerabilities ============================================= --------------------------------------------------------------------------------------- . .. | / || |...

Vigile CMS 1.4 - Multiple Vulnerabilities

--------------------------------------------------------------------------------------- . .. | / || | / |/ \ / / | | \ \ | | \ / \ / \ / // \ /\ /| | |/ | | /| | \ | \ \ |\ / || // || /|| / / / / / ---------------------------------------------------------------------------------------...

greensql-xss.txt

Site: http://greensql.net/ live-demo: http://demo.greensql.net/ Platform: alls Bug: permanent xss Special condition: none Impact : semi-critical ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1 Introduction =========== GreenSQ...

greensql firewall permanent xss

Site: http://greensql.net/ live-demo: http://demo.greensql.net/ Platform: alls Bug: permanent xss Special condition: none Impact : semi-critical ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1 Introduction =========== GreenSQ...

PhpBB Xs 2 profile.php Permanent Xss Vulnerability

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PhpBB Xs 2 profile.php Permanent Xss Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Found By Seph1roth +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ POST METHOD Corrupted page:...

phpbb-permxss.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PhpBB Xs 2 profile.php Permanent Xss Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Found By Seph1roth +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ POST METHOD Corrupted page:...