Woltlab Burning Board 2.3.4 - File Disclosure

Woltlab Burning Board 2.3.4 - File Disclosure Exploit Title: Woltlab Burning Board 2.3.4 File Disclosure Vulnerability Date: 2010-11-12 Author: SFX Version: 2.3.4 CVE : N/A After you've used the Exploit to get the admin account: goto: http://lolcathost/wbb/acp/avatar.php?action=readfolder import:...

Woltlab Burning Board 2.3.4 - File Disclosure

Exploit Title: Woltlab Burning Board 2.3.4 File Disclosure Vulnerability Date: 2010-11-12 Author: SFX Version: 2.3.4 CVE : N/A After you've used the Exploit to get the admin account: goto: http://lolcathost/wbb/acp/avatar.php?action=readfolder import: acp/lib download a backup:...

NetSupport Manager Gateway transmits identifying information in plaintext

Overview The NetSupport HTTP protocol implementation used for communication between the NetSupport Manager Gateway and NetSupport Manager Controls or NetSupport Manager Clients is not encrypting http headers sent between systems. Description The NetSupport HTTP protocol implementation used for...

IBM Tivoli Directory Server ldapinst.log DB2 Admin Password Disclosure

The remote installation of Tivoli Directory Server created a file called 'ldapinst.log' that contains the login and password of the IBM DB2 database used for this service. An attacker who could get access to this file or a backup of it would be able to log into the DB2 database and modify its...

TLS: MITM attacks via session renegotiation

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services IIS 7.0, modssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services NSS 3.12.4 and earlier, multiple Cis...

HP System Management Homepage < 6.1.0.102 / 6.1.0-103 Multiple Vulnerabilities

According to the web server banner, the version of HP System Management Homepage SMH running on the remote host is potentially affected by the following vulnerabilities : - Session renegotiations are not handled properly, which could be exploited to insert arbitrary plaintext by a...

TLS: MITM attacks via session renegotiation

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services IIS 7.0, modssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services NSS 3.12.4 and earlier, multiple Cis...

Mandriva Linux Security Advisory : nss (MDVSA-2010:069)

A vulnerability has been found and corrected in nss : The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services IIS 7.0, modssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network...

Mandriva Update for nss MDVSA-2010:069 (nss)

Check for the Version of nss OpenVAS Vulnerability Test Mandriva Update for nss MDVSA-2010:069 nss Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

IBM WebSphere Application Server 6.0 < 6.0.2.25 Multiple Vulnerabilities

IBM WebSphere Application Server 6.0.x before Fix Pack 25 appears to be running on the remote host. Such versions are reportedly affected by multiple vulnerabilities. - An unspecified vulnerability in the Administrative Console involving monitor role users. PK45768 - WebSphere Application Server...

IBM WebSphere Application Server < 6.1.0.15 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 15 appears to be running on the remote host. As such, it is reportedly affected by the following vulnerabilities : - There is an as-yet unspecified security exposure in wsadmin PK45726. - Sensitive information might appear in plaintext in the...

TLS: MITM attacks via session renegotiation

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services IIS 7.0, modssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services NSS 3.12.4 and earlier, multiple Cis...

Easynet Forum Host - 'topic.php' SQL Injection

Exploit Title: Easynet Forum Host topic.php SQL Injection Vulnerbility Date: 05/04/2008 Author: Pr0T3cT10n Software Link: http://www.easynet4u.com/forum Version: all Tested on: all CVE: Code: //------------------------------------------------ // Easynet Forum Host SQL Injection Vulnerbility...

Easynet Forum Host SQL Injection

Exploit Title: Easynet Forum Host topic.php SQL Injection Vulnerbility Date: 05/04/2008 Author: Pr0T3cT10n Software Link: http://www.easynet4u.com/forum Version: all Tested on: all CVE: Code: //------------------------------------------------ // Easynet Forum Host SQL Injection Vulnerbility...

Easynet Forum Host - topic.php SQL Injection

Easynet Forum Host - topic.php SQL Injection Exploit Title: Easynet Forum Host topic.php SQL Injection Vulnerbility Date: 05/04/2008 Author: Pr0T3cT10n Software Link: http://www.easynet4u.com/forum Version: all Tested on: all CVE: Code: //------------------------------------------------ // Easyne...

OpenSSL < 0.9.8m Multiple Vulnerabilities

Binary data 801064.prm...

Softbiz Classifieds PLUS SQL Injection

----------------------------Information------------------------------------------------ +Name : Softbiz Classifieds PLUS SQL Injection gallery.php +Autor : Easy Laster +Date : 25.02.2010 +Script : Softbiz Classifieds PLUS +Download : ----- +Demo : www.posbisnis.com /the password is in browser lin...

Softbiz Auktios SQL Injection

----------------------------Information------------------------------------------------ +Name : softbiz auktios script sql injection viewfeedback.php +Autor : Easy Laster +Date : 24.02.2010 +Script : softbiz auktios script +Download : ----- +Demo : http://ezpips.com/ +Price : 99$ +Language :PHP...

Softbiz Recipes Portal Script (showcats.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Softbiz Recipes Portal Script showcats.php SQL Injection Vulnerability ========================================================================...

Softbiz Recipes Portal Script - 'showcats.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : Softbiz Recipes Portal Script SQL Injection showcats.php +Autor : Easy Laster +Date : 25.02.2010 +Script : Softbiz Recipes Portal Script +Price : 99$ +Language : PHP +Discovered by Easy Laster +Securit...