phpBB MOD 2.0.19 - Invitation Only (PassCode Bypass)

PHPBB MOD 2.0.19 Invitation Only PassCode Bypass vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | | / | 0 //|| ||| || ||,|||\|||...

Freelancers Marketplace Script Cross Site Scripting

Name : Freelancers Marketplace Script Persistent XSS Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.guruscript.com/ google dork:Powered by Guruscript.com Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Subrion Auto Classifieds Cross Site Scripting

Name :Subrion Auto Classifieds Persistent Xss Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.subrion.com/product/autos.html google dork:© 2010 Powered by Subrion CMS Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Subrion Auto Classifieds Persistent Xss Vulnerability

Exploit for php platform in category web applications ===================================================== Subrion Auto Classifieds Persistent Xss Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

Haihaisoft PDF Reader OCX Control v1.1.2.0 Remote Buffer Overflow

Exploit for windows platform in category dos / poc ================================================================= Haihaisoft PDF Reader OCX Control v1.1.2.0 Remote Buffer Overflow ================================================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1...

Researchers Show Ease of Attacking Chatroulette

Privacy shortcomings in Chatroulette expose users to risks in phishing, man-in-the-middle attacks and location-based threats, according to a study by security researchers. Read the full article. The Register...

Joomla Component com_easygallery Persistent XSS Vulnerability

Exploit for php platform in category web applications =================================================== Joomla comeasygallery Persistent XSS Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ ...

Joomla Component com_jobs Upload Vulnerability

Exploit for php platform in category web applications ============================================== Joomla Component comjobs Upload Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /,...

Ad Network Script - Persistent Cross-Site Scripting

Ad Network Script - Persistent Cross-Site Scripting 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://www.kaonsoftwares.com/ Price:330EUR :O Author : Sid3^effects aKa HaRi special thanks to : r0073r...

Oracle Secure Backup Administration Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle Secure Backup. The specific flaw exists within the register globals emulation layer which allows attackers to specify values for arbitrary program variables. When specific parameters are...

Joomla! Component MySMS - Arbitrary File Upload

Joomla! Component MySMS - Arbitrary File Upload 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla commysms Upload Vulnerability Date : july 10,2010 Critical Level : HIGH vendor URL...

Joomla! Component MySMS - Arbitrary File Upload

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla commysms Upload Vulnerability Date : july 10,2010 Critical Level : HIGH vendor URL :http://www.willcodejoomlaforfood.de/ Author : Sid3^effects aKa HaRi...

Minify4Joomla Cross Site Scripting

======================================================= Minify4Joomla Upload and Persistent XSS Vulnerability ======================================================= Name : Minify4Joomla Upload and Persistent XSS Vulnerability Date : july 9,2010 Critical Level : HIGH vendor URL...

Minify4Joomla Upload and Persistent XSS Vulnerability

Exploit for php platform in category web applications ===================================================== Minify4Joomla Upload and Persistent XSS Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

Joomla! Component Minify4Joomla - Arbitrary File Upload Persistent Cross-Site Scripting

Joomla! Component Minify4Joomla - Arbitrary File Upload Persistent Cross-Site Scripting ======================================================= Minify4Joomla Upload and Persistent XSS Vulnerability ======================================================= Name : Minify4Joomla Upload and Persistent...

WordPress Core 1.5.1.3 - 'cache_lastpostdate' Arbitrary Code Execution (Metasploit)

$Id: phpwordpresslastpost.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Your Photo Store Shell Upload

======================================== Photo Store === upload shell ======================================== + Date: 30/06/2010 + Author: MeGo + Tested ON :windows xP + MY Team : Team Hacker Egypt + Email: [email protected] + CategorY : Webapps/0day TYPE: PHP ×Dork "Copyright 2007 Your Photo Store...

openSUSE Security Update : cifs-mount (openSUSE-SU-2010:0346-1)

"This update of the Samba server package fixes security issues and bugs. Following security issues were fixed: CVE-2010-2063: A buffer overrun was possible in chainreply code in 3.3.x and below, which could be used to crash the samba server or potentially execute code. CVE-2010-0787: Take extra...

2daybiz Matrimonial Script SQL Injection

demo for exploit-db admin : http://www.2daybiz.com/products/shaadi/ ----------------------------Information------------------------------------------------ +Name : 2daybiz Matrimonial Script = SQL Injection Vulnerability POC +Autor : Easy Laster +ICQ : 11-051-551 +Date : 27.06.2010 +Script :...

PTCPay GEN4 - buyupg.php SQL Injection

PTCPay GEN4 - buyupg.php SQL Injection ===================================================== PTCPay GEN4 buyupg.php SQL Injection Vulnerability ===================================================== Exploit Title: Date: 28.06.2010 Author: Dark.Man [email protected] Thanks To: Diq3N , SkyTurk ,...