Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Pligg CMS 1.1.3 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became...

N_CMS 1.1E - Local File Inclusion / Remote Code

!/usr/bin/python INFORMATION Exploit Title: NCMS 1.1E Pre-Auth Local File Inclusion Remote Code Exploit Date: 11/3/2011 Software link: http://bit.ly/eJAyw5 Tested on: Linux bt Version: 1.1E PHP.ini Settings: gpcmagicquotes = Off Note: The web application was lucky to not be exploited by session...

N'CMS 1.1E Pre-Auth Local File Inclusion Code Execution

!/usr/bin/python INFORMATION Exploit Title: NCMS 1.1E Pre-Auth Local File Inclusion Remote Code Exploit Date: 11/3/2011 Software link: http://bit.ly/eJAyw5 Tested on: Linux bt Version: 1.1E PHP.ini Settings: gpcmagicquotes = Off Note: The web application was lucky to not be exploited by session...

Design/Logic Flaw

The registeruser function in client/newaccountform.php in Domain Technologie Control DTC before 0.32.9 includes a cleartext password in an e-mail message, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

WordPress Plugin PHP Speedy 0.5.2 - 'admin_container.php' Remote Code Execution

-d OPTIONS host: target server ip/hostname path: directory path to wordpress Options: -pip:port:...

AWCM v2.2 final Persistent Cross Site Script Vulnerability

Exploit for php platform in category web applications Exploit Title: AWCM v2.2 final Persistent Cross Site Script Date: 13-02-2011 Author:84kur10 Software Link: www.awcm-cms.com Version: v2.2 CVE : Contact: 84kur10atgmail.com Greetz to: SLG all Members, D4nb4r, Naviterrible, J3h3s, C4br4...

CVE-2011-0321

librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to 1 register or 2 unregister RPC services, and consequently cause a denial o...

XWiki Watch Multiple Cross Site Scripting Vulnerabilities

This host is running XWiki Watch and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbxwikiwatchmultxssvuln.nasl 7276 2017-09-26 11:59:52Z cfischer $ XWiki Watch Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c...

CVE-2010-4683

Memory leak in Cisco IOS before 15.01XA5 might allow remote attackers to cause a denial of service memory consumption by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733...

Memory corruption

Memory leak in Cisco IOS before 15.01XA5 might allow remote attackers to cause a denial of service memory consumption by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733...

CVE-2010-4683

Memory leak in Cisco IOS before 15.01XA5 might allow remote attackers to cause a denial of service memory consumption by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733...

CVE-2010-4640

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

CVE-2010-4640

XWiki Watch 1.0 is affected by multiple Cross-Site Scripting (XSS) vulnerabilities. The issues arise from user-supplied input in the rev parameter for bin/viewrev/Main/WebHome and bin/view/Blog, and in the register_first_name/register_last_name parameters for bin/register/XWiki/Register. Impact d...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Habari 0.6.5, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 additemform parameter to system/admin/dashadditem.php and the 2 statusdata parameter to system/admin/dashstatus.php. NOTE: so...

WordPress Register Plus Plugin Multiple Vulnerabilities

WordPress Register Plus Plugin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Habari 0.6.5 Cross Site Scripting / Path Disclosure

================================ Vulnerability ID: HTB22731 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: XSS Cross Site...

SOOP Portal Raven 1.0b Shell Upload Vulnerability

Exploit for asp platform in category web applications ================================================= SOOP Portal Raven 1.0b Shell Upload Vulnerability ================================================= Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability Google Dork: "Powered...

SOOP Portal Raven 1.0b Shell Upload

Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability Google Dork: "Powered by SOOP Portal Raven 1.0b" Date: 06-12-2010 Author: Sun Army Version: Raven 1.0b Tested on: Win 2003 Exploit 1.Register On Site 2.Shell Renamed to .asp.jpg shell.asp.jpg 3.Go This Page --...