GNU glibc - Timezone Parsing Remote Integer Overflow

GNU glibc - Timezone Parsing Remote Integer Overflow // source: https://www.securityfocus.com/bid/50898/info GNU glibc is prone to an remote integer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an application that use...

Webboard 2.90 Beta File Disclosure

Webboard = v.2.90 beta Remote File Disclosure Vulnerability ============================================================= Author: MrDoug Email: mrdoug13 at gmail dot com Greetz to all my friends ============================================================= There are 3 vulnerable calls to fopen in...

WebMember 1.0 SQL Injection

================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M S N N N A A K K E S T E A A M M M...

DGNews 3.0 Beta - id SQL Injection

DGNews 3.0 Beta - id SQL Injection DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability http://diangemilang.com/news/berita.php?view=detail&id=-28+union+select+1,version,3,4,5,6,7,8,9,10,11-- mysql 5 : Download :-...

DMXReady Registration Manager 1.1 - Database Disclosure

Title : DMXReady Registration Manager 1.1 Remote Database Disclosure Vulnerability Author : S4S-T3rr0r!sT Contact : [email protected] / [email protected] S.Page : DMXReady CMS Plugin Applications Web Site Design Extensions Dreamweaver ASP Template Database Driven Site : WwW.s3curi7y.com / www.h-t.cc D0r...

Mozilla Firefox 3.0.10 - nsViewManager.cpp Denial of Service

Mozilla Firefox 3.0.10 - nsViewManager.cpp Denial of Service source: https://www.securityfocus.com/bid/35413/info Mozilla Firefox is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions...

Mozilla Firefox 3.0.x - Large '.GIF' File Background Denial of Service

source: https://www.securityfocus.com/bid/35280/info Mozilla Firefox is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Firefox 3.0.10 is affected; other versions may also be...

Battle Blog 1.25 File Upload

Battle Blog 1.25 uploadform.asp Remote File Upload Vulnerability Found By : Cyber-Zone ABDELKHALEK +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ http://localhost/blog/admin/uploadform.asp After You Upload Your File You Will See The Link To THE File Just Below some demos ...

WebKit - XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/35321/info WebKit is prone to a remote information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may aid in further attacks. NOTE: This issue was previously covered in BID 35260 Apple Safari Prior to 4.0...

BluSky CMS SQL Injection

-------------------------AllaH AkbaR------------------------------- BluSky CMS Remote SQL Injection Vulnerability --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] Site:http://www.snakespc.com/sc/index.php...

Leap CMS 0.1.4 XSS / SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://leap.gowondesigns.com/ | |--DOWNLOAD: http://leap.gowondesigns.com/download.php?leap014.zip | |--DEMO: http://php...

GnuTLS 2.6.x - libgnutls lib/gnutls_pk.c DSA Key Storage Remote Spoofing

// source: https://www.securityfocus.com/bid/34783/info GnuTLS is prone to multiple remote vulnerabilities: - A remote code-execution vulnerability - A denial-of-service vulnerability - A signature-generation vulnerability - A signature-verification vulnerability An attacker can exploit these...

MIM:InfiniX 1.2.003 SQL Injection

-------------------------------------------------------------------------- MULTIPLE REMOTE SQL INJECTION VULNERABILITIES --MIM:InfiniX v1.2.003-- -------------------------------------------------------------------------- CMS INFORMATION: --WEB: http://mim.infinix.it --DOWNLOAD:...

bBlog rss.php远程SQL注入漏洞

No description provided by source...

MixedCMS 1.0 LFI / Shell Upload / Bypass

---------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES Mixed CMS 1.0 ---------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/mixedcms/ --DOWNLOAD: http://sourceforge.net/projects/mixedcms/ --DEMO: N/A --CATEGORY: C...

e107 Plugin userjournals_menu (blog.id) SQL Injection Vulnerability

No description provided by source. e107 Plugin userjournalsmenu blog.id SQL injection vulnerability Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Remote SQL-injection Google Dork : inurl:"userjournals.php?blog." -------------------------------------------------- ! Product...

FTPDMIN 'RNFR' Command Buffer Overflow Vulnerability

According to its version number, the remote version of Ftpdmin is prone to a buffer-overflow vulnerability. A successful exploit may allow attackers to execute arbitrary code in the context of the vulnerable service. Failed exploit attempts will likely cause denial-of-service conditions. OpenVAS...

FreznoShop 1.3.0 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== FreznoShop 1.3.0 id Remote SQL Injection Vulnerability ========================================================...

[SECURITY] [DSA 1768-1] New openafs packages potential code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1768-1 [email protected] http://www.debian.org/security/ Florian Weimer April 10, 2009 http://www.debian.org/security/faq -...

IBM Bladecenter Advanced Management Module 1.42 - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability - Multiple cross-site request-forger...