Google Chrome 0.2.149.30 - Window Object Suppressing Denial of Service

Google Chrome 0.2.149.30 - Window Object Suppressing Denial of Service Google Chrome Window Object Suppressing Remote Denial of Service. Version Affected: Chrome/0.2.149.30 Chrome/0.2.149.29 Chrome/0.2.149.27 Severity: High Description: The Google chrome browser is vulnerable to window object bas...

mycard-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -Marezzi-P47tr1ck- FeDeReR -MAGE -JeTFyrE- DON-Outlawz and all darkc0de and...

Yoxel 1.23beta - 'itpm_estimate.php' Remote Code Execution

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Yoxel = 1.23beta PHP code Injection Vulnerability Script: "Yoxel is a hidden gem. This Open Source project provides customer/busine...

MyCard 1.0.2 - 'id' SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -Marezzi-P47tr1ck- FeDeReR -MAGE -JeTFyrE- DON-Outlawz and all darkc0de and...

openEngine 2.0 beta4 - Remote File Inclusion

openEngine 2.0 beta4 - Remote File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl openEngine = 2.0 beta4 Remote File Inclusion Vulnerability Script: "Open Source Web...

SuSE 10 Security Update : Python (ZYPP Patch Number 5490)

This update of python fixes several security vulnerabilities. CVE-2008-1679 / CVE-2008-1887 / CVE-2008-3143 / CVE-2008-3142 / CVE-2008-3144 / CVE-2008-2315 / CVE-2008-2316 Note: for SLE10 a non-security bug in mmap was fixed too. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

[slackware-security] mtr

New mtr packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2357 Here are the details from the Slackware 12.1 ChangeLog:...

gapicms-rfi.txt

gapicms v9.0.2 dirDepth Remote File Inclusion Vulnerability Found : Ghost Hacker R-H TeaM |, .-. .-. ,| HOME : www.Real-Hack.net | o/ \o | Email : [email protected] |/ /\ | Script : gapicms v9.0.2 Download Script :...

Pivot t参数目录遍历漏洞

BUGTRAQ ID: 30012 Pivot是一款基于WEB的帮助用户维护动态站点的工具。 Pivot的search.php文件没有正确过滤对t参数输入的便返回用于显示文件： ... // Set the template for the tags page if !isset$PivotVars't' || empty$PivotVars't' if isset$Weblogs$Currentweblog'extratemplate' && $Weblogs$Currentweblog'extratemplate'!="" $template =...

Jamroom 3.3.5 - Remote File Inclusion

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : CMS Jamroom Version: 3.3.5 Discovered By : Cyberlog Scripts site : http://www.jamroom.net/ Download Script : http://www.jamroom.net/index.php?m=tddownload&o=download&fileid=43 Thanks To :...

[Full-disclosure] Opera - heap based buffer overflow (CVE-2007-6521)

============================================ ||| Security Advisory AKLINK-SA-2008-006 ||| ||| CVE-2007-6521 CVE candidate ||| ============================================ Opera - heap-based buffer overflow ================================== Date released: 28.05.2007 Date reported: 05.10.2007...

Xomol CMS 1.2 - Authentication Bypass / Local File Inclusion

'/ -.- -------------oOO------OOo------------ | Xomol CMS v1 Login Bypass & LFI | | coded by DNX | ---------------------------------------- ! Discovered.: DNX ! Vendor.....: http://www.xomol.net ! Detected...: 12.05.2008 ! Reported...: 13.05.2008 didn't work: host mail.xomol.net said: 554 5.7.1 -...

New release of MySQL fixes security bugs

MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure...

New release of MySQL fixes security bugs

MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table...

Ktools Photostore 3.5.2 - Multiple SQL Injections

'/ -.- -------------------------oOO------OOo------------------------- | Ktools Photostore = v3.5.2 crumbs.php Remote SQL Injection | | works only with magic quotes = off | | coded by DNX | ----------------------------------------------------------------- ! Discovered.: DNX ! Vendor.....:...

Admidio 1.4.8 (getfile.php) Remote File Disclosure Vulnerability

No description provided by source. /---------------------------------------------------------------\ + + + Admidio 1.4.8 Remote File Disclosure + + + ---------------------------------------------------------------/ Author : n3v3rh00d, http://forum.antichat.ru Download :...

onecms25-sql.txt

!/usr/bin/perl OneCMS 2.5 Remote Blind SQL Injection Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Usage : perl oc.pl site There's many other bugs, find them yourself use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; $ua =...

RHEL 4 / 5 : firefox (RHSA-2008:0222)

Updated firefox packages that fix a security bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A flaw was found in the processing of...

phpBB Add-on Fishing Cat Portal Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ============================================================= phpBB Add-on Fishing Cat Portal Remote File Inclusion Exploit ============================================================= Fishing Cat Portal Addon functionsportal.php Remote...

LokiCMS <= 0.3.3 Remote Command Execution Exploit

No description provided by source. Author: GiReX mySite: girex.altervista.org Date: 8/04/08 CMS: LokiCMS = 0.3.3 Site: lokicms.com Bug: PHP Code Injection Exploit: Remote Command Execution Vuln Code: admin.php if $GET'default' != '' // User want's to set the default page writeconfig$cpassword,...