Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: Removes pamenv from auth stack for security reason bsc1243226 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed...

SetSeed CMS 5.8.20 (loggedInUser) Remote SQL Injection Vulnerability

Summary SetSeed is a self-hosted CMS which lets you rapidly build and deploy complete websites and online stores for your clients. Description SetSeed CMS is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the vulnerable script using the cookie input...

PG eLMS Pro vDEC_2007_01 Multiple Blind SQL Injection Vulnerabilities

Summary eLMS Pro solution is an outstanding and yet simple Learning Management system. Our product is designed for any education formations: from small distance training companies up to big colleges and universities. The system allows to build courses, import SCORM content, deploy online learning...

BlueFTP 1.2 DLL Hijacking Exploit (ProfUIS250m.dll)

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

e107 0.7.25_full Blind SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Ariadne <= 2.7.4 Multiple Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Istgah CMS Cross Site Scripting / SQL Injection

=========================================================================== Istgah Cms Multiple Vulnerability =========================================================================== Name: Istgah Cms Multiple Vulnerability Vendor: http://www.iran-team.com/agahi1.html Price: $40 Date: 2011-04-1...

TutorialMS v1.4 (show) Remote SQL Injection Vulnerability

Summary TutorialMS is a free content management system, developed specifically for tutorial pages. It is written in PHP and uses MySQL as a database. TutorialMS offers all the usual features you need to build quick and easy your own tutorial page, without great programming knowledge. Description...

PHPBoost 3.0 File Upload

Title : PHPBoost 3.0 gallery.php File Upload Vulnerability Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote File Upload Tested on : Windows XP sp3 FR Note : BAC 2011 Enchallah Me &...

PHP Dompdf File Remote File Inclusion

================================== PHP Dompdf File RFI Vulnerability ================================== +Title : PHP Dompdf File RFI Vulnerability +Software : Dompdf Php5 +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeathotmaildotcom +Web : http://alicoder.wordpress.com/ New...

CMS Tovar Site SQL Injection

================================================= CMS Tovar Site .ru SQL Injection Vulnerability ================================================= +Title : CMS Tovar Site .ru SQL Injection Vulnerability +Software : CMS Tovar +Vendor : NN +Download : NN +Author : josalijoe +Contact :...

CMS Cine 1.3 SQL Injection

========================================== CMS Cine v1.3 SQL Injection Vulnerability ========================================== +Title : CMS Cine v1.3 SQL Injection Vulnerability +Software : CMS Cine v1.3 +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeathotmaildotcom +Web :...

Joomla RokQuickCart Local File Inclusion

=========================================================================== Title : Joomla Component RokQuickCart LFI Software : Joomla Extensions RokQuickCart Vendor : http://www.rockettheme.com/ Download : http://www.rockettheme.com/extensions-joomla/rokquickcart Author : josalijoe Contact :...

PHP ID Page SQL Injection

=============================================== Php ID dog Page SQL Injection Vulnerability =============================================== +Title : Php ID dog Page SQL Injection Vulnerability +Software : Php ID dog Page +Vendor : NN +Download : NN +Author : josalijoe +Contact :...

Joomla Social User List SQL Injection

=============================================== Joomla Component Social User List SQL Injection =============================================== +Title : Joomla Component Social User List SQL Injection +Software : JomSocial User List JSUL +Vendor : http://www.bestofjoomla.com/ +Download :...

PHP Atividades Program SQL Injection

=================================================== PHP Atividades program SQL Injection Vulnerability =================================================== +Title : PHP Atividades program SQL Injection Vulnerability +Software : Atividades Program +Vendor : http://www.atividadeseducativas.com.br/...

PHP Trainers SQL Injection

=========================================== PHP Trainers Blind SQL Injection =========================================== +Title : PHP Trainers SQL Injection +Software : PHP Trainers +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeatyahoodotcom +Home :...

vBulletin Downloads FileInfo SQL Injection

=========================================== Vbulletin Downloads FileInfo SQL Injection =========================================== +Title : Vbulletin Downloads FileInfo SQL Injection +Software : FileInfo +Vendor : http://www.vbulletin.com +Download : http://www.vbulletin.com/download.php +Author ...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 (dwmapi.dll) DLL Hijacking Exploit

Summary The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with Adobe® Creative Suite CS5 and other Adobe applications. The ESTK is used for creating, editing, and debugging JavaScript to be used for scripting Adobe applications. Description Adobe ExtendScript Toolkit CS5 suffers...

PHP Classifieds 6.09 E-mail Dump

======================================================================================== | Title : PHP Classifieds V6.09 E-mail Dump Vulnerability | Author : indoushka | Home : www.dz-blackhat.com | Tested on: Lunix Français v.9.4 Ubuntu | Bug : E-mail Dump ====================== Exploit By...