11989 matches found
Sparkasse Bank – Tricky Card Bug on ATM [ATM Adventure]
Document Title: =============== Sparkasse Bank – Tricky Card Bug on ATM ATM Adventure References: =========== Document: httpd://www.vulnerability-lab.com/resources/documents/295.pdf Article: httpd://www.vulnerability-lab.com/dev/?p=247 Release Date: ============= 2011-10-15 Vulnerability Laborato...
Apache mod_proxy Reverse Proxy Exposure Vulnerability PoC
No description provided by source. !/usr/bin/env python import socket import string import getopt, sys knownports = 0,21,22,23,25,53,69,80,110,137,139,443,445,3306,3389,5432,5900,8080 def sendrequesturl, apachetarget, apacheport, internaltarget, internalport, resource: get = "GET " + url + "@" +...
Debian DSA-2322-1 : bugzilla - several vulnerabilities
Several vulnerabilities were discovered in Bugzilla, a web-based bug tracking system. - CVE-2010-4572 By inserting particular strings into certain URLs, it was possible to inject both headers and content to any browser. - CVE-2010-4567, CVE-2011-0048 Bugzilla has a 'URL' field that can contain...
Linux Kernel 2.6.9-34 Local root Exploit
Exploit for linux platform in category local exploits / ========================================== Linux Kernel 2.6.9-34 Local root Exploit ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...
Grand network SMS ddos attack vulnerabilities and fixes-vulnerability warning-the black bar safety net
Brief description: Grand online presence SMSddosattack vulnerability Detailed description: Grand online Forgot Password at will to the phone to send verification code, The URL: http://pwd.sdo.com/ptinfo/safecenter/getpwd/ChgPwdStepOldPwd.aspx?showbindmobile=1 Phone numbers can be arbitrarily...
littlephpcms multiple injection/upload/sensitive information leakage issues-vulnerability warning-the black bar safety net
Document classification: script Defense/web apps Published time: 2011-9-30 9:2 6:0 5 Vulnerability added: black kid|attention7 1 Station search: littlephpcms multiple injection/upload/sensitive information leakage issue Vulnerability neighbor: DeDeCMSweaving dreamsvariable overwrite 0day getshell...
[SECURITY] Fedora 16 Update: audacious-plugins-3.0.2-2.fc16
This package provides essential plugins for the Audacious audio player. Audacious is an advanced audio player. It is free, lightweight, based on GTK2, runs on Linux and many other nix platforms and is focused on audio quality and supporting a wide range of audio codecs. It still features an...
Traq 2.2 - Multiple SQL Injections Cross-Site Scripting
Traq 2.2 - Multiple SQL Injections Cross-Site Scripting source: https://www.securityfocus.com/bid/49835/info Traq is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow...
[SECURITY] Fedora 15 Update: phpMyAdmin-3.4.5-1.fc15
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...
kuwebs 0day-vulnerability warning-the black bar safety net
? php errorreportingEERROR; printr' +---------------------------------------------------------------------+ kuwebs cms sql injection exp Home: www.hkmjj.comwww.badguest.cn +---------------------------------------------------------------------+ '; if $argc 2 printr' Usage: php '.$ argv0.' host /pa...
Adobe Acrobat和Reader多个远程安全漏洞
BUGTRAQ ID: 49520 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。Acrobat是1993年推出针对企业、技术人员和创意专业人士的系列产品，使智能文档的传送和协作更为灵活、可靠和安全。 Adobe Acrobat和Reader在实现上存在多个远程漏洞，远程攻击者可利用这些漏洞攻击受影响应用程序。其他细节暂时未知。 Adobe Acrobat 9.x Adobe Acrobat 8.x Adobe Acrobat 10.x Adobe Reader 9.x Adobe Reader 8.x Adobe...
HTTP Brute Force Logins With Default Credentials
A number of known default credentials are tried for the login via HTTP Basic Auth. As this VT might run into a timeout the actual reporting of this vulnerability takes place in the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, an...
SSH Brute Force Logins With Default Credentials
A number of known default credentials are tried for the login via the SSH protocol. As this VT might run into a timeout the actual reporting of this vulnerability takes place in the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...
WordPress post highlights plugin <= 2.2 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress post highlights plugin posts WHERE posttype='attachment' AND postparent='$id'"; 0day.today 2018-02-27...
Sunway SCADA 6.1 SP3 Buffer Overflow
!/usr/bin/perl Sunway SCADA Add User Exploit for fun ; Tested on XP SP1 | | | | | | | | | | | | ' \ / \ | |/ \ | |/ / |/ |/ | | | | | | | | / | | | | | | | | | | || | || |||||/ ||\|,|,|, | |/ Bir turlu olamayanin avuntusu; "underground'im ben" demek Demek benim ustumden yiyecegini sandin...
Fabio Rispoli (prodotto.php?id) Remote SQL injection Vulnerability
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Fabio Rispoli prodotto.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Persian Gulf 4 Ever! Dork : "Powered by Fabio Rispoli" Exploite: www.victim.com/prodotto.php?id=6+union+select...
Portable Saint Paint Studio Local Buffer Overflow
Exploit for windows platform in category local exploits !/usr/bin/python import sys print "" print " Exploit Title: Portable Saint Paint Studio Local Buffer Overflow " print " Author: Angel Injection " print " Email: email protected " print " Date: 26/8/2011 " print " Home Page: http://1337day.co...
Php168 v2008 list.php sql注入漏洞
PHP168整站是PHP领域当前功能最强大的建站系统,代码全部开源,可极其方便的进行二次开发,所有功能模块可以自由安装与删除,个人用户完全免费使用 在文件member/ list.php中： if!$aidDB //第127行 showerr"请至少选择一篇文章"; …… if$Type=='delete' //第49行 makemorearticlehtml"$FROMURL","del0",$aidDB; makemorearticlehtml函数在inc/articfunction.php文件中： function...
VedCor SQL Injection
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability VedCor producto.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.vedcor.es/ Persian Gulf 4 Ever! Exploite: www.victim.com/producto.php?id=SQL Example :...
Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection
Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit PoC: index.php?section=shop&productId=VALID productid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Exploit found and written by: Penguin Version: =...