SMF "index.php?action=pm" Cross Site-Scripting

Aria-Security Team http://Aria-Security.com Type:Remote Cross-Site Scripting Article on XSS: http://aria-security.net/xss.rar Discovered By Aria-Security Team Tested on SMF 1.1 RC3 Explanation: -First of all user must be REGISTERED -Go to http://target/smf/index.php?action=pm;sa=send -Inster your...

Fedora Core 5 : kdebase-3.5.3-0.3.fc5 (2006-726)

Thu Jun 15 2006 Than Ngo 6:3.5.3-0.3.fc5 - fix BR - Wed Jun 14 2006 Than Ngo 6:3.5.3-0.2.fc5 - apply patch to to fix 194659, CVE-2006-2449 KDM symlink attack vulnerability thanks to KDE security team - Thu Jun 8 2006 Than Ngo 6:3.5.3-0.1.fc5 - update to 3.5.3 - Fri May 12 2006 Than Ngo...

Fedora Core 5 : openssl-0.9.8a-5.3 / openssl097a-0.9.7a-4.2.2 (2006-953)

This is a security update for CVE-2006-4339. Avoid PKCS 1 v1.5 signature attack discovered by Daniel Bleichenbacher Ben Laurie; Google Security Team Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

PHP-Nuke <= 7.9 Old-Articles Block "cat" SQL Injection vulnerability

/ -------------------------------------------------------- Neo Security Team NST - Advisory 31 - 2007-01-13 -------------------------------------------------------- Program: PHP-Nuke Homepage: http://www.phpnuke.org Vulnerable Versions: PHP-Nuke = 7.9 Risk: Medium Impact: Medium Risk -==PHP-Nuke ...

phpnuke79-sql.txt

/ -------------------------------------------------------- Neo Security Team NST - Advisory 31 - 2007-01-13 -------------------------------------------------------- Program: PHP-Nuke Homepage: http://www.phpnuke.org Vulnerable Versions: PHP-Nuke = 7.9 Risk: Medium Impact: Medium Risk -==PHP-Nuke ...

oohasp-mdb.txt

Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://sourceforge.net/project/showf...groupid=42824 PoC: http://victim.com/path/db/OhhASP.mdb Contact: [email protected] http://64.38.62.221/ariasecucom/forum/showthread.php?t=89...

PHP-Nuke 7.x - 'Block-Old_Articles.php' SQL Injection

source: https://www.securityfocus.com/bid/22037/info PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

ohhASP Remote Password Disclosure

ARIA-SECURITY TEAM Forum: http://aria-security.com Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://sourceforge.net/project/showf...groupid=42824 PoC: http://victim.com/path/db/OhhASP.mdb Contact: [email protected]...

uberupload.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ | |Uber Uploader 4.2 Arbitrary File Upload Vulnerability |Gamma Security Team |www.nullak.com |www.gammahack.com |Discovered:Null |Official Site:http://sourceforge.net/projects/uber-uploader |Download...

Intranet Open Source Remote Password Disclosure "intranet.mdb"

ARIA-SECURITY TEAM Forum: http://aria-security.com Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://diggersolutions.com/blogs/diggersolutions/default.aspx PoC: http://victim.com/path/data/intranet.mdb Contact: [email protected]...

Uber Uploader 4.2 Arbitrary File Upload Vulnerability

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ | |Uber Uploader 4.2 Arbitrary File Upload Vulnerability |Gamma Security Team |www.nullak.com |www.gammahack.com |Discovered:Null |Official Site:http://sourceforge.net/projects/uber-uploader |Download...

drupal -- multiple vulnerabilities

The Drupal security team reports: A few arguments passed via URLs are not properly sanitized before display. When an attacker is able to entice an administrator to follow a specially crafted link, arbitrary HTML and script code can be injected and executed in the victim's session. Such an attack...

Drupal core - Denial of service

The way page caching was implemented allows a denial of service attack. An attacker has to have the ability to post content on the site. He or she would then be able to poison the page cache, so that it returns cached 404 page not found errors for existing pages. If the page cache is not enabled,...

jgbbs

ARIA-SECURITY TEAM Forum: http://aria-security.com DiscoveredBy:t3rr0r1st from Aria-Security Type:Remote Password Disclosure Vendor:http://sourceforge.net/projects/jgbbs/ PoC: http://target/path/db/bbs.mdb Contact: [email protected] http://aria-security.com/forum/showthread.php?t=87...

wine-db.txt

Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://www.fermentigrafici.it/wineglass/ PoC: http://target/db/data.mdb Contact: [email protected] http://aria-security.com/forum/showthread.php?p=112...

gb03-db.txt

Discovered by:Aria-Security Team Type:Remote Password Disclosure Download: http://www.planet-source-code.com/vb/scripts/ShowCode.asp?lngWId=4&txtCodeId=6847 PoC: target/path/db/gbook.mdb target/path/db/gbook97.mdb Contact: [email protected]...

carbon-db.txt

Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://www.carboncommunities.com/ PoC: http://target/DataBase/Carbon2.4d.mdb Contact: [email protected] http://aria-security.com/forum/showthread.php?p=113...

rblog Database Download Vulnerability

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor:http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact:...

VerliAdmin <= 0.3 (language.php) Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl VerliAdmin = 0.3 Remote Command Execution Exploit linK : http://bohyn.czechweb.cz/ d0rk: allinurl:"verliadmin" cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or [email protected]...

VerliAdmin 0.3 - language.php Local File Inclusion

VerliAdmin 0.3 - language.php Local File Inclusion !/usr/bin/perl VerliAdmin = 0.3 Remote Command Execution Exploit linK : http://bohyn.czechweb.cz/ d0rk: allinurl:"verliadmin" cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or...