2422 matches found
CVE-2012-5000: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...
DEBIAN-CVE-2012-4219
showconfigerrors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file...
PT-2012-5261
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.5.x through 3.5.2.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to show config errors.php, which reveals the installation path in an error message due to the lack of...
am4ss 1.2 <= Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title : am4ss 1.2 alert'Sec-w.com' ================================================= Gr34ts 4 : Sec-w.com Members 0day.today 2018-02-18...
am4ss 1.2 - Multiple Vulnerabilities
Exploit Title : am4ss 1.2 alert'Sec-w.com' ================================================= Gr34ts 4 : Sec-w.com Members...
CVE-2011-4282
Multiple cross-site scripting XSS vulnerabilities in the course-tags functionality in tag/coursetagsmore.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 sort or 2 show parameter...
CVE-2011-4282: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the course-tags functionality in tag/coursetagsmore.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 sort or 2 show parameter...
PT-2012-1830
Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the course-tags functionality. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the...
Dear Jailbreaker, Apple Wants to Have a Word with You
After banning the word “jailbreak” from its app store and music library, Apple today reversed course and again permits the term – slang for hacking into a device to download unauthorized content — to appear on iTunes and its App Store. On Thursday bloggers noticed Apple had censored the word, usi...
Julian Assange and Bradley Manning are Vested in Vision !
Julian Assange and Bradley Manning are Vested in Vision ! Two significant events will take place this week and cyber activists need to take note and pay attention. This will be your training on how to unfold the growing revolution that is spinning our world on a new and courageous path. First,...
CRUNCH TV SHOW - Live Stream & Security Videos
Document Title: =============== CRUNCH TV SHOW - Live Stream & Security Videos References: =========== Download: http://www.vulnerability-lab.com/resources/videos/508.mov View: http://www.youtube.com/watch?v=G9ECcxvB0dQ Release Date: ============= 2012-04-10 Vulnerability Laboratory ID VL-ID:...
CRUNCH TV SHOW - Live Stream & Security Videos
Document Title: =============== CRUNCH TV SHOW - Live Stream & Security Videos References: =========== Download: http://www.vulnerability-lab.com/resources/videos/508.mov View: http://www.youtube.com/watch?v=G9ECcxvB0dQ Release Date: ============= 2012-04-10 Vulnerability Laboratory ID VL-ID:...
PT-2012-3640
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.4.x through 3.4.10.1 Description The issue allows remote attackers to obtain sensitive information via a direct request to show config errors.php, which reveals the installation path in an error message when a configurati...
MySQL < 5.0.51a / 5.1.23 / 6.0.4 Multiple Vulnerabilities
The version of MySQL installed on the remote host is earlier than 5.0.51a / 5.1.23 / 6.0.4 and thus reportedly affected by the following two vulnerabilities : - An attacker may be able to cause the federated handler and daemon to crash when the federated engine issues a SHOW TABLE STATUS LIKE que...
Immunity Canvas: MS12_005
Name| ms12005 ---|--- CVE| CVE-2012-0013 Exploit Pack| CANVAS Description| MS12-005: MS Office 2007-2010 Shell Object Packager file extension bypass Notes| Repeatability: Infinite Notes: The issue we exploit here was fixed silently alongside the ClickOnce issues in the MS12-005 patch but allows f...
Successful Shell Attack Detected - Cisco 'show ip bgp' Command
Binary data 6204.prm...
Successful Shell Attack Detected - Cisco 'show ip interface' Command
Binary data 6210.prm...
Successful Shell Attack Detected - Cisco 'show proc' Command
Binary data 6206.prm...