IBM Bladecenter Management - Multiple web application vulnerabilities

No description provided by source. DSECRG-09-054 IBM Bladecenter Management - Multiple vulnerabilities The BladeCenter management module is prone to multiple security vulnerabilities: Unauthorized Access, Directory Listing, XSS Digital Security Research Group DSecRG Advisory DSECRG-09-054...

OpenPLI 3.0 beta (OpenPLi-beta-dm7000-20130127-272) - Multiple Vulnerabilities

No description provided by source. Exploit Title: Multiple Vulnerabilities in OpenPLI Date: 13.02.2013 Exploit Author: m-1-k-3 Vendor Homepage: http://openpli.org/ Software Link: http://openpli.org/ Version: v3.0 beta OpenPLi-beta-dm7000-20130127-272 and below Device Name: OpenPLI - Dream...

PostNuke Module pnEncyclopedia <= 0.2.0 - SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV90$2008 ----------------------------------------------------------------------------------------- ECHOADV90$2008 PostNuke Module pnEncyclopedia = 0.2.0 id Blind Sql Injection...

Fedora Update for gnupg FEDORA-2014-7676

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

guanxiCRM Business Solution <= 0.9.1 - Remote File Include Vulnerability

No description provided by source. ============================================================================================== guanxiCRM = v0.9.1 rootpath Remote File Inclusion Exploit =============================================================================================== Critical Leve...

KLINK SQL Injection Vulnerability

No description provided by source. Andr?s G?mez Exploit Title : KLINK Sql Injection Vulnerability Date : 2010-12-31 Author : Andr?s G?mez Software Developed by : http://www.contacto.comhttp://www.contacto.com.com/ Contact : [email protected] Dork : allinurl:.php?txtCodiInfo= An attacker m...

Softbiz Web Host Directory Script (host_id) - SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV89$2008 ----------------------------------------------------------------------------------------- ECHOADV89$2008 Softbiz Web Host Directory Script searchresult.php hostid...

AVerCaster Pro RS3400 Web Server Directory Traversal

No description provided by source. Exploit Title: AVerCaster Pro RS3400 web server directory traversal Date: 2012-10-06 Exploit Author: Patrick Saladino Vendor Homepage: http://www.avermedia.com/product/ProductDetail.aspx?Id=560 Version: v.3.1.20 Tested on: Not relevant CVE : none yet Hello, I ju...

Quick.Cart <= 2.2 RFI/LFI Remote Code Execution Exploit

No description provided by source. ?php / Exploit Name: Quick.Cart = v2.2 Remote Local Include Exploit & Remote Code Execution Exploit Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Kacper Hacking & Security Blog: http://kacper.bblog.pl/ Irc: irc.milw0rm.com:6667...

Tinypug 0.9.5 - CSRF Password Change

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation: Remote with browser Fi...

BandSite CMS <= 1.1.1 (root_path) Remote File Include Vulnerabilities

No description provided by source. --------------------------------------------------------------------------- Grayscale BandSite CMS =rootpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Te...

webSPELL <= 4.01.01 Database Backup Download Vulnerability

No description provided by source. WebSPELL = 4.01.01 Accessible Database Backup Download Exploit Discovered by: Trex Visit: www.SecuritySector.org / www.UnderGround.ag Exploit: http://SITE/PATH/admin/database.php?action=write&userID=1 Solution: http://cms.webspell.org/index.php?site=files&file=1...

Pandora FMS <= 3.1 Path Traversal and LFI

Introduction Pandora FMS for Pandora Flexible Monitoring System is a software solution for monitoring computer networks. It allows monitoring in a visual way the status and performance of several parameters from different operating systems, servers, applications and hardware systems such as...

Fedora 20 : zabbix-2.0.12-3.fc20 (2014-7594)

Patch CVE-2014-3005 local file inclusion via XXE attack https://support.zabbix.com/browse/ZBX-8151 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Oracle HTTP Server - XSS Header Injection

No description provided by source. --------------------------------------------------------------------------------------------------------- Oracle HTTP Server XSS Header Injection --------------------------------------------------------------------------------------------------------- Attack...

OSSIM 2.1 - SQL Injection and xss

No description provided by source. OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1...

Netartmedia iBoutique.MALL SQLi Vulnerability

No description provided by source. Name : Netartmedia iBoutique.MALL SQLi Vulnerability Date : june, 28 2010 Critical Level : HIGH Vendor Url : http://www.netartmedia.net/mall/ Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd...

Internet Explorer 9 XSS Filter Bypass

No description provided by source. Internet Explorer 9 XSS Filter Bypass Discovered by: Jean Pascal Pereira [email protected] Vendor information: Internet Explorer formerly Microsoft Internet Explorer and Windows Internet Explorer, commonly abbreviated IE or MSIE is a series of graphical web...

PHPFox 3.6.0 (build3) Multiple SQL Injection Vulnerabilities

No description provided by source. ------------------------------------------------------------ PHPFox v3.6.0 build3 Multiple SQL Injection vulnerabilities ------------------------------------------------------------ == Description == - Software link: http://www.phpfox.com - Affected versions:...

Mambo Peoplebook Component 1.0 - Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- Peoplebook Mambo Component = v1.0 Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Matdhule Date : August, 14th 20...