CVE-2010-3195

Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a denial of service trap via vectors involving "special group and user enumeration."...

Code injection

Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a denial of service trap via vectors involving "special group and user enumeration."...

CVE-2010-3195

Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a denial of service trap via vectors involving "special group and user enumeration."...

Suspicious Characters in FTP User Name (CVE-2009-0542; CVE-2010-2453)

File Transfer Protocol is a popular protocol. FTP server may ask connecting users for their usernames and passwords. While the official FTP specification allows all characters in user names certain FTP servers fail to properly parse FTP usernames that contain special characters, most notably...

Living Local V1.2 (pHbypass) Insecure Cookie Handling

Exploit for php platform in category web applications ===================================================== Living Local V1.2 pHbypass Insecure Cookie Handling ===================================================== Author : KnocKout Thankz.: DaiMon, Cyber-Warriorz. Contact: email protected Script...

Kleeja 1.0.0RC6 Database Disclosure

==================================================== kleeja1.0.0RC6 Database Disclosure Exploit ==================================================== Vendor: kleeja.com Date: 2010-05-27 Author : indoushka Contact : 00213771818860 Home : www.sec4ever.com Bug : Database Disclosure Exploit Tested on ...

PHP-Nuke 8.1 SEO Arabic - Remote File Inclusion

PHP-Nuke 8.1 SEO Arabic - Remote File Inclusion Exploit Title: PHP-Nuke-8.1-seo-Arabic Remote File Include Date: 12-8-2010 Author: LoSt.HaCkEr Software Link: http://scripts.bdr130.net/faile/PHP-Nuke-8.1-seo-Arabic.zip Version: v 8.1 Tested on: Windows XP CVE : هكر المسيب Contact:...

PhotoPost PHP 4.0 - 4.6 SQL Injection

Exploit Title: PhotoPost PHP SQL Injection Vulnerability Date: 23/07/2010 Author: Cyber-sec Software Link: www.photopost.com Version: 4.0 - 4.6 Tested on: windows xp pack 3 CVE : N/A --------------------------exploit------------------------------ dork : Powered by: PhotoPost PHP 4.6 exploit:...

WordPress Plugin myLDlinker SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= WordPress Plugin myLDlinker SQL Injection Vulnerability ======================================================= 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian...

Oracle Secure Backup Administration $other Variable Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit this vulnerability. The specific flaw exists in the handling of variables to the propertybox.php script located on the Oracle Secure...

Cherokee Web-server DoS

Crash on DOS special device name...

Email Image Upload Shell Upload

============================================= =================================== ============================================= ====== Email image upload Remote file Upload Vulnerability ============================================= ===================================...

DEBIAN-CVE-2010-1648

Cross-site request forgery CSRF vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for requests that 1 create accounts or 2 reset passwords, related to the Special:Userlogin form...

Cosmos Solutions cms SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ Cosmos Solutions cms SQL Injection Vulnerability ================================================ .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| ...

Jax Calendar v1.34 Remote Permission Bypass Vulnerability

Exploit for php platform in category web applications ========================================================= Jax Calendar v1.34 Remote Permission Bypass Vulnerability ========================================================= FOUND BY: R4M! - email protected DORK: inurl:?do=editentry SCRIPT: Ja...

Online Job Board - Authentication Bypass

Online Job Board - Authentication Bypass '/ -.- --------------------oOO------OOo----------------------------- | Online Job Board Auth Bypass SQL Injection Vulnerability | | works only with magicquotesgpc = off | ---------------------------------------------------------------- ! Discovered: cr4wl3...

TS Special Edition 7.0 - Multiple Vulnerabilities

TS Special Edition 3.2 javascript:TSQuickRate'torrent1', 'CHAGEYOURIDHERE'; 4 Apply changes and vote the torrent every time you want...

TS Special Edition <= v.7.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ==================================================== TS Special Edition = v.7.0 Multiple Vulnerabilities ==================================================== TS Special Edition = v.7.0 Multiple Vulnerabilities Dork: "Powered by TS Special...

texlive: Integer overflow by processing special commands

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a special command in a DVI file, related to the 1 predospecial and 2 bbdospecial function...

[SECURITY] Fedora 12 Update: drupal-views-6.x.2.9-1.fc12

The views module provides a flexible method for Drupal site designers to control how lists of content nodes are presented. Traditionally, Drupal has hard-coded most of this, particularly in how taxonomy and tracker lists are formatted. This tool is essentially a smart query builder that, given...