Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion

Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion =============================================================================================================== o Joomla Component PowerMail Pro Local File Inclusion Vulnerability Software : compowermail version 1.5.3 Vendor :...

Joomla PowerMail Pro 1.5.3 Local File Inclusion

=============================================================================================================== o Joomla Component PowerMail Pro Local File Inclusion Vulnerability Software : compowermail version 1.5.3 Vendor : http://www.givesight.org Author : AntiSecurity Vrs-hCk NoGe OoNBoY Pam...

Microsoft IE HTML渲染远程代码执行漏洞（MS10-018）

BUGTRAQ ID: 39024 CVE ID: CVE-2010-0807 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer访问已被删除的对象的方式中存在一个远程执行代码漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 7.0 临时解决方法： 在Office 2007中禁用ActiveX控件。 不要打开意外的文件。 厂商补丁： Microsoft...

Microsoft Internet Explorer 张贴编码信息泄露漏洞（MS10-018）

BUGTRAQ ID: 39028 CVE ID: CVE-2010-0488 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 在提交数据时Internet Explorer处理使用特制编码字符串的内容的方式存在信息泄露漏洞。攻击者可以通过创建特制的网页来利用这个漏洞，如果用户查看了该网页就会导致信息泄露。成功利用这个漏洞的攻击者可以查看本地计算机或其他域或Internet Explorer区中的其他浏览器窗口的内容。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP...

Easy Icon Maker - .ico File Reading Crash

Easy Icon Maker - .ico File Reading Crash ! /usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATE - [email protected] - B3hz4d - Cdef3nder EAX 30303030 ECX...

SuSE 10 Security Update : squid (ZYPP Patch Number 6930)

The following vulnerabilities have been fixed in squid : - DoS via special crafted auth header CVE-2010-0308: DoS via invalid DoS header. CVE-2009-2855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

USN-914-1: Linux kernel vulnerabilities

Mathias Krause discovered that the Linux kernel did not correctly handle missing ELF interpreters. A local attacker could exploit this to cause the system to crash, leading to a denial of service. CVE-2010-0307 Marcelo Tosatti discovered that the Linux kernel's hardware virtualization did not...

PhpCityPortal - Multiple Vulnerabilities

PhpCityPortal - Multiple Vulnerabilities ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: suffer from multi SQL !NJECTON Vulnerability Vendor: phpcityportal.com ? Software : PhpCityPortal - pR!CE : -PURCHASE 1 LICENSE - $149 each -PURCHASE 3 LICENSES -...

spamass-milter -- remote command execution vulnerability

The spamassassin milter plugin contains a vulnerability that can allow remote attackers to execute commands on affected systems. The vulnerability can be exploited trough a special-crafted email header when the plugin was started with the '-x' expand flag...

Mandriva Update for msec MDVA-2010:079 (msec)

Check for the Version of msec OpenVAS Vulnerability Test Mandriva Update for msec MDVA-2010:079 msec Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inject arbitrary web script or HTML via the which parameter in a copy action...

Apple Iphone/Ipod - Serversman 3.1.5 HTTP Remote DoS Exploit

Exploit for unknown platform in category dos / poc ============================================================ Apple Iphone/Ipod - Serversman 3.1.5 HTTP Remote DoS Exploit ============================================================ !/usr/bin/python Apple Iphone/Ipod - Serversman 3.1.5 HTTP Remo...

Image Hosting Script - Arbitrary File Upload

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Suffering From Remote shell upload Vulnerability ? Vendor: www.x10media.com ? ? Software : Image Hosting Script ? - ? - author: R3d-D3v!L ? TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ? contact: N/A - ?Date: 1. Jan...

Glitter Central Cross Site Scripting

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Suffering From XSS Vulnerability ? Vendor: www.x10media.com ? ? Software : Glitter Central Script ? - demo :www.glitter-central.com ? - author: R3d-D3v!L ? TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ? contact: N/A...

DEBIAN-CVE-2009-4589

Cross-site scripting XSS vulnerability in the Special:Block implementation in the getContribsLink function in SpecialBlockip.php in MediaWiki 1.14.0 and 1.15.0 allows remote attackers to inject arbitrary web script or HTML via the ip parameter...

Facebook for iPhone - Persistent Cross-Site Scripting Denial of Service

Facebook for iPhone - Persistent Cross-Site Scripting Denial of Service Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App...

Joomla Intuit Local File Inclusion

++ Joomla Component comintuit Local File Inclusion Vulnerability ++ download : http://joomlamerchantservices.com/zoodownload/comintuitv11.zip ++ Author : Fl0riX ++ Special Thanks : Deep-Power , PyskE And All Friends ++ ERR0R CODE: if $response"approval" != ""...

gallery_show.asp - GID Blind SQL Injection

galleryshow.asp - GID Blind SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:galleryshow.asp GID suffer from Blind SQL Injection Vulnerability Vendor:www.aspinvision.com Software: iPortal X author: R3d-D3v!L ? Home: WwW.xP10.ME ? contact: N/...

egegen turkish script - SQL Injection

egegen turkish script - SQL Injection =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= egegen turkish script SQL Injection Vulnerability script: egegen Site script: http://www.egegen.com/ =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Found by:...

MySimpleFileUploader V1.6 Upload Shell Vulnerability

No description provided by source. =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= MySimpleFileUploader V1.6 Upload Shell Vulnerability script: MySimpleFileUploader V1.6 Site script: http://phpx3.com =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Found...