4118 matches found
Maian Scripts Cookie Manipulation Authentication Bypass
The remote host is running at least one PHP application from Maian Script World that allows a remote attacker to bypass authentication and access the admin control panel by simply setting a special cookie. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Avlc Forum (vlc_forum.php id) Remote SQL Injection Vulnerability
No description provided by source. ==================================================================== Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------...
Pidgin 2.4.1 Vulnerability
Application: Pidgin 2.4.1 OS: Linux - Ubuntu 8.04 ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description Pidgin is an instant messaging program with which you can use a number of...
Opera < 9.50 Multiple Vulnerabilities
The version of Opera installed on the remote host reportedly is affected by several issues : - Improper handling of special characters in page addresses can make addresses look like other ones, aiding in phishing attacks. - Specially crafted HTML canvas elements could violate the same-origin imag...
CMS MAXSITE 1.10 - 'category' SQL Injection
CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:"MAXSITE" + Exploit:...
CVE-2008-2282
admin.php in Internet Photoshow and Internet Photoshow Special Edition SE allows remote attackers to bypass authentication by setting the loginadmin cookie to true...
CVE-2008-2282
admin.php in Internet Photoshow and Internet Photoshow Special Edition SE allows remote attackers to bypass authentication by setting the loginadmin cookie to true...
Microsoft恶意软件保护引擎多个拒绝服务漏洞(MS08-029)
BUGTRAQ ID: 29060,29073 CVECAN ID: CVE-2008-1437,CVE-2008-1438 Microsoft恶意软件保护引擎可为防病毒和反间谍软件客户端提供扫描、监测和清除功能。 Microsoft恶意软件保护引擎处理特制文件的方式中存在拒绝服务漏洞，攻击者可以通过建立特制文件来利用此漏洞，当目标计算机系统接收或Microsoft恶意软件保护引擎扫描到此文件时，就可能导致Microsoft恶意软件保护引擎停止响应和自动重新启动，或耗尽所有磁盘空间 0 Microsoft Windows Live OneCare Microsoft Antigen fo...
Internet Photoshow - 'login_admin' Parameter Unauthorized Access Vulnerability
Internet Photoshow 'loginadmin' Parameter Unauthorized Access Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/29227/info Internet Photoshow is prone to a vulnerability that can result in unauthorized database access. Attackers can exploit this issue to gai...
Internet Photoshow (Special Edition) Insecure Cookie Handling Vuln
Exploit for unknown platform in category web applications ================================================================== Internet Photoshow Special Edition Insecure Cookie Handling Vuln ==================================================================...
CVE-2007-5001
Linux kernel before 2.4.21 allows local users to cause a denial of service kernel panic via asynchronous input or output on a FIFO special file...
Input validation
Linux kernel before 2.4.21 allows local users to cause a denial of service kernel panic via asynchronous input or output on a FIFO special file...
CVE-2007-5001
Linux kernel before 2.4.21 allows local users to cause a denial of service kernel panic via asynchronous input or output on a FIFO special file...
chicomas.2.0.4
Author : Hadi Kiamarsi ---------------------------------------------------------------------------------- Discovered by : Hadi Kiamarsi ---------------------------------------------------------------------------------- Exploited By : Hadi Kiamarsi...
Trillian 3.1 basic nick crash
I found a flaw in the trillian 3.1 for Windows. It is that on receipt of a nickname too long with some characters, this leads to break the program, the failure of the curious is that when the abri with ollydbg tries to read the argument of the message such as whether to wear the nickname long...
VisualPic 0.3.1 Remote File Inclusion Vulnerability
No description provided by source. -Coderx.Org- Digital-AngeLs ^| By Cr@zyKing / [email protected] \ ^| Special Greatz All My Friends to str0ke \ ^| VisualPic 0.3.1 Remote File Ä°nclude \ ^| Down : http://www.snarky.fr/index.php?page=telechargement-2 \ ^| Error :...
Proviso SiteKiosk File Download Vulnerability
Proviso SiteKiosk File Download Vulnerability x Vendor Information: "SiteKiosk is a software for public access internet terminals and lets you turn any computer into a secure multilanguage Internet terminal already 20 different languages included, allowing the user to access the Internet but...
CVE-2008-1353
zabbixagentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service CPU and connection consumption via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero...
CVE-2008-1353
zabbixagentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service CPU and connection consumption via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero...
CVE-2008-1353
zabbixagentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service CPU and connection consumption via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero...