IPB 3.0.1 SQL Injection

Attention!\n"; echo "\n"; echo "Error!\n"; echo "This exploit is meant to be used as php CLI script!\n"; echo "More information:\n"; echo "http://www.google.com/search?hl=en&q=php+cl...

BBSGood论坛程序create_index_html.asp页面SQL注入漏洞

BBSGOOD是国内首创使用缓存技术的论坛，BBSGOOD的帖子和列表首页是可以生成静态HTML文件的。 在文件createindexhtml.asp中： sql="select top 1 Admin,UserName,Password from BBSGoodAdmin where UserName='"&Request.Cookiesbbsinfo&"adminuser"&"' " //第127行 程序没有验证用户是否登陆，导致cookies的值没有过滤而产生注入漏洞 BBSGood 5.0/5.0.2 厂商补丁： BBSGood.Speed -------...

[SECURITY] Fedora 13 Update: boa-0.94.14-0.15.rc21.fc13

Boa is a single-tasking HTTP server. That means that unlike traditional web servers, it does not fork for each incoming connection, nor does it fork ma ny copies of itself to handle multiple connections. It internally multiplexes all of the ongoing HTTP connections, and forks only for CGI program...

[SECURITY] Fedora 11 Update: boa-0.94.14-0.15.rc21.fc11

Boa is a single-tasking HTTP server. That means that unlike traditional web servers, it does not fork for each incoming connection, nor does it fork ma ny copies of itself to handle multiple connections. It internally multiplexes all of the ongoing HTTP connections, and forks only for CGI program...

[SECURITY] Fedora 12 Update: boa-0.94.14-0.15.rc21.fc12

Boa is a single-tasking HTTP server. That means that unlike traditional web servers, it does not fork for each incoming connection, nor does it fork ma ny copies of itself to handle multiple connections. It internally multiplexes all of the ongoing HTTP connections, and forks only for CGI program...

Speed Commander 13.10 (.zip) Memory Corruption

No description provided by source. !/usr/bin/python Title: Speed Commander 13.10 .zip Memory Corruption Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Found by: TecR0c Download: http://www.sp-download.de/sc13/sc13.exe Platform: Windows XP sp3 En Advisory:...

Speed Commander 13.10 (.zip) Memory Corruption

Exploit for windows platform in category dos / poc ============================================== Speed Commander 13.10 .zip Memory Corruption ============================================== !/usr/bin/python Title: Speed Commander 13.10 .zip Memory Corruption Author: TecR0c -...

Speed Commander 13.10 - .zip Memory Corruption

Speed Commander 13.10 - .zip Memory Corruption !/usr/bin/python Title: Speed Commander 13.10 .zip Memory Corruption Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Found by: TecR0c Platform: Windows XP sp3 En Advisory:...

Speed Commander 13.10 - '.zip' Memory Corruption

!/usr/bin/python Title: Speed Commander 13.10 .zip Memory Corruption Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Found by: TecR0c Platform: Windows XP sp3 En Advisory: http://www.corelan.be:8800/advisories.php?id=CORELAN-10-028 Greetz to: Corelan Security Team...

The use of PMK Hashes for the WPA/WPA2 high-speed hack-vulnerability warning-the black bar safety net

Author: Christopher Yang This article relates to the Hash key based on the Cowpatty under the genpmk tool to make, this is the ZerOnesecurityteam is the wireless security group by with Aircrack-ng airolib-ng and related tools of convenience, versatility and repeated the comparison after the final...

Processor Information (via DMI)

Nessus was able to retrieve information about the remote system's hardware, such as its processor type, by using the SMBIOS aka DMI interface. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid45432; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate...

IBM Lotus Notes HTML Speed Reader Long URL Buffer Overflow (CVE-2005-2618)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communication with email servers over the SMTP, POP and IMAP protocols. A stack buffer overflow vulnerability exists in the IBM Lotus Notes HTML Speed...

Google Releases Skipfish Application Security Scanner

Google has released its own Web application security scanner, called Skipfish. The free scanner is designed to work within a variety of existing Web application frameworks and is built with an emphasis on speed and low false-positives, the company said. Skipfish enters a crowded field of Web...

Xerox WorkCentre 5665/5675/5687 Backdoor

SEC Consult Security Advisory ======================================================================= title: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface products: Xerox WorkCentre 5665/5675/5687 vulnerable version: 21.120.39.000 and possibly others fixed version:...

Xerox WorkCentre 5665/5675/5687 Printers Web Interface Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Xerox WorkCentre 5665/5675/5687 Printers Web Interface Vulnerabilities ======================================================================...

CentOS 4 : kernel (CESA-2009:0014)

Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...

[SECURITY] Fedora 10 Update: aria2-1.3.1-2.fc10

aria2 is a download utility with resuming and segmented downloading. Supported protocols are HTTP/HTTPS/FTP/BitTorrent. It also supports Metalink version 3.0. Currently it has following features: - HTTP/HTTPS GET support - HTTP Proxy support - HTTP BASIC authentication support - HTTP Proxy...

Live For Speed S2 - Duplicate Join Packet Remote Denial of Service

Live For Speed S2 - Duplicate Join Packet Remote Denial of Service source: https://www.securityfocus.com/bid/36114/info Live For Speed S2 is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to...

Live For Speed S2 - Duplicate Join Packet Remote Denial of Service

source: https://www.securityfocus.com/bid/36114/info Live For Speed S2 is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to restart races on vulnerable servers, resulting in a denial-of-service...

Live For Speed 2 Version Z (.mpr ) Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ================================================================ Live For Speed 2 Version Z .mpr Buffer Overflow Exploit SEH ================================================================ !/usr/bin/python | || | / \ | | | | | | | | | - | |...