2837 matches found
Novell Netware NWFTPD.NLM DELE Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is required to exploit this vulnerability. The flaw exists within NWFTPD.NLM. When handling the argument provided to the DELE command the application copies user...
Tugux CMS 1.0_final Multiple Vulnerabilities
Exploit for php platform in category web applications Vulnerable Web-App : Tugux CMS 1.0final Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Email : email protected Google-Dork : "Copyright 2010-2011 Tugux CMS" Tested on : Ubuntu 10.04 Web-App :...
Tugux CMS 1.0_final - Multiple Vulnerabilities
+----------------------------------------------+ | Tugux CMS 1.0final Multiple Vulnerabilities | +----------------------------------------------+ Vulnerable Web-App : Tugux CMS 1.0final Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Email : [email protected]...
Tugux CMS 1.0_final - Multiple Vulnerabilities
Tugux CMS 1.0final - Multiple Vulnerabilities +----------------------------------------------+ | Tugux CMS 1.0final Multiple Vulnerabilities | +----------------------------------------------+ Vulnerable Web-App : Tugux CMS 1.0final Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul...
Linux Kernel I/O-Warrior USB设备栈溢出漏洞
BUGTRAQ ID: 46069 CVE ID: CVE-2010-4656 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在USB设备栈溢出漏洞，攻击者可利用此漏洞以超级用户的权限执行任意代码，完全控制受影响计算机，使内核崩溃，拒绝服务合法用户。 如果在case语句中iowarrior设备支持每个报告中多于8个字节，就可能在内核堆分配外写入。 index bc88c79..8ed8d05 100644 file --- a/drivers/usb/misc/iowarrior.c +++...
Anonymous attacks US security company !
HBGary chief Aaron Barr's Twitter account hijacked and personal details leaked in revenge for infiltration of hacking collective The loose hacker collective Anonymous says it has taken revenge on aUS security company whose principal claimed to have penetrated the group and identified some of its...
PiXie CMS v1.04 <= Multiple CSRF Vulnerabilities
Exploit for php platform in category web applications Add Super User: Add Post: !-- Exploit Title: PiXie CMS v1.04 = CSRF Add Post Google Dork: allintext: "Pixie Powered" Date: 28/12/2010 Author: Ali Raheem AKA wolfmankurd Software Link: http://pixie-cms.googlecode.com/files/pixiev1.04.zip Versio...
PiXie CMS 1.04 - Multiple Cross-Site Request Forgery Vulnerabilities
PiXie CMS 1.04 - Multiple Cross-Site Request Forgery Vulnerabilities Add Super User: Add Post: !-- Exploit Title: PiXie CMS v1.04 = CSRF Add Post Google Dork: allintext: "Pixie Powered" Date: 28/12/2010 Author: Ali Raheem AKA wolfmankurd Software Link:...
PiXie CMS 1.04 - Multiple Cross-Site Request Forgery Vulnerabilities
Add Super User: Add Post: !-- Exploit Title: PiXie CMS v1.04 = CSRF Add Post Google Dork: allintext: "Pixie Powered" Date: 28/12/2010 Author: Ali Raheem AKA wolfmankurd Software Link: http://pixie-cms.googlecode.com/files/pixiev1.04.zip Version: =1.04 Tested on: Linux sheevaplug-debian...
Super Simple Blog Script Detection
The remote host is running Super Simple Blog Script, a web-based blogging application written in PHP. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid50047; scriptversion"1.9";...
Super Simple Blog Script entry Parameter SQL Injection
The remote Super Simple Blog Script install hosted on the remote web server is affected by a SQL injection vulnerability because its 'comments.php' script does not properly sanitize input to the 'entry' parameter before using it a database query. Regardless of PHP's 'magicquotesgpc' setting, an...
Multiple Switch Vendors '__super' Account Backdoor
Nessus was able to log into the remote host as the 'super' user and a password based on the switch's MAC address. This is likely a built-in account that cannot be disabled and whose password cannot be changed. A remote attacker with knowledge of this switch's MAC address could exploit this by...
Oracle MySQL 5.1.50 - Privilege Escalation
Oracle MySQL 5.1.50 - Privilege Escalation source: https://www.securityfocus.com/bid/43677/info MySQL is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to run arbitrary SQL statements with 'SUPER' privileges on the slave database system. This will allow t...
upload super beta v1.3 Remote Shell Upload Vulnerability
Exploit for php platform in category web applications ======================================================== upload super beta v1.3 Remote Shell Upload Vulnerability ======================================================== Author: ViRuS Qalaa Email: email protected Home Script:...
超级巡警 <= v4 Build0316 ASTDriver.sys 本地特权提升漏洞
该漏洞是我2010年4月6日晚上，通过自己的IoControl Fuzz工具挖掘的。漏洞存在于超级巡警ASTDriver.sys这个驱动中，影响超级巡警v4 Build0316和以前的版本。利用该漏洞能够实现本地特权提升，进Ring0。 PAGEFAULTINNONPAGEDAREA 50 Invalid system memory was referenced. This cannot be protected by try-except, it must be protected by a Probe. Typically the address is just plain bad ...
Allomani Super Multimedia 2.5 Cross Site Request Forgery
Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin Account Date: 29-06-2010 Author: G0D-F4Th3r Software Link: http://demos.allomani.com/media250/ Version: 2.5 Tested on: http://demos.allomani.com/media250/ Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My...
Allomani - Super Multimedia v2.5 - CSRF Add Admin Account
Exploit for php platform in category web applications ========================================================= Allomani - Super Multimedia v2.5 - CSRF Add Admin Account ========================================================= Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin...
Allomani Super MultiMedia 2.5 - Cross-Site Request Forgery (Add Admin)
Allomani Super MultiMedia 2.5 - Cross-Site Request Forgery Add Admin Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin Account Date: 29-06-2010 Author: G0D-F4Th3r Software Link: http://allomani.com Version: 2.5 Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And A...
Allomani Super MultiMedia 2.5 - Cross-Site Request Forgery (Add Admin)
Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin Account Date: 29-06-2010 Author: G0D-F4Th3r Software Link: http://allomani.com Version: 2.5 Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My Friends...
Joomla Super Messenger Cross Site Scripting
=================================================== Joomla Super Messenger Persistent xss Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...