JVN#85571806: SX-2000WG vulnerable to denial-of-service (DoS)

SX-2000WG provided by silex technology, Inc. is a product that provides wireless connectivity for USB devices such as printers and hard disk drives HDD. SX-2000WG contains an issue in the processing of TCP Option header, which may cause a denial-of-service DoS. Impact A remote attacker may cause...

sX-Shop (view_image.php) SQL Injection Vulnerability

No description provided by source. sX-Shop / viewimage.php SQL Injection Author : secret - [email protected] Homepage : http://swissfaking.net/ Date : 05 August, 2010 / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|/ // sX-Shop ...

sX-Shop Multiple SQL Injection Vulnerabilities

No description provided by source. sX-Shop SQL Injection Vulnerabilities Author : CoBRa21 Author Web Page :http://ipbul.org Dork : powered by sX-Shop Script Page : http://www.source-worx.de/ Sql Injection : http://localhost/path/index.php?product=513' Sql http://localhost/path/question.php?id=-51...

JBossSX/PicketBox: World readable audit.log file

It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in t...

JBossSX/PicketBox: World readable audit.log file

It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in t...

PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application

It was identified that PicketBox/JBossSX allowed any deployed application to alter or read the underlying application server configuration and state without any authorization checks. An attacker able to deploy applications could use this flaw to circumvent security constraints applied to other...

sX-CMS SQL Injection

Exploit Title: sX-CMS = SQL injection Vulnerability Date: 06/04/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com Category: webapps version: - Vendor or Software Link: http://www.source-worx.de/ Google dork: powered by sX-CMS Tested on: Linux Exploit/p0c :...

sX-CMS SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: sX-CMS = SQL injection Vulnerability Date: 06/04/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com Category: webapps version: - Vendor or Software Link: http://www.source-worx.de/ Google dork: powered by sX-CMS...

sX-Shop SQL Injection

sX-Shop / viewimage.php SQL Injection Author : secret - [email protected] Homepage : http://swissfaking.net/ Date : 05 August, 2010 / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|/ // sX-Shop / viewimage.php SQL Injection...

sX-Shop SQL Injection

sX-Shop SQL Injection Vulnerabilities Author : CoBRa21 Author Web Page :http://ipbul.org Dork : "powered by sX-Shop" Script Page : http://www.source-worx.de/ Sql Injection : http://localhost/path/index.php?product=513' Sql http://localhost/path/question.php?id=-513 union select version Sql...

sX-Shop - Multiple SQL Injections

sX-Shop - Multiple SQL Injections sX-Shop SQL Injection Vulnerabilities Author : CoBRa21 Author Web Page :http://ipbul.org Dork : "powered by sX-Shop" Script Page : http://www.source-worx.de/ Sql Injection : http://localhost/path/index.php?product=513' Sql http://localhost/path/question.php?id=-5...

sX-Shop Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications =================================== sX-Shop SQL Injection Vulnerability =================================== Author : CoBRa21 Author Web Page :http://ipbul.org Dork : "powered by sX-Shop" Script Page : http://www.source-worx.de/ Demo :...

sX-Shop - view_image.php SQL Injection

sX-Shop - viewimage.php SQL Injection sX-Shop / viewimage.php SQL Injection Author : secret - [email protected] Homepage : http://swissfaking.net/ Date : 05 August, 2010 / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|/ //...

sX-Shop - 'view_image.php' SQL Injection

sX-Shop / viewimage.php SQL Injection Author : secret - [email protected] Homepage : http://swissfaking.net/ Date : 05 August, 2010 / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|/ // sX-Shop / viewimage.php SQL Injection...

sX-Shop - Multiple SQL Injections

sX-Shop SQL Injection Vulnerabilities Author : CoBRa21 Author Web Page :http://ipbul.org Dork : "powered by sX-Shop" Script Page : http://www.source-worx.de/ Sql Injection : http://localhost/path/index.php?product=513' Sql http://localhost/path/question.php?id=-513 union select version Sql...

CVE-2005-2136

The CVE-2005-2136 entry concerns Raritan Dominion SX (DSX) Console Servers (DSX16, DSX32, DSX4, DSX8, DSXA-48). The underlying issue is improper file permissions: world-readable /etc/shadow and world-writable /bin/busybox, enabling local users to obtain password hashes and possibly execute arbitr...

CVE-2005-2136

Raritan Dominion SX DSX Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set 1 world-readable permissions for /etc/shadow and 2 world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users...

CVE-2005-2136

Raritan Dominion SX DSX Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set 1 world-readable permissions for /etc/shadow and 2 world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users...

PT-2005-3068 · Raritan · Raritan Dominion Sx

Name of the Vulnerable Software and Affected Versions: Raritan Dominion SX DSX Console Servers versions DSX16, DSX32, DSX4, DSX8, and DSXA-48 Description: The issue allows local users to obtain hashed passwords or execute arbitrary code as other users due to world-readable permissions for...