Vikingboard 0.2 Beta - 'task' Local File Inclusion

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Vikingboard = 0.2 Beta Local File Inclusion Vulnerability Script: "Vikingboard is a PHP-based discussion forum..." Script site:...

CVE-2008-4131

Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors related to handling of tags with 1 the -t option and 2 the :tag command in the a vi, b ex, c vedit, d view, and e edit programs...

AssetMan 2.5-b - SQL Injection using Session Fixation

============================================================ AssetMan v2.5-b SQL Injection using Session Fixation Attack ============================================================ ; , ,; '. ;: :; :: :: :: :: ': : :. : ;' :: :: ' .' '; ;' '. :: :; ;: :: ; :;. ,;: :: :; :;: ,;" :: ::. ':; ..,.; ;...

AssetMan 2.5-b - SQL Injection using Session Fixation

AssetMan 2.5-b - SQL Injection using Session Fixation ============================================================ AssetMan v2.5-b SQL Injection using Session Fixation Attack ============================================================ ; , ,; '. ;: :; :: :: :: :: ': : :. : ;' :: :: ' .' '; ;' '. ...

AssetMan v2.5-b SQL Injection using Session Fixation Attack

No description provided by source. ============================================================ AssetMan v2.5-b SQL Injection using Session Fixation Attack ============================================================ ; , ,; '. ;: :; :: :: :: :: ': : :. : ;' :: :: ' .' '; ;' '. :: :; ;: :: ; :;. ,...

AssetMan v2.5-b SQL Injection using Session Fixation Attack

Exploit for unknown platform in category web applications =========================================================== AssetMan v2.5-b SQL Injection using Session Fixation Attack =========================================================== ; , ,; '. ;: :; :: :: :: :: ': : :. : ;' :: :: ' .' '; ;' '...

CVE-2008-4116

Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service browser crash or possibly execute arbitrary code via a long type attribute in a quicktime tag 1 on a web page or embedded in a 2 .mp4 or 3 .mov file, possibly related to the Checkstackcook...

CVE-2008-4116

CVE-2008-4116 concerns Apple QuickTime 7.5.5 and iTunes 8.0. The vulnerability is a heap-based buffer overflow triggered by a long type attribute in a QuickTime tag (on a web page or embedded in .mp4/.mov), related to an off-by-one error and potentially associated with Check_stack_cookie. Consequ...

Google Chrome畸形'href'标签拒绝服务漏洞

BUGTRAQ ID: 31034 CNCAN ID：CNCAN-2008090602 Google Chrome是一款谷歌公司新开发的WEB浏览器。 Google Chrome处理特殊构建的'href'标签存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 攻击者需要诱使用户访问包含恶意href'标签链接的WEB页来触发此漏洞。 Google Chrome 0.2.149 27 目前没有解决方案提供： http://www.google.com/chrome !DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"...

CVE-2008-3945

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action...

Sql injection

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action...

CVE-2008-3945

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action...

CVE-2008-3945

The CVE-2008-3945 entry documents a SQL injection in Words tag 1.2 affecting index.php, where the word parameter in a claim action allows remote command execution. This is corroborated by NVD, CVE List, and PRION entries referencing the same flaw with the Words tag 1.2 description. Exploitation r...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

google-download1.txt

Google Chrome Auto Download and Rapid Download By IMC GrahamPhisher Shoutz IMC Tully IMC EXE Shouts To Everyone On The Forums InsaneMasterminds.com To have a file automatically start downloading through google chrome without the users permission is very easy, simple inject the meta refresh tag in...

Words tag script 1.2 (word) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Words tag script 1.2 word Remote SQL Injection Vulnerability ============================================================== || | | Words tag script v1.2 word Remote SQL Injecti...

Words tag script 1.2 - word SQL Injection

Words tag script 1.2 - word SQL Injection || | | Words tag script v1.2 word Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Words tag script 1.2 - 'word' SQL Injection

|| | | Words tag script v1.2 word Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

wordstag-sql.txt

|| | | Words tag script v1.2 word Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

libtiff: use of uninitialized memory in LZW decoder

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...