Wmshop Premium Database Config Disclosure

Cyber-Warrior & Security TIM - Bug Researchers Group Application Name : Wmshop Premium v.8.1 - 12.0 - 13.0 Vulnerable Type : Arbitrary Database Config Disclosure Vulnerability Infection : SQL Info Get... Author : Septemb0x Script Down.& WebSite : http://s2.dosya.tc/wmshop12.rar.html -...

Wmshop 6.0 Password Disclosure

Cyber-Warrior & Security TIM - Bug Researchers Group Application Name : Wmshop 6.0 - 5.08 Vulnerable Type : Arbitrary Forum Password Disclosure Vulnerability Infection : Forum Password Get... Author : Septemb0x Script Down.& WebSite : http://s2.dosya.tc/wmshop6.0.rar.html -...

Valentina Cookie Handling Privilege Escalation

Cyber-Warrior & Security TIM - Bug Researchers Group Application Name : Valentina Vulnerable Type : Cookie Handling Vulnerebility Infection : SQL Info GET... Author : Septemb0x Script Down.& WebSite : http://s2.dosya.tc/valentina.zip.html - http://www.valya.ru Cyber-Warrior & Security TIM - Bug...

BASE 1.2.4 Authentication Bypass

Authentication Bypass in BASE version 1.2.4 and prior - Insecure Cookie Handling Vulnerability -------------------------------------------- Author.: Tim Medin Contact: nidem.nidem at gmail d0t com -------------------------------------------------------------------------------------------------...

BASE <= 1.2.4 (Auth Bypass) Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================== BASE = 1.2.4 Auth Bypass Insecure Cookie Handling Vulnerability ================================================================== Authentication Bypass in BASE version 1.2...

CentOS 3 / 4 / 5 : qt (CESA-2007:0721)

Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...

Sir Tim Berners-Lee is a cybercrime victim

By Richard Gray, Telegraph.co.uk Sir Tim Berners-Lee, the creator of the worldwide web, has revealed how he fell victim to online fraudsters while trying to buy a gift over the internet. From the article: “The worst thing that has happened to me was when I tried to buy a Christmas present from a...

RedHat Update for autofs5 RHSA-2007:1177-01

Check for the Version of autofs5 OpenVAS Vulnerability Test RedHat Update for autofs5 RHSA-2007:1177-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Pre Real Estate Listings File Upload Vulnerability

No description provided by source. Pre Real Estate Listings login.php ByPass /File Upload Script:Pre Real Estate Listings HomePage:http://preproject.com/ Demo:http://preproject.com/ulisting/ Author:BackDoor By Pass Exploit: http://victim.com/scriptpath/login.php username:'or' password:'or' Live...

Pre Real Estate Listings - Arbitrary File Upload

Pre Real Estate Listings login.php ByPass /File Upload Script:Pre Real Estate Listings HomePage:http://preproject.com/ Demo:http://preproject.com/ulisting/ Author:BackDoor By Pass Exploit: http://victim.com/scriptpath/login.php username:'or' password:'or' Live Demo:...

Pre Real Estate Listings - Arbitrary File Upload

Pre Real Estate Listings - Arbitrary File Upload Pre Real Estate Listings login.php ByPass /File Upload Script:Pre Real Estate Listings HomePage:http://preproject.com/ Demo:http://preproject.com/ulisting/ Author:BackDoor By Pass Exploit: http://victim.com/scriptpath/login.php username:'or'...

WebSVN &lt;= 2.0 (XSS/FH/CE) Multiple Remote Vulnerabilities

No description provided by source. WebSVN = 2.0 Multiple Vulnerabilities October 20, 2008 Vendor : Tim Armes URL : http://websvn.tigris.org Version : WebSVN = 2.0 Risk : Multiple Vulnerabilities Description: WebSVN is an online SVN repository viewer. The description taken from the project website...

WebSVN 2.0 - Cross-Site Scripting File Handling Code Execution

WebSVN 2.0 - Cross-Site Scripting File Handling Code Execution WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Handling Issues: There are some file handling issues in the RSS...

WebSVN <= 2.0 (XSS/FH/CE) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Ha...

aflistenerdirectorytraversal-08_006.txt

Portcullis Security Advisory - 08-006 Vulnerable System: Affinium Campaign Vulnerability Title: The Listener is vulnerable to directory traversal. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Tim Brown - Portcullis Computer-Security Ltd...

afurlxss-08_005.txt

Portcullis Security Advisory - 08-005 Vulnerable System: Affinium Campaign Vulnerability Title: The web application's parameters are vulnerable to reflected JavaScript injection. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Tim Brown -...

Linux Kernel 2.4 uselib() Privilege Elevation Exploit

No description provided by source. / Linux kernel 2.4 uselib privilege elevation exploit. original exploit source from http://isec.pl reference: http://isec.pl/vulnerabilities/isec-0021-uselib.txt I modified the Paul Starzetz's exploit, made it more possible to race successfully. The exploit stil...

CVE-2008-1536

The CVE-2008-1536 entry concerns a cross-site scripting (XSS) vulnerability in the index.php of Pictures Pro (aka Tim Grissett) Photo Cart 4.1. The flaw allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. Affected software is Pictures Pro Photo Cart 4.1; the...

joovili-rfi.txt

Bulan : Cr@zyKing Thanks : DreamTurk & CrackersChild & Eno7 & TheBekir & Pablin77 & Byond Crew & sys7ech Script : Joovili Versiyon : v2.1 Google Dork : © Powered by Joovili v.2.1 Risk : Remote File İnclude Error : include $hlp."include/settings.inc.php"; include $hlp."include/replace.inc.php";...

SA-2008-011 - Securesite - Access bypass

The Secure Site module provides functions for placing your site behind HTTP based authentication. The module contains a flaw that allows an attacker who is behind the same proxy as a logged in user, to access the site as if the attacker is the user. Versions affected Secure Site for Drupal 5.x an...