MLM (Multi Level Marketing) Script - Multiple Vulnerabilities

Exploit for php platform in category web applications 1 SQL Injection Vulnerabilities on Demo Site + productview.php, prdid Param http://server/product/version2/productview.php?prdid='1 + productview.php, uid param http://server/product/version2/profileview.php?uid='1 2 Xss Cross Site Scripting...

Oracle Linux 6 : cifs-utils (ELSA-2012-0902)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0902 advisory. 4.8.1-10 - mount.cifs: don't allow unprivileged users to mount onto dirs they can't chdir into bz 812782 4.8.1-9 - cifs.upcall: use krb5snametoprincipal to...

Paypal BugBounty #13 - Mail Encoding Web Vulnerability

Document Title: =============== Paypal BugBounty 13 - Mail Encoding Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=650 PayPal Security UID: cga1a7oh Release Date: ============= 2013-06-17 Vulnerability Laboratory ID VL-ID:...

PayPal France SQL Injection

Title: ====== PayPal Bug Bounty 78 FR - SQL Injection Vulnerability Date: ===== 2013-05-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=878 PayPal Security UID: Sbc8fSB VL-ID: ===== 878 Common Vulnerability Scoring System: ==================================== 7.6...

Kloxo 6.1.12 Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

DEBIAN-CVE-2013-1959

kernel/usernamespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uidmap and gidmap files, which allows local users to gain privileges by opening a file within an unprivileged process and then modifying the file within a privileged process...

CVE-2013-1979

The scmsetcred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application...

phpwind 刷关注,粉丝

简要描述： phpwind 刷关注,粉丝 详细说明： phpwind 9.0 加关注 刷粉..直接修改uid 后面参数即可.. http://127.0.0.1:8282/index.php?m=my&c=follow&a=add&uid=1 删除也可以 http://127.0.0.1:8282/index.php?m=my&c=follow&a=delete&uid=1 看图吧 漏洞证明： phpwind 9.0 加关注 刷粉..直接修改uid 后面参数即可.. http://127.0.0.1:8282/index.php?m=my&c=follow&a=add&uid=1 删除也...

UBUNTU-CVE-2013-1959

kernel/usernamespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uidmap and gidmap files, which allows local users to gain privileges by opening a file within an unprivileged process and then modifying the file within a privileged process...

PT-2013-3492 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.8.9 Description: The issue concerns a lack of appropriate capability requirements for the uid map and gid map files in the Linux kernel. This allows local users to potentially gain privileges by opening a file...

Paypal Bug Bounty #46 - Persistent Web Vulnerability

Document Title: =============== Paypal Bug Bounty 46 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=805 PayPal Security UID: esj1f86plc Release Date: ============= 2013-03-28 Vulnerability Laboratory ID VL-ID:...

Paypal Bug Bounty #6 - Persistent Web Vulnerability

Document Title: =============== Paypal Bug Bounty 6 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=645 PayPal Security UID: ydh14ayfu Release Date: ============= 2013-03-27 Vulnerability Laboratory ID VL-ID:...

PhpcmsV9 arbitrary user password modification logic vulnerability-vulnerability warning-the black bar safety net

I actually sent the first vulnerability, see Tick: PhpcmsV9 SQL injection 2 0 1 3-year new year the first Mentioned pass code: parsestrsysauth$POST'data', 'DECODE', $this-applist$this-appid'authkey', $this-data; In phpssoserver/phpcms/modules/phpsso/classes/phpsso. class. php. I leave it up to yo...

Linux Kernel 3.0 < 3.3.5 - 'CLONE_NEWUSER|CLONE_FS' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/58478/info Linux kernel is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain kernel privileges, which will aid in further attacks. / / clown-newuser.c -- CLONENEWUSER kernel root PoC Dedicated to: Locke...

Design/Logic Flaw

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call...

PT-2013-1100 · Debian +2 · Debian +2

Name of the Vulnerable Software and Affected Versions: Debian GNU/Linux versions prior to 3.8.11 Linux kernel versions prior to 3.8.11 Description: The issue concerns multiple vulnerabilities in the Linux package of the Debian GNU/Linux operating system, which can be exploited by a local attacker...

Low: Red Hat Security Advisory: squirrelmail security and bug fix update

An updated squirrelmail package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHEL 5 : squirrelmail (RHSA-2013:0126)

An updated squirrelmail package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2012-3317

IBM WebSphere Message Broker 6.1 before 6.1.0.11, 7.0 before 7.0.0.5, and 8.0 before 8.0.0.2 has incorrect ownership of certain uninstaller Java Runtime Environment JRE files, which might allow local users to gain privileges by leveraging access to uid 501 or gid 300...

CVE-2012-4442

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check...