Mozilla Firefox Multiple Vulnerabilities - 01 - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Report Says Engineer Designed Google Street View with Payload Data Gathering in Mind

Google says it released the full FCC report on Street View consumer privacy allegations to hopefully put the matter to rest. But revelations that the code might have been created with surreptitious data gathering in mind is likely to keep the issue very much alive. An article in today’s Los Angel...

ShopEX 爆路径漏洞

简要描述： shopex 很多的核心文件都需要包含其它的类， 但是都没有保护，可以直接访问 详细说明： shopex 很多的核心文件都需要包含其它的类， 但是都没有保护，可以直接访问， 所以可以报错物理路径! 漏洞证明： shopex 很多的核心文件都需要包含其它的类， 但是都没有保护，可以直接访问， 所以可以报错物理路径! 如： http://www.lpboke.com/core/api/shopapi.php http://www.lpboke.com/core/api/site/2.0/apib2b20cat.php...

Red Hat JBoss Products Multiple Vulnerabilities (status page) - Active Check

Red Hat JBoss products are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Openedit <= v5.1294 Remote Code Execution Exploit

Exploit for jsp platform in category web applications !/usr/bin/python Openedit = v5.1294 Remote Code Execution Exploit http://net-ninja.net/blog/?p=553 watch http://www.zeitgeistmovie.com/ Explanation: Vuln 1: Admin hash disclosure Vuln 2: Login with the hash Vuln 3: Unprotected file upload...

Openedit 5.1294 Code Execution

!/usr/bin/python Openedit = v5.1294 Remote Code Execution Exploit http://net-ninja.net/blog/?p=553 watch http://www.zeitgeistmovie.com/ Explanation: Vuln 1: Admin hash disclosure Vuln 2: Login with the hash Vuln 3: Unprotected file upload mrme@pluto openedit$ sudo python ./openown.py -p...

Exposing SCADA Systems With Shodan

Editor’s Note: The U.S.’s Industrial Control System Computer Emergency Response Team ICS-CERT recently issued a warning to its members about the ability of attackers to discover ICS systems using a simple search on Shodan, a public search engine that is used to locate systems accessible from the...

Unprotected QNX qconn Service

A QNX qconn service is running on this host. QNX plans to add some authentication to qconn. Meanwhile, qconn should be used only in development phase. Through this service, it is possible to upload and execute arbitrary code on the host. An attacker can use this service to take complete control o...

DL_Stats Cross Site Scripting / Admin Bypass / SQL Injection

Exploit Title: dlstats Multiple Vulnerabilities Date: 18.04.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |:: General Information |:: Advisory/Exploit Title = dlstats Multiple...

dl_stats Multiple Vulnerabilities

Exploit for php platform in category web applications ================================= dlstats Multiple Vulnerabilities ================================= :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |:: General Information |:: Advisory/Exploit Title = dlstats...

dl_stats - Multiple Vulnerabilities

:::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |:: General Information |:: Advisory/Exploit Title = dlstats Multiple Vulnerabilitie |:: Author = Valentin Hoebel |:: Contact = [email protected] |:: |:: :::::::::::::::::::::::::::::::::::::: 0x2...

dl_stats - Multiple Vulnerabilities

dlstats - Multiple Vulnerabilities :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |:: General Information |:: Advisory/Exploit Title = dlstats Multiple Vulnerabilitie |:: Author = Valentin Hoebel |:: Contact = [email protected] |:: |::...

ShopEx Single 4.5.1 - Multiple Vulnerabilities

ShopEx Single 4.5.1 - Multiple Vulnerabilities Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested...

ShopEx <= Single V4.5.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================ ShopEx = Single V4.5.1 Multiple Vulnerabilities ================================================ Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1...

ShopEx Single 4.5.1 - Multiple Vulnerabilities

Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested on: PHP Cross Site Scripting Cross-Site...

phpMySport 1.4 SQL Injection

Multiple Vulnerabilities in phpMySport v1.4 Name Multiple Vulnerabilities in phpMySport Systems Affected phpMySport v1.4 site http://phpmysport.sourceforge.net/en/ Author Amol Naik amolnaik4atgmail.com Date 18/01/2010 OVERVIEW phpMySport v1.4 is vulnerable to following issues: 1. Multiple SQL...

DeluxeBB存在多个安全漏洞

Bugraq ID: 37448 CVE ID：CVE-2009-4465 CVE-2009-4466 CVE-2009-4467 CVE-2009-4468 DeluxeBB是一款基于PHP的论坛程序。 DeluxeBB存在多个输入验证问题，远程攻击者可以利用漏洞进行跨站脚本，验证绕过和安全绕过等攻击。 具体漏洞如下： -部分管理控制面板文件不受访问保护。 -部分日志文件不受访问保护。 -在用户注册过程之后，简单的发送特殊链接，可绕过邮件注册校验。 -通过访问邮件列表字段的末页获得USERID -存在路径泄漏问题。 DeluxeBB = 1.3 目前没有解决方案提供：...

Mini File Host v1.5 Remote File Upload Vulnerability

No description provided by source. ===================================================================== ========= / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || =====================================================================...

DeluxeBB 1.3 - Multiple Vulnerabilities

DeluxeBB 1.3 - Multiple Vulnerabilities Author: cp77fk4r | Empty0pagEShift+2gmail.com Vendor: http://www.deluxebb.com Directory Listing http://server/templates/ http://server/images/ http://server/logs/ http://server/wysiwyg/ http://server/docs/ http://server/classes http://server/lang...

DeluxeBB <= 1.3 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================== DeluxeBB = 1.3 Multiple Vulnerabilities ======================================== Vendor: http://www.deluxebb.com Directory Listing http://server/templates/ http://server/images/ http://server/logs/...