FTP Service AUTH TLS Plaintext Command Injection

The remote FTP server contains a software flaw in its AUTH TLS implementation that could allow a remote, unauthenticated attacker to inject commands during the plaintext protocol phase that will be executed during the ciphertext protocol phase. Successful exploitation could permit an attacker to...

CVE-2011-1690

Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into sending credentials to an arbitrary server via unspecified vectors...

PHP-Fusion 'articles.php' Cross-Site Scripting Vulnerability

PHP-Fusion 'articles.php' Cross Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/47130/info PHP-Fusion is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically...

Firefox 3.6 < 3.6.16 Invalid HTTP Certificates

The installed version of Firefox 3.6 is earlier than 3.6.16. Such versions have an out-of-date SSL certificate blacklist. A certificate authority CA has revoked a number of fraudulent SSL certificates for several prominent public websites. If an attacker can trick someone into using the affected...

Keynect eCommerce - SQL Injection

Keynect eCommerce - SQL Injection ======================================================================================== | Title : SQL Injection Keynect Ecommerce | | Author : Arturo Zamora | | email : [email protected] | | DAte : 10/03/2011 | | Verified : yes | | Risk : High | |...

IBM WebSphere Application Server 7.0 < Fix Pack 15 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 15 appears to be running on the remote host. As such, it is reportedly affected by the following vulnerabilities : - A double free error in BBOOORBR control block could trigger a denial of service condition. PM17170 - A cross-site scripting...

Maian Weblog 4.0 - Blind SQL Injection

Maian Weblog 4.0 - Blind SQL Injection ?php / maian weblog = v4.0 Remote Blind SQL Injection Exploit vendor: http://www.maianscriptworld.co.uk/ Thanks to Johannes Dahse: http://bit.ly/dpQXMK Explanation: Lines 335 - 341 of the index.php we see this if statement that concerns our variable $bpost. ...

DSA-2177-1 pywebdav - SQL injection

Bulletin has no description...

Microsoft Windows Vista7 - Local Privilege Escalation (UAC Bypass)

Microsoft Windows Vista7 - Local Privilege Escalation UAC Bypass A Design Flaw in Windows Kernel API can Lead to privilege escalation. Mirror of Original Post: http://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista7-mirror/ PoC:...

rsh Authentication Scanner

This module will test a shell rsh service on a range of machines and report successful logins. NOTE: This module requires access to bind to privileged ports below 1024. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

DBSite - SQL Injection

!/usr/bin/env python -- coding: utf-8 -- -------------------------------------------------------- Exploit Title: DBSite Remote SQL Injection Vulnerability Date: 13/10/2010 Author: GodOfPain Version: 1.0 Tested on: Linux --------------------------------------------------------...

Firm Finds Gaping Holes in Mobile Payments Applications

eBay’s PayPal online payment division is rushing a software patch to users of its iPhone mobile payments application to plug a hole that leaves users vulnerable to man-in-the-middle and phishing attacks, but the firm that found that hole said transaction security is just one problem facing the...

Allow to specify which user to be used in trusted connection with JIRA

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-21127. panel This is an improvement request to allow specifying which user to be used in trusted connection with JIRA. Proposed...

GeekLog v1.3.8 (filemgmt) SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== GeekLog v1.3.8 filemgmt SQL Injection Vulnerability ===================================================== Author : Gamoscu Homepage : http://www.1923turk.com Blog...

GeekLog 1.3.8 (filemgmt) - SQL Injection

GeekLog 1.3.8 filemgmt - SQL Injection GeekLog v1.3.8 filemgmt SQL Injection Vulnerability Author : Gamoscu Homepage : http://www.1923turk.com Blog :http://gamoscu.wordpress.com/ Script : http://www.geeklog.net/filemgmt/viewcat.php?cid=8 Download:http://www.geeklog.net/filemgmt/viewcat.php?cid=8...

CVE-2008-7261

The Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-010 records DEBUG messages containing user credentials in the log4j.xml file, which might allow local users to obtain sensitive information by reading this file...

Design/Logic Flaw

The Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-010 records DEBUG messages containing user credentials in the log4j.xml file, which might allow local users to obtain sensitive information by reading this file...

Joomla JooStock NasdaQ v1.5.0 Persistent Xss Vulnerability

Exploit for php platform in category web applications ========================================================== Joomla JooStock NasdaQ v1.5.0 Persistent Xss Vulnerability ==========================================================...

n.runs-SA-2010.001 - Alcatel-Lucent - unauthenticated administrative access to CTI CCA Server

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.001 20-September-2010 Vendor: Alcatel Affected Products: Versions before 9.0.8.4 of the CCAgent option of OmniTouch Contact Center Standard Edition Vulnerability: unauthenticated administrative access to CTI CCA Server Risk: High...

Invision Power Board <= 3.1.2 BBCode XSS Vulnerability

Invision Power Board is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...