MS10-010: Vulnerability in Windows Server 2008 Hyper-V Could Allow Denial of Service (977894)

The remote host is affected by a denial of service flaw that exists in Hyper-V. A local attacker can leverage this to crash all the VMs on the remote host. To successfully exploit this vulnerability, an attacker would need an account on one of the remote VMs and be able to execute arbitrary code ...

[DSECRG-09-011] HP StorageWorks 1_8 G2 Tape Autoloader - privilege escalation DOS

Digital Security Research Group DSecRG Advisory DSECRG-09-011 Application: HP StorageWorks 1/8 G2 Tape Autoloader Versions Affected: firmware v 2.30 and earlier Vendor URL: http://hp.com/ Bug: Privilege escalation Exploits: YES Reported: 30.09.2008 Vendor Response: 30.09.2008 Date of Public...

Joomla Component jVideoDirect Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla Component jVideoDirect Blind SQL Injection Vulnerability =============================================================== ...BEGIN ADVISORY...

AIX 530010 : U823146

The remote host is missing AIX PTF U823146 which is related to the security of the package devices.vdevice.IBM.v-scsi.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Cross site request forgery (csrf)

scripts/setup.php aka the setup script in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the 1 configuration and 2 v0 parameters, which might allow remote attackers to conduct cross-site request forgery CSRF attacks via unspecified vectors...

CVE-2009-4605

scripts/setup.php aka the setup script in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the 1 configuration and 2 v0 parameters, which might allow remote attackers to conduct cross-site request forgery CSRF attacks via unspecified vectors...

DEBIAN-CVE-2009-4605

scripts/setup.php aka the setup script in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the 1 configuration and 2 v0 parameters, which might allow remote attackers to conduct cross-site request forgery CSRF attacks via unspecified vectors...

Surge FTP Admin Web Module Directory Traversal

======================================================================================== | Title : SURGE FTP ADMIN WEB Module Version 2.0 Apache Tomcat v.5.5.26 Directory Traversal Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi -...

SLAED CMS 2.0 XSS / Backup

======================================================================================== | Title : SLAED CMS v.2.0 ARABIC VERSION Multi Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found ...

W-Agora 4.2.1 XSS / RFI

======================================================================================== | Title : W-Agora v.4.2.1 Multiple Vulnerabilities | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 2 | High...

GOM player V 2.1.9 Local crash poc

Exploit for unknown platform in category dos / poc ================================== GOM player V 2.1.9 Local crash poc ================================== Title: GOM player V 2.1.9 Local crash poc CVE-ID: OSVDB-ID: Author: SarBoT511 Published: 2010-01-02 Verified: yes view source print?...

jetAudio 8.0.0.0 Local Crash

!/user/bin/perl Exploit Title: Local Crash Poc Date: Fri/Dec/25/2009 Author: D3V!L FUCKER Software Link: http://www.jetaudio.com Version: jetAudio v 8.0.0.0 Basic Tested on: windows vista sp0 Code : my $file= "crash.asx"; my $boom=...

Gallery 2.3 Remote File Inclusion

======================================================================================== | Title : Gallery V 2.3 RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com | |...

e-pay 1.55 RFI Vulnerability

Exploit for unknown platform in category web applications ============================ e-pay 1.55 RFI Vulnerability ============================ ======================================================================================== | Title : e-pay 1.55 RFI Vulnerability | | Author : indoushka |...

kooora 3.0 - AR Cross-Site Scripting

======================================================================================== | Title : kooora v 3.0 AR Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID : | ...

file upload Ar Version Upload Shell Vulnerability

Exploit for unknown platform in category web applications ================================================= file upload Ar Version Upload Shell Vulnerability ================================================= ======================================================================================== ...

jetAudio v 8.0.0.0 Basic Local Crash PoC

No description provided by source. !/user/bin/perl Exploit Title: Local Crash Poc Date: Fri/Dec/25/2009 Author: D3V!L FUCKER Software Link: http://www.jetaudio.com Version: jetAudio v 8.0.0.0 Basic Tested on: windows vista sp0 Code : my $file= "crash.asx"; my $boom=...

JetAudio Basic 7.5.5.25 - '.asx' Buffer Overflow (PoC)

!/user/bin/perl Author: D3V!L FUCKER Version: jetAudio v 7.5.5.25 Basic Tested on: windows vista sp0 Code : my $file= "crash.asx"; my $boom= "http://"."AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" x 5000; open$FILE,"$file"; print $FILE "$boom"; close$FILE; print...

eWebquiz 8 - Blind SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: multi Blind SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: eWebquiz v 8 author: R3d-D3v!L Date: 18.dec.2009 T!ME: 12:00 am ? Home: WwW.xP10.ME ? contact: N/A ?...

eWebquiz 8 - Blind SQL Injection

eWebquiz 8 - Blind SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: multi Blind SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: eWebquiz v 8 author: R3d-D3v!L Date: 18.dec.2009 T!ME: 12:00 am ? Home: WwW.xP10.ME ?...