rapidCMS V2 Authentication Bypass

Exploit for php platform in category web applications ================================= rapidCMS V2 Authentication Bypass ================================= Exploit Title: rapidCMS V2 Authentication Bypass Date: 18/07/2010 Author: Mahjong Software Link: www.rapidcms.de Version: V2 Tested on: Linux...

SuSE9 Security Update : Tomcat (YOU Patch Number 12585)

This update of tomcat5/6 fixes : - CVSS v2 Base Score: 5.8. CVE-2009-2693 - CVSS v2 Base Score: 4.3 Directory traversal vulnerability allowed remote attackers to create or overwrite arbitrary files/dirs with a specially crafted WAR file. CVE-2009-2902 - CVSS v2 Base Score: 4.3 When autoDeploy is...

Multi Auktions Komplett System 2 Blind SQL Injection

----------------------------Information------------------------------------------------ +Name : Multi Auktions Komplett System V2 1 ----------------------------------------------------------------------------------------- Exp...

[SECURITY] Fedora 11 Update: nss-3.12.6-1.2.fc11

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

CH-CHS.ch 2 Shell Upload

======================================================================================== | Title CH-CMS.ch-V2 Upload Vulnerability | Author El-Kahina | email please forgive me | | Web Site http://kewlshare.com/dl/f1b6b4d587ab/95Final2bugfixinstall.rar.html | Script copyright 2007/08 by grillmeist...

CH-CMS.ch-V2 Upload Vulnerability

Exploit for unknown platform in category web applications ================================= CH-CMS.ch-V2 Upload Vulnerability ================================= ======================================================================================== | Title CH-CMS.ch-V2 Upload Vulnerability | Auth...

CH-CMS.ch 2 - Arbitrary File Upload

CH-CMS.ch 2 - Arbitrary File Upload ======================================================================================== | Title CH-CMS.ch-V2 Upload Vulnerability | Author El-Kahina | email please forgive me $ | Web Site http://kewlshare.com/dl/f1b6b4d587ab/95Final2bugfixinstall.rar.html $ |...

CH-CMS.ch 2 - Arbitrary File Upload

======================================================================================== | Title CH-CMS.ch-V2 Upload Vulnerability | Author El-Kahina | email please forgive me $ | Web Site http://kewlshare.com/dl/f1b6b4d587ab/95Final2bugfixinstall.rar.html $ | Script copyright 2007/08 by...

openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-1993)

This update of php5 fixes: CVE-2008-5624: CVSS v2 Base Score: 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P: Permissions, Privileges, and Access Control CWE-264 CVE-2008-5625: CVSS v2 Base Score: 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P: Permissions, Privileges, and Access Control CWE-264 CVE-2008-5814: CVSS v2...

Sablog-X v2.x 任意变量覆盖漏洞

由于Sablog-x v2.x的common.inc.php里$EVO初始化处理存在逻辑漏洞，导致可以利用extract来覆盖任意变量，最终导致xss、sql注射、代码执行等很多严重的安全漏洞。 common.inc.php代码里： .... $onoff = functionexists'iniget' ? iniget'registerglobals' : getcfgvar'registerglobals'; if $onoff != 1 @extract$COOKIE, EXTRSKIP; @extract$POST, EXTRSKIP; @extract$GET,...

Sablog-X v2. x is an arbitrary variable overwrite vulnerability-vulnerability warning-the black bar safety net

author: 80vul-B team:http://www. 80vul. com A description of Syria: the Due to the Sablog-x v2. x common. inc. php in the$EVO the initialization process there is a logical vulnerability, leading to can use extractto overwrite any of the variables, eventually leading toxss, sql injection, code...

Multiple File Attachments Mail Form Pro v2 - WebShell upload

Exploit for unknown platform in category web applications ============================================================ Multiple File Attachments Mail Form Pro v2 - WebShell upload ============================================================ Exploit Title: Multiple File Attachments Mail Form Pro v...

Authentium SafeCentral <= 2.6 shdrv.sys local kernel ring0 SYSTEM exploit

No description provided by source. / safecentral-unharden-v2.c Copyright c 2009 by [email protected] Authentium SafeCentral = 2.6 shdrv.sys local kernel ring0 SYSTEM exploit by mu-b - Thu 3 Sep 2009 - Tested on: shdrv.sys 2.0.0.146 Compile: MinGW + -lntdll - Private Source Code -DO NOT DISTRIBU...

Authentication flaw

The 1 CHAP and 2 MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator PPPAC function in Internet Initiative Japan SEIL/B1 firmware 1.00 through 2.52 use the same challenge for each authentication attempt, which allows remote attackers to bypass authentication via a replay attack...

CVE-2009-4409: Improper Authentication

The 1 CHAP and 2 MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator PPPAC function in Internet Initiative Japan SEIL/B1 firmware 1.00 through 2.52 use the same challenge for each authentication attempt, which allows remote attackers to bypass authentication via a replay attack...

CVE-2009-4140

The Open Flash Chart library (specifically ofc_upload_image.php ) contains an unrestricted file upload vulnerability caused by improper validation of the name parameter. When register_globals is enabled, remote authenticated users can execute arbitrary code by uploading a file with an executable ...

WordPress Plugin Pyrmont 2.x - SQL Injection

WordPress Plugin Pyrmont 2.x - SQL Injection WordPress and Pyrmont V2. SQL Injection Vulnerability Plugin Home: http://wordpress.org/extend/themes/pyrmont-v2 Author: Gamoscu Site: www.1923turk.biz Site: http://gamoscu.wordpress.com/ Exploit:...

WordPress Plugin Pyrmont 2.x - SQL Injection

WordPress and Pyrmont V2. SQL Injection Vulnerability Plugin Home: http://wordpress.org/extend/themes/pyrmont-v2 Author: Gamoscu Site: www.1923turk.biz Site: http://gamoscu.wordpress.com/ Exploit:...

WordPress and Pyrmont V2. SQL Injection Vulnerability

No description provided by source. WordPress and Pyrmont V2. SQL Injection Vulnerability Plugin Home: http://wordpress.org/extend/themes/pyrmont-v2 Author: Gamoscu Site: www.1923turk.biz Site: http://gamoscu.wordpress.com/ Exploit:...

WordPress and Pyrmont V2. SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== WordPress and Pyrmont V2. SQL Injection Vulnerability ===================================================== WordPress and Pyrmont V2. SQL Injection Vulnerability Plugin Home:...