H.264 DVR Camera Remote File Discolure Vulnerability

Exploit for hardware platform in category web applications This is private exploit. You can buy it at https://0day.today...

MyBB HM My Country Flags SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit title: HM My Country Flags SQL Injection Author: JoinSe7en Contact: join7 +at+ riseup.net Tested on: Linux Category: Web Applications Software link: http://mods.mybb.com/view/hm-my-country-flags HM My Country Flags has a SQL Injection...

MyBB HM My Country Flags - SQL Injection

MyBB HM My Country Flags - SQL Injection Exploit title: HM My Country Flags SQL Injection Author: JoinSe7en Contact: join7 +at+ riseup.net Tested on: Linux Category: Web Applications Software link: http://mods.mybb.com/view/hm-my-country-flags HM My Country Flags has a SQL Injection vulnerability...

MyBB HM My Country Flags - SQL Injection

Exploit title: HM My Country Flags SQL Injection Author: JoinSe7en Contact: join7 +at+ riseup.net Tested on: Linux Category: Web Applications Software link: http://mods.mybb.com/view/hm-my-country-flags HM My Country Flags has a SQL Injection vulnerability. If we go to a thread we'll see a countr...

Thinksns Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

Mojarra: deployed web applications can read FacesContext from other applications under certain conditions

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function...

Mojarra: deployed web applications can read FacesContext from other applications under certain conditions

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

MyBB User Profile Skype ID Plugin - Post SQL Injection Vulnerability

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

WHMCS 5.1.3 Full Path Disclosure vulnerabilities

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

MyBB DyMy User Agent Plugin - newreply.php SQL Injection

MyBB DyMy User Agent Plugin - newreply.php SQL Injection Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username...

MyBB DyMy User Agent SQL Injection

Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username We fire up HTTP Live Headers or a similar tool, post...

MyBB DyMy User Agent Plugin (newreply.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username We...

MyBB DyMy User Agent Plugin - 'newreply.php' SQL Injection

Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username We fire up HTTP Live Headers or a similar tool, post...

XSS vulnerability in swfupload in ExpressionEngine

Hello 3APA3A! Here is information about Cross-Site Scripting vulnerability in swfupload in ExpressionEngine. After publication of my advisory XSS vulnerability in web applications with swfupload: AionWeb, Magento, Liferay Portal, SurgeMail, symfony http://securityvulns.ru/docs28761.html and after...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Site Builder RumahWeb Arbitrary Config File Disclosure Vulnerability

Exploit for php platform in category web applications ========================================================================================== Site Builder RumahWeb Arbitrary Config File Disclosure Vulnerability...

Fedora Update for mod_security FEDORA-2012-18315

Check for the Version of modsecurity OpenVAS Vulnerability Test Fedora Update for modsecurity FEDORA-2012-18315 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

[SECURITY] Fedora 17 Update: mod_security-2.7.1-3.fc17

ModSecurity is an open source intrusion detection and prevention engine for web applications. It operates embedded into the web server, acting as a powerful umbrella - shielding web applications from attacks...