Vastal I-Tech Mag Zone - 'cat_id' SQL Injection

Vastal I-Tech Mag Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/mag-zone-online-library-system.html Demo : http://www.vastal.com/mag/ the exploit fate the password use ur mind for have the column username Exploit:...

Vastal I-Tech DVD Zone - 'cat_id' SQL Injection

Vastal I-Tech DVD Zone catid SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $399.99 : Script Home Page : hhttp://www.vastal.com/dvd-zone-dvd-rental-script.html Demo : http://dvdzone.vastal.com/ Dork : N/A Exploit :...

Vastal I-Tech Freelance Zone - 'coder_id' SQL Injection

Vastal I-Tech Freelance Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/freelance-zone-freelance-auction-script.html Demo : http://www.vastal.com/freelance/ the exploit fate the password use ur mind for have the column username Exploit:...

Vastal I-Tech Jobs Zone - 'news_id' SQL Injection

Vastal I-Tech Jobs Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/jobs-zone-classifieds-script.html Demo : http://www.vastal.com/jobs/ Exploit:...

Vastal I-Tech Cosmetics Zone - 'cat_id' SQL Injection

Vastal I-Tech Cosmetics Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/cosmetics-zone-a-shopping-cart-for-your-cosmetics-shop-online.html Demo : http://www.vastal.com/cosmeticszone/ Exploit:...

Vastal I-Tech MMORPG Zone - 'game_id' SQL Injection

Vastal I-Tech MMORPG Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/mmorpg-zone-sell-mmorpg-online.html Demo : http://www.vastal.com/games/ the exploit fate the password use ur mind for have the column username Exploit:...

FreeBSD Security Advisory (FreeBSD-SA-06:20.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:20.bind.asc ADV FreeBSD-SA-06:20.bind.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

DEBIAN-CVE-2008-3881

Multiple cross-site scripting XSS vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zmhtmlview.php" files...

CORE-2008-0103: Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass Advisory Information Title: Internet Explorer Zone Elevation Restrictions...

CVE-2008-1448

The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via...

CVE-2008-1448

The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via...

Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass

Advisory ID Internal CORE-2008-0103 Advisory Information Title: Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass Advisory ID: CORE-2008-0103 Date published: 2008-08-13 Date of last update: 2008-08-12 Vendors contacted: Microsoft Release mode: Coordinated...

Code injection

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

CVE-2008-3648

The nslookup.exe utility in Microsoft Windows XP SP2 is vulnerable to a Remote Code Execution (RCE) flaw. This vulnerability allows user-assisted remote attackers to execute arbitrary code, a condition demonstrated via an attempted DNS zone transfer . The issue is classified under CWE-94: Imprope...

CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

CVE-2008-3648: Improper Control of Generation of Code

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

CVE-2008-3567

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...

CVE-2008-3567

CVE-2008-3567 affects Winamp before 5.541: cross-zone scripting via the NowPlaying feature allows XSS through an MP3 file with JavaScript in id3 tags. Vulnerable component is Winamp’s NowPlaying metadata handling; root cause is unsanitized id3 tag content rendered by the embedded browser. Observe...

CVE-2008-3567: Improper Neutralization of Input During Web Page Generation

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...