prev · 03.02.2008 · next 
| Mon | Tue | Wed | Thu | Fri | Sat | Sun |
| 1 | 2 | 3 | ||||
| 4 | 5 | 6 | 7 | 8 | 9 | 10 |
| 11 | 12 | 13 | 14 | 15 | 16 | 17 |
| 18 | 19 | 20 | 21 | 22 | 23 | 24 |
| 25 | 26 | 27 | 28 | 29 | ||
IpSwitch WS_FTPSERVER with SSH remote Buffer Overflow
( 656 days 18 hours ago)
#IpSwitch WSFTPSERVER with SSH remote Buffer Overflow # # Website: # # Version:6.1.0.0 ( last one,others might be vuln too ) # # Bug: Remote Buffer Overflow ( CD) # # (8e8.a78): Access violation - code c0000005 (first chance) # First chance exceptions are reported before any exception handling. ...
Wordpress Pluging wp-footnotes 2.2 (admin_panel.php) Multiple Vulnerabilites
( 656 days 18 hours ago)
Wordpress Plugin wp-footnotes 2.2 adminpanel.php Multiple Vulnerabilities Founded: 1st, February 2008 Founder: NBBN 1) No Access Control. An attacker can access the adminpanel of the footnotes. The result -> Many XSS Vulnerabilities. because no defines of variables. And ...
[ MDVSA-2008:033 ] - Updated ruby-gnome2 packages fix arbitrary code execution vulnerability
( 656 days 18 hours ago)
Mandriva Linux Security Advisory MDVSA-2008:033 Package : ruby-gnome2 Date : February 1, 2008 Affected: 2007.1, 2008.0 Problem Description: A format string vulnerability in Ruby-GNOME 2 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute ...
phpShop <= v 0.8.1 Remote SQL injection / Filter Bypass
( 656 days 18 hours ago)
Vendor : PHPShop Webiste : Version : v0.8.1 Author: the redc0ders / theredc0ders[at]gmail[dot]com Condition: magicquotegpc = off , in php.ini setting Details : Vulnerable Code in index.php near lines 98 - 128 [code] // basic SQL inject detection $myinsecurearray = array('keyword' => $REQUEST['keyword'], ...
ITech Classifieds Multiple Remote Vulnerabilities
( 656 days 18 hours ago)
Title : ITech Classifieds Multiple Remote Vulnerabilities Author : CrackersChild Bug : SQL Injection XSS Demo : Exp : /ViewCat.php?CatID= Exp : /ViewCat.php?CatID=SQL Injection /* Greetz : www.aq.com www.sibersavascilar.com www.biyofrm.com
Domain Trader v2.0 Xss Vulnerable
( 656 days 18 hours ago)
title : Domain Trader v2.0 Xss Vulnerable Author : CrackersChild [ cybermilitan (at) hotmail (dot) com ] Exploit : www.site.com/script/catalog.php?mode=viewcategory&id= Dork : Powered by Domain Trader v2.0 - Domain parking software Greetz : www.biyofrm.com & www.sibersavascilar.com
[ MDVSA-2008:032 ] - Updated boost packages fix DoS vulnerabilities
( 656 days 18 hours ago)
Mandriva Linux Security Advisory MDVSA-2008:032 Package : boost Date : February 1, 2008 Affected: 2007.0, 2007.1, 2008.0 Problem Description: Tavis Ormandy and Will Drewry found that the bost library did not properly perform input validation on regular expressions. An attacker ...
Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities
( 656 days 18 hours ago)
Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities by NBBN 2nd, February 2008 1) File Disclosure Open the following url you can see the config data of wordpress, with the mysql-server username and password. In this file you usually have write ...
The Everything Development System - SQL Injection
( 656 days 18 hours ago)
Application: The Everything Development System Version(s): <= Pre-1.0 (current version at time of release) Author: sub < subatroom641a.net > Released: 2/1/2008 There exists a vulnerability in The Everything Development Engine that allows a user to inject their own SQL to modify a SELECT query, leading ...
Sun JRE / JDK bug introduces XXE possibilities
( 656 days 18 hours ago)
Hi, Now that Sun has fixed this in JDK6u4, I thought this might be of interest to people: Essentially, one common XXE protection method was broken in the default XML parser, in JDK6. In particular, I'm worried about web services (and other server-side ...
Youtube Clone Xross Site Scripting (load_message.php)
( 656 days 18 hours ago)
Discovered by Smasher CMS: Youtube Clone Script Site: WarWolfZ Security Crew. Hello i don't know if this vuln is already out , but i've searched in securityfocus and is not present. Bug found in loadmessage.php at line 4: Ex: [pleasewait]=[XSS] Fix: ...
Titan FTP Server Remote Heap Overflow (USER/PASS)
( 656 days 18 hours ago)
#Titan FTP SERVER REMOTE HEAP OVERFLOW(USER/PASS) #Impact : Critical # # Windbg Output: #(bec.528): Access violation - code c0000005 (first chance) #First chance exceptions are reported before any exception handling. #This exception may be expected and handled. #eax=41414141 ebx=00000000 ecx=07e415f4 edx=00000000 esi=41414141 edi=07e415f4 ...
prev · 03.02.2008 · next
