Allomani Mobile version 2.5 remote blind SQL injection exploit.
7e696dbecf7d1b0ea1a2d4d691a04e19f5d28817b057e91aa6fe349dc0a30d26
NcFTPd versions 2.8.5 and below suffer from a remote jail breakout vulnerability.
b2bf4a5aea9c062d1d05584c6022e3f8ed594518709e22b1819c89d8679383a4
VLC versions 1.0.0 and below suffer from an integer underflow.
650aca25cb84d71eb4fa0785a245cabb44834ea872441694d0a5359c9abff262
Mandriva Linux Security Advisory 2009-159 - Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information. This update provides fixes for this vulnerability.
4cfbb77d5d4a06892bbc033b3f46ff6cc6e002285db70184ab9ec0d512d3ddff
Free Arcade Script suffers from a cross site scripting vulnerability.
939dc0299f67a27713aa617f21e923bf65da9474d9bca204d8c4b7879527cc61
Aiocp version 1.4.001 suffers from a remote file inclusion vulnerability.
4a7ffa98d9542a67a3d0870b7089348ae193ac66b629b4d67c77af378c61a5b7
Shop Script suffers from a cross site scripting vulnerability.
a0d7bf84643a51b224e5a106f55ef4a95b1217a67a989cea1d8eab731f9cb9c0
The Joomla Global component version 1.0.12 suffers from a remote blind SQL injection vulnerability.
0b75e3e64fba76b5e9eb26e178d3314ebfd447219a81a9e374c4189dd69f4a2b
Whitepaper discussing a large amount of PHP filesystem attack vectors. Take Two.
50ea2f5921192ef048630929273e79e8dc80d288a30593b6b7ef6639a9180257
Gerix Wifi Cracker New Generation - The software that even your grandmother knows how to use!This is a GUI for Aircrack-NG.
c7ed615bb00b4b74f8095cf65ffda1c421ea5a2f702ef1863dcf061c6b8ceb2c
PunBB Automatic Image Upload versions 1.3.5 and below delete arbitrary file exploit.
353a738430aee548fbdba582da6c1a7f18668c3a568c6831b72b694e107e732f
PunBB Automatic Image Upload versions 1.3.5 and below remote SQL injection exploit.
474c2718d85694ec6a12dd3f52570d10a57574a6078df3a716059c0c75160531
Inout Adserver suffers from a remote SQL injection vulnerability.
dbc326086ace9cb2b1e132f6e6af1bde8fdd287cb933fde16779c97b887d2335
Debian Security Advisory 1841-1 - It was discovered that git-daemon which is part of git-core, a popular distributed revision control system, is vulnerable to denial of service attacks caused by a programming mistake in handling requests containing extra unrecognized arguments which results in an infinite loop. While this is no problem for the daemon itself as every request will spawn a new git-daemon instance, this still results in a very high CPU consumption and might lead to denial of service conditions.
1f5b8e7954072461cfe46ca03ff4605326d8249ac2a4059a4ff2b23c889b8ad7
sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.
064615194602c26710703b3deed8a2816ed54cc60be8158ba43dfffed85c1e3b
iWiccle version 1.01 suffers from local file inclusion and remote SQL injection vulnerabilities.
1d4e4a2c12bb31ec71f6f90d16e9e393e6a4cc99f25246b55900bf5b27e347a4
URA version 3.0 suffers from a remote SQL injection vulnerability.
92739b820be2bdf4a92acbe342a61bde7764b8f15a6ea6fa866a8bf94cbd8873
Super Mod System version 3.1.5 suffers from a remote SQL injection vulnerability.
7f154fecce9660fde37cbb8e51f9989259ed0fbd1a5dc5f4e1e6b644e920f5ea
PHP Paid 4 Mail Script suffers from a remote file inclusion vulnerability in home.php.
1edbb52e6588ae909d94eefea70e81d1f4ded15361b7f0f876bac23cef4ab8bb
Whitepaper called Avoiding SQL Injection.
ce7c12a78d78f6515a93894067759b44e5852c3030226940c1376089ddda2179
Smart ASP Survey suffers from a remote blind SQL injection vulnerability.
75336e4e53681b6f8d5369b63ca34bed25b6b2967ab40df73daa211b6ff28d67
Review Post Pro suffers from a cross site scripting vulnerability.
e40863aa3dae01a09aa7fa93e76efb257aed47a5a6b6453e44fb6cc71e03d770
Easy Publish version 3.0 suffers from a cross site scripting vulnerability.
2495597ef40444adc0775ca0c464553e6b88318103a9a3fd9f901c77e4283f5a
Easy News version 4.0 suffers from a cross site scripting vulnerability.
2385d8386b9c3517a84e3835091f28da0dfb40320c762360633cb3119d53da96
Garage Sales Script suffers from SQL injection and cross site scripting vulnerabilities.
300f3a31c09d1e8e0814c7fb1c6b622d0b8fd8cc81ae6bf72645f2e82d21ce13