papers

What this paper is This paper details a Local File Inclusion (LFI) vulnerability in the Scriptegrator plugin for Joomla! version 1.5.5. LFI vulnerabilities allow an attacker to include and execute files from the server's

What this paper is This paper details a Cross-Site Scripting (XSS) vulnerability in Oracle HTTP Server (OHS) versions 10g. The core issue is that OHS fails to properly sanitize the header from an HTTP request when reflec

What this paper is This paper describes a Metasploit module that exploits a stack-based buffer overflow vulnerability in IBM Tivoli Endpoint Manager. The vulnerability exists in how the service, listening on TCP port 949

What this paper is This paper details a local privilege escalation exploit for specific versions of the DEC Alpha Linux kernel (2.6.28 and 3.0). The exploit leverages a vulnerability in how the kernel handles socket stru

What this paper is This paper, published in 2011 by Karthik R, details multiple vulnerabilities found in Subrion CMS. It specifically highlights an SQL injection (SQLi) vulnerability that can be used for authentication b

What this paper is This paper, "Technote 7.2 - Blind SQL Injection" by BlueH4G, details a method for performing blind SQL injection attacks against a specific web application, Technote version 7.2, when it uses MySQL 3.x