rot13-lfi.txt

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= Rot 13 = enkrypt.php Remote File Disclosure Vulnerability Script: Rot 13 Download: http://www.holtstraeter.com/cybercheffe/scriptsharing/php/categories/misc/rot13.zip Class: Remote File Disclosure Vulnerability Discover: BorN To K!LL...

Linux Kernel 2.6.17 - 'Sys_Tee' Local Privilege Escalation

source: https://www.securityfocus.com/bid/22823/info The Linux kernel is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to gain superuser privileges, facilitating the complete compromise of affected computers. Linux 2.6.16 - 2.6.17.6 local root...

[SECURITY] Fedora Core 6 Update: nss-3.11.5-0.6.0.fc6

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

[SECURITY] Fedora Core 5 Update: nss-3.11.5-0.5.0.fc5

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

SaphpLesson v3.0 SQL Injection Exploit

//////////////////2007///////////////////// //SaphpLesson v3.0 SQL Injection Exploit// ////////////////////////////////////////// Found by:SwEET-DeViL&HaCKeR sUn TeaM AL-GaRNi------------------ Application : SaphpLesson------ version : v3.0----------------- URL : No-----------------------...

CVE-2007-1041

The CVE-2007-1041 entry affects S&H Computer Systems News Rover 12.1 Rev 1, with multiple stack-based buffer overflows triggered by a crafted .nzb file containing a long group or subject string. This allows remote attackers to execute arbitrary code. The vulnerability details describe a straightf...

S-Gastebuch 1.5.3 - gb_pfad Remote File Inclusion

S-Gastebuch 1.5.3 - gbpfad Remote File Inclusion S-Gästebuch //'=============================================================================================== //'Script Name: S-Gästebuch //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... //Basi...

S-Gastebuch 1.5.3 - 'gb_pfad' Remote File Inclusion

S-Gästebuch //'=============================================================================================== //'Script Name: S-Gästebuch //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... //Basic exploit,but any time : var path="/inc/" var...

S-Gastebuch <= 1.5.3 (gb_pfad) Remote File Include Exploit

Exploit for unknown platform in category web applications ========================================================== S-Gastebuch S-Gastebuch //'=============================================================================================== //'Script Name: S-Gastebuch //'.... //'...

S-Gastebuch &lt;= 1.5.3 (gb_pfad) Remote File Include Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleS-Gästebuch = V.1.5.3 gbpfad Remote File Include Exploit/title script language="JavaScript"...

pwp-rfilfi.txt

php web portail remote file include & local file include download site: https://sourceforge.net/project/showfiles.php?groupid=178400 product:php web portail bug: remote file include & local file include risk : high local file include :...

FishCart [injection sql]

vendor site: http://fishcart.org/ product :fish cart bug:injection sql risk : medium injection sql : /display.php?cartid=200701210157208&zid=1&lid=1&olimit=5&cat=&key1=&nlst=y&olst='sql change the cartid value with yours laurent gaffie http://s-a-p.ca/ contact: [email protected]...

Fedora Core 5 : nss-3.11.3-0.5.fc5 (2006-979)

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

fi-xsssql.txt

Hello Vulnerable : Future Internet web : http://www.future-internet.com SQL Injection : http://www.example.com/pathofscript/index.cfm?fuseaction=Portal.Showpage&categoryid=311&newsId=SQL http://www.example.com/pathofscript/index.cfm?fuseaction=Portal.Showpage&categoryid=SQL...

Quietly tell you how hackers to your system kind of Trojan horse-vulnerability warning-the black bar safety net

I believe that many friends have heard of the Trojans, always feel it is very mysterious, very difficult, but in fact with the Trojan software intelligent, a lot of hackers are able to easily achieve the attack purpose. Today, the author in the latest of a Trojan horse-the black hole 2 0 0 4, fro...

Multiple Bugs in Future Internet &#40; XSS &amp; SQL Injection &#41;

Hello Vulnerable : Future Internet web : http://www.future-internet.com SQL Injection : http://www.example.com/pathofscript/index.cfm?fuseaction=Portal.Showpage&categoryid=311&newsId=SQL http://www.example.com/pathofscript/index.cfm?fuseaction=Portal.Showpage&categoryid=SQL...

Implemented browser control-bug warning-the black bar safety net

A review Usually, intruders through Telnet login is out of the back door of the intruder system, using text commands to interact to achieve the purpose; remote with a Trojan a peek at the screen. This is generally the C/S mode Client/Server, client/server. C/S mode requires that the intruder must...

KDE JPEG KFile Info插件EXIF本地拒绝服务漏洞

JPEG kfile-info插件用于多个KDE应用程序显示图象META信息。 JPEG kfile-info插件在解析图象META信息时存在问题，本地攻击者可以利用漏洞对使用此插件的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 KDE KDE 3.5.5 KDE KDE 3.5.4 KDE KDE 3.5.3 KDE KDE 3.5.2 KDE KDE 3.5 KDE KDE 3.4.3 - Gentoo Linux KDE KDE 3.4.2 KDE KDE 3.4.1 + RedHat Fedora Core4 KDE KDE 3.4 KDE KDE 3.4 KDE KD...

PSToText文件名处理shell命令执行漏洞

PSToText是一款从PostScript 和PDF档案中提取出文字的程序。 PSToText不正确处理文件名数据，远程攻击者可以利用漏洞以应用程序进程权限执行任意shell命令。 攻击者需要构建恶意文件名，诱使用户处理来触发，目前没有详细漏洞细节提供。 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Lin...

lel-sql.txt

vendor site: http://softacid.net/ product:Link Exchange Lite bug: injection sql risk : high injection sql post : /search.asp post your sql query into the search engine field injection sql get: /linkslist.asp?psearch='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...