7423 matches found
[Full-disclosure] OpenSSH - System Account Enumeration if S/Key is used
Note to the Moderator: Sorry I send ya a Beta in the first mail : / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author: Rembrandt Date: Known since somewhere ...
Battle.net Clan Script for PHP 1.5.1 - SQL Injection
Battle.net Clan Script for PHP 1.5.1 - SQL Injection script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass ...
Gazi Okul Sitesi 2007(tr)(fotokategori.asp) Remote SQL Injection
Title : Gazi Okul Sitesi 2007trfotokategori.asp Remote SQL Injection Vulnerability Author : CoNqUeRoR Demo Page : http://www.gazilogo.com Script Page : http://www.aspindir.com/indir.asp?id=4746 Date : 30-03-2007 Vulnerability: -------------------- Username & Password :...
gazi-sql.txt
Title : Gazi Okul Sitesi 2007trfotokategori.asp Remote SQL Injection Vulnerability Author : CoNqUeRoR Demo Page : http://www.gazilogo.com Script Page : http://www.aspindir.com/indir.asp?id=4746 Date : 30-03-2007 Vulnerability: -------------------- Username & Password :...
MOPB-29-2007:PHP 5.2.1 unserialize() Information Leak Vulnerability
Summary The new S: data type added to PHP 5.2.1's serialisation format is completely broken. The new feature it is supposed to add, the handling of escaped strings does not work at all and leads to disclosure of heap memory content. Affected versions Affected is PHP 5.2.1 Detailed information Wit...
CVE-2007-1649: Undefined Security Weakness
PHP 5.2.1 allows context-dependent attackers to read portions of heap memory by executing certain scripts with a serialized data input string beginning with S:, which does not properly track the number of input bytes being processed...
rot13-lfi.txt
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= Rot 13 = enkrypt.php Remote File Disclosure Vulnerability Script: Rot 13 Download: http://www.holtstraeter.com/cybercheffe/scriptsharing/php/categories/misc/rot13.zip Class: Remote File Disclosure Vulnerability Discover: BorN To K!LL...
CVE-2007-1289: Undefined Security Weakness
SQL injection vulnerability in ViewBugs.php in Tyger Bug Tracking System TygerBT 1.1.3 allows remote attackers to execute arbitrary SQL commands via the s parameter...
Linux Kernel 2.6.17 - 'Sys_Tee' Local Privilege Escalation
source: https://www.securityfocus.com/bid/22823/info The Linux kernel is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to gain superuser privileges, facilitating the complete compromise of affected computers. Linux 2.6.16 - 2.6.17.6 local root...
[SECURITY] Fedora Core 6 Update: nss-3.11.5-0.6.0.fc6
Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...
[SECURITY] Fedora Core 5 Update: nss-3.11.5-0.5.0.fc5
Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...
SaphpLesson v3.0 SQL Injection Exploit
//////////////////2007///////////////////// //SaphpLesson v3.0 SQL Injection Exploit// ////////////////////////////////////////// Found by:SwEET-DeViL&HaCKeR sUn TeaM AL-GaRNi------------------ Application : SaphpLesson------ version : v3.0----------------- URL : No-----------------------...
CVE-2007-1041
The CVE-2007-1041 entry affects S&H Computer Systems News Rover 12.1 Rev 1, with multiple stack-based buffer overflows triggered by a crafted .nzb file containing a long group or subject string. This allows remote attackers to execute arbitrary code. The vulnerability details describe a straightf...
CVE-2007-1041: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long 1 group or 2 subject string...
S-Gastebuch 1.5.3 - 'gb_pfad' Remote File Inclusion
S-Gästebuch //'=============================================================================================== //'Script Name: S-Gästebuch //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... //Basic exploit,but any time : var path="/inc/" var...
S-Gastebuch <= 1.5.3 (gb_pfad) Remote File Include Exploit
Exploit for unknown platform in category web applications ========================================================== S-Gastebuch S-Gastebuch //'=============================================================================================== //'Script Name: S-Gastebuch //'.... //'...
S-Gastebuch <= 1.5.3 (gb_pfad) Remote File Include Exploit
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleS-Gästebuch = V.1.5.3 gbpfad Remote File Include Exploit/title script language="JavaScript"...
S-Gastebuch 1.5.3 - gb_pfad Remote File Inclusion
S-Gastebuch 1.5.3 - gbpfad Remote File Inclusion S-Gästebuch //'=============================================================================================== //'Script Name: S-Gästebuch //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... //Basi...
CVE-2007-0815: Undefined Security Weakness
Cross-site scripting XSS vulnerability in imagesarchive.asp in Uapplication Uphotogallery 1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the s parameter. NOTE: the thumbnails.asp vector is already covered by CVE-2006-3023...
pwp-rfilfi.txt
php web portail remote file include & local file include download site: https://sourceforge.net/project/showfiles.php?groupid=178400 product:php web portail bug: remote file include & local file include risk : high local file include :...