Diskos CMS Manager - SQL Injection / File Disclosure / Authentication Bypass

Diskos CMS Manager & multiple vulnerabilitiesS Prodcut: Diskos CMS Manager Home : http://www.diskos.dk Vunlerability : SQL Injection & admin byapass & database disclosure Dork : "Powered By diskos" inurl:"side.asp?kat=1" Discovred by: AnGeL25dZ Contact : [email protected] Greetz to : ALLAH All...

Unfixed XSS vulnerability at www.worldtimezone.com

Security researcher s E t H - X-C3LL, has submitted on 21/02/2009 a cross-site-scripting XSS vulnerability affecting www.worldtimezone.com, which at the time of submission ranked 20097 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011...

CVE-2009-0606

The linkimage function in linker/linker.c in the dynamic linker in Bionic in Open Handset Alliance Android 1.0 on the T-Mobile G1 phone does not properly handle file descriptors 0, 1, and 2 for a setgid program, which allows local users to create arbitrary files owned by certain groups, possibly ...

CVE-2009-0606

The CVE-2009-0606 entry concerns Android 1.0 (Open Handset Alliance) on the T-Mobile G1, where the link_image function in linker/linker.c of Bionic’s dynamic linker mishandles file descriptors 0, 1, and 2 for a setgid program. This behavior could allow local users to create arbitrary files owned ...

AREVA T&D e-terrahabitat multiple security vulnerabilities

No description provided...

Deutsch Telekomm T-Sinus 130 DSL Default Password (deprecated)

Binary data 4853.prm...

ACCTON Wirelessrouter T-online Default Password (deprecated)

Binary data 4827.prm...

T-Blog 1.0 Database Disclosure

--------------------------------------------------------- Portal Name: T-blog Version : 1.0 Download : http://aspindir.com/Goster/5473 Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD: http://site.com/Path/blog.mdb...

Linux/x86 - setreuid() + /sbin/iptables -F + exit(0) Shellcode (76 bytes)

Linux/x86 - setreuid + /sbin/iptables -F + exit0 Shellcode 76 bytes. Shellcode exploit for Linuxx86 platform / Author: Sh3llc0d3 Environment: Linux/x86 Developed from: GNU ASM AT&T Syntax Purpose: setreuid - /sbin/iptables -F - exit0 Size: 76 bytes Website: root-exploit.com / char code =...

Microsoft SQL Server Heap Overflow Exploit

% // ksOSe 12/17/2008 // Microsoft SQL Server "spreplwritetovarbin" Heap Overflow // Tested on Win2k SP4 with MSSQL 2000on one box only!. // Shellcode is a slightly modified metasploit reverse shellon 10.10.10.1 port 4445, // the change allows multiple shots : // // You need a valid SQL account,...

Microsoft SQL Server sp_replwritetovarbin() Heap Overflow Exploit (0day)

No description provided by source. html % // ksOSe 12/17/2008 // Microsoft SQL Server "spreplwritetovarbin" Heap Overflow // Tested on Win2k SP4 with MSSQL 2000on one box only!. // Shellcode is a slightly modified metasploit reverse shellon 10.10.10.1 port 4445, // the change allows multiple shot...

Microsoft SQL Server - sp_replwritetovarbin() Heap Overflow

Microsoft SQL Server - spreplwritetovarbin Heap Overflow % // ksOSe 12/17/2008 // Microsoft SQL Server "spreplwritetovarbin" Heap Overflow // Tested on Win2k SP4 with MSSQL 2000on one box only!. // Shellcode is a slightly modified metasploit reverse shellon 10.10.10.1 port 4445, // the change...

ProSysInfo TFTP Server TFTPDWIN 0.4.2 Overflow

!/usr/bin/perl ProSysInfo TFTP server TFTPDWIN Greets fly to InTeL. WARNING: Author has no responsibility over the damage you do using this! use IO::Socket; use warnings; use strict; if!$ARGV0 print "x ProSysInfo TFTP server TFTPDWIN = 0.4.2\n"; print " Universal Remote Buffer Overflow Exploi...

ProSysInfo TFTP server TFTPDWIN 0.4.2 - Universal Remote Buffer Overflow

ProSysInfo TFTP server TFTPDWIN 0.4.2 - Universal Remote Buffer Overflow !/usr/bin/perl ProSysInfo TFTP server TFTPDWIN Greets fly to InTeL. WARNING: Author has no responsibility over the damage you do using this! use IO::Socket; use warnings; use strict; if!$ARGV0 print "x ProSysInfo TFTP server...

ProSysInfo TFTP server TFTPDWIN 0.4.2 - Universal Remote Buffer Overflow

!/usr/bin/perl ProSysInfo TFTP server TFTPDWIN Greets fly to InTeL. WARNING: Author has no responsibility over the damage you do using this! use IO::Socket; use warnings; use strict; if!$ARGV0 print "x ProSysInfo TFTP server TFTPDWIN = 0.4.2\n"; print " Universal Remote Buffer Overflow...

Outdated and vulnerable OpenSource libraries used in "Deutsche Telekom" home banking software

The "Deutsche Telekom" resp. their "T-Online" branch offer their own home banking software for Windows under ftp://software.t-online.de/pub/service/banking/banking70.exe The current release is version 7.00.0004 from 2008-03-17. This software is but insecure; it installs and uses: - the libraries...

dedecms fill out a tasteless vulnerability-vulnerability warning-the black bar safety net

Author: Ice the origin of theL. S. T&0. S. T Just look at the small handsome gay blog found above also describes a About dedecms a 0day（http://www. xssor. cn/sa/? action=show&id=5 A 8, but this bug and a few months ago that write directly to the file in the vulnerability If is not a file, I...

T-Mobile G1 phone Google Android protection bypass

Pplication can run telnetd with root privileges...

Applications can open up remote root access on G1 Phone

Hi, Google Android applications on the T-Mobile G1 can spawn a telnetd that gives remote root access to your phone: http://www.android-unleashed.com/2008/11/howto-get-root-on-your-android-g1-and.html This particular method needs user interaction, but a rogue Android app could easily run telnetd...

Android WEB浏览器未明远程代码执行漏洞

BUGTRAQ ID: 31946 CNCAN ID：CNCAN-2008102901 Android是一款Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android Web浏览器存在一个未明安全问题，远程攻击者可以利用漏洞以浏览器内容上下文执行任意代码。 攻击者必须构建恶意链接，诱使用户访问来触发。 HTC T-Mobile G1 Google Android 目前没有解决方案提供： http://code.google.com/android/...