3650 matches found
CVE-2006-7094
ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...
CVE-2007-1135: Undefined Security Weakness
Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the 1 strid parameter to index.php and the 2 id0 or other id array index parameter to filecheck.php...
/bin/ls with gid=0 in Debian linux-ftpd
Mea culpa. A stupid little bug crept into linux-ftpd for Debian, and some other Linux distros. Some may have fixed it, but Debian hasn't. The effect is that ftpd now runs /bin/ls for DIR and similar commands with GID=0. Does not seem terribly dangerous as I do not seem able to trick ls into runni...
Linux ftpd ls privilege escalation
ls command is executed with effective gid 0...
Unfixed XSS vulnerability at www.gue-ngl.org
Security researcher RubberDuck, has submitted on 21/02/2007 a cross-site-scripting XSS vulnerability affecting www.gue-ngl.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/02/2007. It is currently...
revenge_proftpd_ctrls_24.pl.txt
!/usr/bin/perl -w $Id: revengeproftpdctrls24.pl, v1.0 2007/02/18 19:24:22 revenge Exp $ ProFTPD v1.3.0/1.3.0a Controls Buffer Overflow Exploit Old style school sploit against gcc 3.x and linux kernel 2.4 Original Advisory : http://www.coresecurity.com/?action=item&id=1594 Exploitation condition -...
MiniWebsvr <= 0.0.6 Remote Resource Consumption DoS Exploit
No description provided by source. import socket print "-----------------------------------------------------------------------" print "MiniWebsvr 0.0.6 0-Day Resource Consumption" print "url: http://miniwebsvr.sourceforge.net/" print "author: shinnai" print "mail:...
MiniWebsvr 0.0.6 - Remote Resource Consumption Denial of Service
MiniWebsvr 0.0.6 - Remote Resource Consumption Denial of Service import socket print "-----------------------------------------------------------------------" print "MiniWebsvr 0.0.6 0-Day Resource Consumption" print "url: http://miniwebsvr.sourceforge.net/" print "author: shinnai" print "mail:...
Fixed XSS vulnerability at superstoreonebay.com
Security researcher Fugitif, has submitted on 02/12/2007 a cross-site-scripting XSS vulnerability affecting superstoreonebay.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is current...
CVE-2007-0812: Undefined Security Weakness
SQL injection vulnerability in pms.php in Woltlab Burning Board wBB Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrary SQL commands via the pmid0 parameter...
Microsoft Word 2000 Unspecified Code Execution Exploit (0day)
No description provided by source. use at your own risk + Title: Microsoft Word 2000 Unspecified Code Execution Vulnerability Exploit 0-day + code by xCuter BongGoo Kang - [email protected] + Critical: High Critical ...
MS Internet Explorer 6 (mshtml.dll) Null Pointer Dereference Exploit
No description provided by source. !-- + Title: Microsoft Internet Explorer Malformed HTML Null Pointer Dereference Vulnerability mshtml.dll 0-day + Bug discovered & exploit coded by AmesianX in powerhacker.net YoungHo Park - [email protected] + Critical: Critical ...
msie6-npd.txt
Crash Denial of Service + Where: From remote + Tested Operating System: Windows XP SP2 FULL PATCHED Korean Language Windows 2000 Advanced Server Korean Language + Tested Software: Microsoft Internet Explorer Ver.6.0.2800.1106;SP1 Windows 2000 Advanced Server Microsoft Internet Explorer...
Unfixed XSS vulnerability at www.cctvtime.com
Security researcher St@rExT, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting www.cctvtime.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2007. It is currently...
MS Internet Explorer 6 (mshtml.dll) Null Pointer Dereference Exploit
Exploit for unknown platform in category dos / poc ==================================================================== MS Internet Explorer 6 mshtml.dll Null Pointer Dereference Exploit ==================================================================== Crash Denial of Service + Where: From...
Microsoft Word 2000 Unspecified Code Execution Exploit (0day)
No description provided by source. + Title: Microsoft Word 2000 Unspecified Code Execution Vulnerability Exploit 0-day + code by xCuter BongGoo Kang - [email protected] + Critical: High Critical + Impact: MS Word 2000 - Could Allow Arbitrary Command Execution...
Microsoft Excel 0-day vulnerability
Unknown vulnerability is used for hidden malware installation...
Microsoft Word 0-day vulnerabilities
Few unknown vulnerabilities are ussed for hidden malware installation...
Microsoft Word 2000 - Code Execution
use at your own risk + Title: Microsoft Word 2000 Unspecified Code Execution Vulnerability Exploit 0-day + code by xCuter BongGoo Kang - [email protected] + Critical: High Critical + Impact: MS Word 2000 - Could Allow Arbitrary Command Execution MS word 2003 - Attempts against Word 2003/XP wi...
