3644 matches found
[SA17774] unalz Filename Handling Buffer Overflow Vulnerability
TITLE: unalz Filename Handling Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA17774 VERIFY ADVISORY: http://secunia.com/advisories/17774/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: unalz 0.x http://secunia.com/product/6230/ DESCRIPTION: Ulf Harnhammar h...
[SA16975] sblim-sfcb Multiple Requests Denial of Service Vulnerability
TITLE: sblim-sfcb Multiple Requests Denial of Service Vulnerability SECUNIA ADVISORY ID: SA16975 VERIFY ADVISORY: http://secunia.com/advisories/16975/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: sblim-sfcb 0.x http://secunia.com/product/5777/ DESCRIPTION: A vulnerability has...
Fedora Core 3 : gftp-2.0.18-0.FC3 (2005-309)
Fri Feb 18 2005 Warren Togami 2.0.18-0.FC3 - FC3 including CVE-2005-0372 - Thu Feb 10 2005 Warren Togami 2.0.18-1 - 2.0.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
IIS 5.1 SP0 Detection (English Versions Only)
Binary data 3214.prm...
linux/x86 examples of long-term payloads hide-wait-change 187 bytes+
No description provided by source. /---------------------------------------------------------------------------- Mystique Project: Examples of long-term payloads hide-wait-change code by [email protected] & [email protected] ----------------------------------------------------------------------------...
smf105.txt
Simple Machine Forum 1-0-5 possibly prior versions user IP address / information disclosure software: site: http://www.simplemachines.org/ information disclosure: a user can choose an sumbit an avatar url like this: http://evilsite/image.php where image.php is a file like this: When forum users...
[SA16506] Mantis Cross-Site Scripting and SQL Injection Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Fedora Core 3 : cups-1.1.22-0.rc1.8.6 (2005-733)
These updated packages fix a problem handling PDF files that could have security implications CVE-2005-2097. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...
Fedora Core 3 : vim-6.3.086-0.fc3.1 (2005-741)
CVE-2005-2368 This update is supposed to fix GTK2 dependency problems of the vim-6.3.086-0.fc3 package. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...
Fedora Core 3 : kdeedu-3.4.2-0.fc3.2 (2005-745)
Ben Burton notified the KDE security team about several tempfile handling related vulnerabilities in langen2kvtml, a conversion script for kvoctrain. The script must be manually invoked. The script uses known filenames in /tmp which allow an local attacker to overwrite files writeable by the user...
Wordpress <= 1.5.1.3 Remote Code Execution 0-Day Exploit
Exploit for unknown platform in category web applications ======================================================== Wordpress = 1.5.1.3 Remote Code Execution 0-Day Exploit ======================================================== ?php echo "Wordpress = 1.5.1.3 - remote code execution 0-DDAAYY...
Wordpress <= 1.5.1.3 Remote Code Execution 0-Day Exploit
No description provided by source. ?php echo "Wordpress = 1.5.1.3 - remote code execution 0-DDAAYY exploit\n"; echo "C Copyright 2005 Kartoffelguru\n\n"; echo "! info: requires registerglobals turned on on target host\n\n"; if !extensionloaded'curl' die "- you need the curl extension...
Linux Add User
Create a new user with UID 0 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework AddUser ------- Adds a UID 0 user to /etc/passwd. module MetasploitModule CachedSize = 97 include Msf::Payload::Single include...
[SA16011] PPA "config[ppa_root_path]" File Inclusion Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
[ Suresec Advisories ] - Linux kernel ia32 compatibility (ia64/x86-64) race condition
Suresec Security Advisory - 00004 10/07/05 Linux kernel ia32 compatibility race condition Advisory: http://www.suresec.org/advisories/adv4.pdf http://www.suresec.org/advisories/adv3.pdf Description: A race condition vulnerability has been found in the ia32 compatibility execve systemcall. The rac...
CVE-2004-2193
The CVE-2004-2193 issue affects CJOverkill’s trade.php (versions older than 4.0.4) with a cross-site scripting (XSS) vulnerability. The flaw arises from insufficient sanitization of user-supplied input, enabling remote attackers to inject script via the tms[0] or url parameters. OpenVAS entries c...
CVE-2004-2193: Undefined Security Weakness
Cross-site scripting XSS vulnerability in trade.php for CJOverkill 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the 1 tms0 or 2 url parameters...
CVE-2004-2191: Undefined Security Weakness
Cross-site scripting XSS vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 msg0 or 2 siteurl parameters...
Local Root exploit (Fedora Core 4)
Local Root Exploit under Fedora Core 4 stable Advisory Florian Strankowski [email protected] www.bildunxxluecke.de/usr/florian/advisory/advisory-05-048.txt Vulnerable System : This vulnerability affects Fedora Core 4.0 stable with the kernelversion 2.6.11-1.1369FC4 1 Thu Jun 2 22:53:35...
CVE-2005-1700: Undefined Security Weakness
SQL injection vulnerability in pnadmin.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to execute arbitrary SQL commands via the riga0 parameter...