Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...

Unfixed XSS vulnerability at eniact.nl

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting eniact.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at ezhik.org.ru

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting ezhik.org.ru, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

CVE-2006-7151

Untrusted search path vulnerability in the libtool-ltdl library libltdl.so 1.5.22-2.3 in Fedora Core 5 might allow local users to execute arbitrary code via a malicious library in the 1 hwcap, 2 0, and 3 nosegneg subdirectories...

Unfixed XSS vulnerability at jqk.com

Security researcher CoNqUeRoR, has submitted on 03/07/2007 a cross-site-scripting XSS vulnerability affecting jqk.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is currently unfixed...

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...

CVE-2007-1135: Undefined Security Weakness

Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the 1 strid parameter to index.php and the 2 id0 or other id array index parameter to filecheck.php...

/bin/ls with gid=0 in Debian linux-ftpd

Mea culpa. A stupid little bug crept into linux-ftpd for Debian, and some other Linux distros. Some may have fixed it, but Debian hasn't. The effect is that ftpd now runs /bin/ls for DIR and similar commands with GID=0. Does not seem terribly dangerous as I do not seem able to trick ls into runni...

Linux ftpd ls privilege escalation

ls command is executed with effective gid 0...

Unfixed XSS vulnerability at www.gue-ngl.org

Security researcher RubberDuck, has submitted on 21/02/2007 a cross-site-scripting XSS vulnerability affecting www.gue-ngl.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/02/2007. It is currently...

revenge_proftpd_ctrls_24.pl.txt

!/usr/bin/perl -w $Id: revengeproftpdctrls24.pl, v1.0 2007/02/18 19:24:22 revenge Exp $ ProFTPD v1.3.0/1.3.0a Controls Buffer Overflow Exploit Old style school sploit against gcc 3.x and linux kernel 2.4 Original Advisory : http://www.coresecurity.com/?action=item&id=1594 Exploitation condition -...

MiniWebsvr <= 0.0.6 Remote Resource Consumption DoS Exploit

No description provided by source. import socket print "-----------------------------------------------------------------------" print "MiniWebsvr 0.0.6 0-Day Resource Consumption" print "url: http://miniwebsvr.sourceforge.net/" print "author: shinnai" print "mail:...

MiniWebsvr 0.0.6 - Remote Resource Consumption Denial of Service

MiniWebsvr 0.0.6 - Remote Resource Consumption Denial of Service import socket print "-----------------------------------------------------------------------" print "MiniWebsvr 0.0.6 0-Day Resource Consumption" print "url: http://miniwebsvr.sourceforge.net/" print "author: shinnai" print "mail:...

Fixed XSS vulnerability at superstoreonebay.com

Security researcher Fugitif, has submitted on 02/12/2007 a cross-site-scripting XSS vulnerability affecting superstoreonebay.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is current...

Microsoft Word 2000 Unspecified Code Execution Exploit (0day)

No description provided by source. use at your own risk + Title: Microsoft Word 2000 Unspecified Code Execution Vulnerability Exploit 0-day + code by xCuter BongGoo Kang - [email protected] + Critical: High Critical ...

CVE-2007-0812: Undefined Security Weakness

SQL injection vulnerability in pms.php in Woltlab Burning Board wBB Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrary SQL commands via the pmid0 parameter...

msie6-npd.txt

Crash Denial of Service + Where: From remote + Tested Operating System: Windows XP SP2 FULL PATCHED Korean Language Windows 2000 Advanced Server Korean Language + Tested Software: Microsoft Internet Explorer Ver.6.0.2800.1106;SP1 Windows 2000 Advanced Server Microsoft Internet Explorer...

Unfixed XSS vulnerability at www.cctvtime.com

Security researcher St@rExT, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting www.cctvtime.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2007. It is currently...

MS Internet Explorer 6 (mshtml.dll) Null Pointer Dereference Exploit

No description provided by source. !-- + Title: Microsoft Internet Explorer Malformed HTML Null Pointer Dereference Vulnerability mshtml.dll 0-day + Bug discovered & exploit coded by AmesianX in powerhacker.net YoungHo Park - [email protected] + Critical: Critical ...