Python: Multiple vulnerabilities

Background Python is an interpreted, interactive, object-oriented programming language. Description Multiple vulnerabilities were discovered in Python: David Remahl of Apple Product Security reported several integer overflows in core modules such as stringobject, unicodeobject, bufferobject,...

Linux Kernel 2.6.x chown() Group Ownership Alteration Exploit

No description provided by source. / $Id: raptorchown.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorchown.c - syschown missing DAC controls on Linux Copyright c 2004 Marco Ivaldi [email protected] Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of file...

Linux Kernel 2.4 uselib() Privilege Elevation Exploit

No description provided by source. / Linux kernel 2.4 uselib privilege elevation exploit. original exploit source from http://isec.pl reference: http://isec.pl/vulnerabilities/isec-0021-uselib.txt I modified the Paul Starzetz's exploit, made it more possible to race successfully. The exploit stil...

OTManager CMS 2.4 - Insecure Cookie Handling

OTManager CMS 2.4 - Insecure Cookie Handling ...:::::OTManager CMS v2.4 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virang...

SePortal 2.4 - poll_id SQL Injection

SePortal 2.4 - pollid SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability SePortal V2.4 poll.php pollid staticpages.php spid AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ATsDp.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : SePortal V2.4 site : www.seportal.org...

PHP KnowledgeBase Script 2.4 (cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= PHP KnowledgeBase Script 2.4 catid SQL Injection Vulnerability ================================================================= PROUD TO BE MUSLIM Remote SQL Injection...

CVE-2008-2520

Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSBIGACEDIRaddon parameter to a addon/smarty/plugins/function.captcha.php and b system/classes/sql/AdoDBConnection.php; a...

CVE-2008-2520

CVE-2008-2520 affects BigACE 2.4 and describes multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code via manipulated GLOBALS[_BIGACE] parameters in several files (e.g., addon/smarty/plugins/function.captcha.php, AdoDBConnection.php, item_informati...

CVE-2008-2137

The 1 sparcmmapcheck function in arch/sparc/kernel/syssparc.c and the 2 sparc64mmapcheck function in arch/sparc64/kernel/syssparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range aka span checks when the mmap MAPFIXED bit is not set, which allows...

abledating 2.4 >> Sql injection and cross site scripting on search_results.php

By : Ali Jasbi hackerz.ir security & hacking team vendor : abk-soft.com product name : abledating 2.4 Exploits : 1- Sql injection : bug : http://abledating//searchresults.php?pagefrom=18&pageto=18&keyword=sql...

abledating-sqlxss.txt

By : Ali Jasbi hackerz.ir security & hacking team vendor : abk-soft.com product name : abledating 2.4 Exploits : 1- Sql injection : bug : http://abledating//searchresults.php?pagefrom=18&pageto=18&keyword=sql...

AbleDating 2.4 - 'search_results.php?keyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29342/info AbleDating is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues...

CVE-2008-2136

The CVE-2008-2136 entry affects the Linux kernel SIT driver: a memory leak in ipip6_rcv (net/ipv6/sit.c) can be triggered by network traffic to a SIT tunnel, due to improper skb handling (pskb_may_pull and kfree_skb) and skb reference count management. Vulnerable on Linux kernel 2.4 up to 2.4.36....

BigACE 2.4 - Multiple Remote File Inclusions

BigACE 2.4 - Multiple Remote File Inclusions / \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /'...

bigace-rfi.txt

/ \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /' ---------------------------------------------- GrEeTs...

BIGACE 2.4 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= BIGACE 2.4 Multiple Remote File Inclusion Vulnerabilities ========================================================= / \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ |...

BigACE 2.4 - Multiple Remote File Inclusions

/ \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /' ---------------------------------------------- GrEeTs...

Open Office.org 2.31 - swriter Local Code Execution

/ Open Office.org 2.31 swriter local code execution exploit. This bug has been patched in OOo 2.4. Spawns calc.exe if successful. [email protected] / include include include / win32exec - EXITFUNC=process CMD=calc.exe Size=164 Encoder=PexFnstenvSub http://metasploit.com / unsigned char...

Open Office.org 2.31 - swriter Local Code Execution

Open Office.org 2.31 - swriter Local Code Execution / Open Office.org 2.31 swriter local code execution exploit. This bug has been patched in OOo 2.4. Spawns calc.exe if successful. [email protected] / include include include / win32exec - EXITFUNC=process CMD=calc.exe Size=164...

Vulnerability in pMachinePro

Здравствуйте 3APA3A! Сообщаю вам о найденной мною HTTP Response Splitting уязвимости в pMachinePro. Уязвимость в скрипте sitelaunch.php в параметре go. Которая может быть использована в частности для проведения Cross-Site Scripting атаки. XSS:...