Aztek Forum 4.0 Multiple Vulnerabilities Exploit

Exploit for unknown platform in category web applications ================================================ Aztek Forum 4.0 Multiple Vulnerabilities Exploit ================================================ !/usr/bin/php Aztek Forum 4.1 Multiple Vulnerabilities Exploit header...

Vote-Pro 4.0 (poll_frame.php poll_id) Remote Code Execution Exploit

No description provided by source. r0ut3r Presents... Another r0ut3r discovery! &n...

Vote-Pro 4.0 (poll_frame.php poll_id) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =================================================================== Vote-Pro 4.0 pollframe.php pollid Remote Code Execution Exploit =================================================================== r0ut3r Presents... Another r0ut3r...

Remote file inclusion

PHP remote file inclusion vulnerability in libraries/grabglobals.lib.php in ComVironment 4.0 allows remote attackers to execute arbitrary PHP code via a URL in the incdir parameter...

CVE-2007-0395

PHP remote file inclusion vulnerability in libraries/grabglobals.lib.php in ComVironment 4.0 allows remote attackers to execute arbitrary PHP code via a URL in the incdir parameter...

CVE-2007-0395

CVE-2007-0395 describes a PHP remote file inclusion in ComVironment 4.0. The vulnerability exists in libraries/grab_globals.lib.php, where an attacker can supply a URL via the inc_dir parameter to cause arbitrary PHP code execution on the affected system. The NVD entry confirms the issue as a PHP...

ComVironment 4.0 (grab_globals.lib.php) Remote File Include Vulnerability

No description provided by source. /\ ComVironment 4.0 ========================================================= Published : 2007-01-18 Remote: Yes Site:http://switch.dl.sourceforge.net/sourceforge/comvironment/ Author: GolDM = Mahmoodali &...

ComVironment 4.0 - grab_globals.lib.php Remote File Inclusion

ComVironment 4.0 - grabglobals.lib.php Remote File Inclusion /\ ComVironment 4.0 ========================================================= Published : 2007-01-18 Remote: Yes Site:http://switch.dl.sourceforge.net/sourceforge/comvironment/ Author: GolDM = Mahmoodali Contact: [email protected]...

ComVironment 4.0 (grab_globals.lib.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ========================================================================= ComVironment 4.0 grabglobals.lib.php Remote File Include Vulnerability ========================================================================= /\ ComVironment 4.0...

ComVironment 4.0 - 'grab_globals.lib.php' Remote File Inclusion

/\ ComVironment 4.0 ========================================================= Published : 2007-01-18 Remote: Yes Site:http://switch.dl.sourceforge.net/sourceforge/comvironment/ Author: GolDM = Mahmoodali Contact: [email protected] ===================================================== ThanX=All My...

WFTPD Server SITE ADMIN命令远程拒绝服务漏洞

WFTPD Server是一款FTP服务程序。 WFTPD Server处理SITE ADMIN命令存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 提交恶意字符串作为SITE ADMIN命令参数，可导致应用程序崩溃，造成拒绝服务攻击。 Texas Imperial Software WFTPD Pro 3.21 R2 Texas Imperial Software WFTPD Pro 3.21 R3 Texas Imperial Software WFTPD Pro 3.21 R1 Texas Imperial Software WFTPD Pro 3.21 Texas...

[SECURITY] Fedora Core 5 Update: squirrelmail-1.4.8-3.fc5

SquirrelMail is a standards-based webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure...

[ MDKSA-2007:017 ] - Updated wget packages fix ftp vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:017 http://www.mandriva.com/security/ Package : wget Date : January 15, 2007 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: The ftpsyst function in...

Outpost Firewall PRO 4.0 - Local Privilege Escalation

source: https://www.securityfocus.com/bid/22069/info Outpost Firewall PRO is prone to a local privilege-escalation vulnerability because it fails to perform adequate SSDT System Service Descriptor Table hooking on files in its installation directory. A local attacker can exploit this issue to...

OpenBSD 3.x - 4.0 vga_ioctl() Local Root Exploit

No description provided by source. / Critical Security OpenBSD 3.x-4.0 vgaioctl root exploit Bug had been discovered by allmighty Ilja van Sprundel ilja.netric.org Some code had been stolen from noir's openbsd exploit sources Fix is available:...

CVE-2007-0085

Unspecified vulnerability in sys/dev/pci/vgapci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when the kernel is compiled with the PCIAGP option and a non-AGP device is being used, allows local users to gain privileges via unspecified vectors, possibly related to agpioctl NULL...

CVE-2006-6866

This CVE concerns STphp EasyNews PRO 4.0, where sensitive data is stored under the web root with insufficient access control. The vulnerability allows remote attackers to retrieve usernames, email addresses, and password hashes via a direct request for data/users.txt. The root cause is inadequate...

Cisco Clean Access多个远程安全漏洞

Cisco Clean Access CCA是一种用于自动检测、隔离、清除受恶意代码感染的设备访问网络的软件解决方案。 CCA的实现上存在两个安全漏洞，远程攻击得可能利用这些漏洞获取非授权访问或得到敏感信息。 CCA与Cisco Clean Access Manager CAM交互时，交互双方需要相同的密钥，CAM端的密钥在CAM和CAS初始化时设定，CCA实现上的漏洞使此密钥不可被更改，网络上所有相关的设备共享了相同的密钥，可能导致非授权访问。此漏洞的Cisco Bug ID为CSCsd48626，影响如下的CCA版本： CCA releases 3.6.x - 3.6.4.2 CCA...

EasyNews PRO News Publishing 4.0 Password Disclosure Vulnerability

No description provided by source. = EasyNews PRO News Publishing 4.0 Remote Password Disclosure Vulnerability = = Affected Software: Easy News 4.0 PRO = Risk: Critical = Download: http://www.stphp.com/scripts/EasyNewsPRO40.zip = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greets: str0ke...

EasyNews PRO News Publishing 4.0 - Password Disclosure

EasyNews PRO News Publishing 4.0 - Password Disclosure = EasyNews PRO News Publishing 4.0 Remote Password Disclosure Vulnerability Affected Software: Easy News 4.0 PRO = Risk: Critical = Download: http://www.stphp.com/scripts/EasyNewsPRO40.zip = Bugfounder: bd0rk = Contact: bd0rkathackermail.com ...