Remote file inclusion

PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-2773

PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-2774

SQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2009-2774

CVE-2009-2774 describes an SQL injection in paidbanner.php of PHP Paid 4 Mail Script, exploitable via the ID parameter. The vulnerability allows remote attackers to craft SQL statements, leading to potential unauthorized data access or modification. Affected component: paidbanner.php in PHP Paid ...

CVE-2009-2773

CVE-2009-2773 : A PHP remote file inclusion vulnerability in the Home.php of PHP Paid 4 Mail Script allows remote attackers to execute arbitrary PHP code through a URL supplied in the page parameter. Affected: PHP Paid 4 Mail Script (home.php). Root cause: unchecked/unsanitized use of a URL param...

CVE-2008-6971

The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...

EmbedThis Appweb v3.0B.2-4 Multiple Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================== EmbedThis Appweb v3.0B.2-4 Multiple Remote Buffer Overflow PoC ============================================================== !/usr/bin/python EmbedThis Appweb v3.0B.2-4 Multiple Remo...

EmbedThis Appweb 3.0B.2-4 - Multiple Remote Buffer Overflows (PoC)

EmbedThis Appweb 3.0B.2-4 - Multiple Remote Buffer Overflows PoC !/usr/bin/python EmbedThis Appweb v3.0B.2-4 Multiple Remote Buffer Overflow PoCs Found By: DrIDE Based On: http://www.milw0rm.com/exploits/9411 Tested On: XP SP2 Notes: These don't seem to actually take down the server, they cause a...

CVE-2009-2196

Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors...

CVE-2009-2196

Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors...

RHEL 4 / 5 : apr and apr-util (RHSA-2009:1204)

Updated apr and apr-util packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache Portable Runtime APR is a portability library used by the...

QuickDev 4 Php File Download

QuickDev 4 Php download.php file Arbitrary File Download + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/quickdev4php/files/ + Arbitrary File Download - Vulnerable code in download.php...

Linux Kernel <= 2.6.31-rc5 sigaltstack 4-Byte Stack Disclosure Exploit

Exploit for linux platform in category local exploits ====================================================================== Linux Kernel include include include include include include include include const int randcalls = 0, 1, 2, 3, 4, 5, 6, 8, 9, 10, 11, 13, 14, 16, 21, 22, 24, 25, 32, 33, 36...

QuickDev 4 - download.php File Disclosure

QuickDev 4 - download.php File Disclosure + QuickDev 4 Php download.php file Arbitrary File Download + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/quickdev4php/files/ + Arbitrary File Download - Vulnerable code in download.php...

QuickDev 4 (download.php file) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ QuickDev 4 download.php file File Disclosure Vulnerability ============================================================ + QuickDev 4 Php download.php file Arbitrary File Download...

QuickDev 4 (download.php file) File Disclosure Vulnerability

No description provided by source. + QuickDev 4 Php download.php file Arbitrary File Download + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/quickdev4php/files/ + Arbitrary File Download - Vulnerable code in download.php...

QuickDev 4 - 'download.php' File Disclosure

QuickDev 4 Php download.php file Arbitrary File Download + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/quickdev4php/files/ + Arbitrary File Download - Vulnerable code in download.php...

CentOS 4 : bind (CESA-2009:1180)

"Updated bind packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System...

RHEL 4 : nspr and nss (RHSA-2009:1184)

Updated nspr and nss packages that fix security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Netscape Portable Runtime NSPR provides platform independence for non-GUI operati...

Cisco IOS畸形边界网关协议更新拒绝服务漏洞

Bugraq ID: 35860 CVE ID：CVE-2009-2049 Cisco IOS是一款流行的Internet操作系统。 Cisco IOS处理边界网关协议存在拒绝服务攻击，远程攻击者可以利用漏洞使设备重启。 当受影响设备处理畸形BGP更新时可使设备重载。 成功利用此漏洞需要3个条件： -受影响的Cisco IOS软件设备为4字节AS自治号BGP Speaker -BGP对等邻居为2字节AS自治号BGP Speaker -BGP对等邻居能发送特殊构建的非RFC适应的BGP更新消息 此漏洞Cisco Bug ID为CSCta33973，CVEID为CVE-2009-2049。...