3838 matches found
CVE-2010-1848
Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. dot dot in a table name...
NetBSD 5.0 and below Hack PATH Environment overflow proof of concept
Exploit for bsd platform in category dos / poc ==================================================================== NetBSD 5.0 and below Hack PATH Environment overflow proof of concept ==================================================================== !/bin/sh NetBSD 5.0 and below Hack PATH...
NetBSD 5.0 Hack PATH Environment Overflow
!/bin/sh NetBSD 5.0 and below Hack PATH Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.unix.c It is a basic strcpy stack overflow. Such overflows are hard to exploit in NetBSD. If you can exploit it successfully feel free to...
NetBSD 5.0 Hack GENOCIDE Environment Overflow
!/bin/sh NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.main.c. /usr/games/hack -D use the wizard mode. Only work in wizard mode. It is a basic strcpy stack overflow. Such overflows are hard to...
NetBSD 5.0 and below Hack GENOCIDE Environment overflow poc
Exploit for bsd platform in category dos / poc ======================================================================== NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept ======================================================================== !/bin/sh NetBSD 5.0 and below...
NetBSD 5.0 - Hack GENOCIDE Environment Overflow (PoC)
!/bin/sh NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.main.c. /usr/games/hack -D use the wizard mode. Only work in wizard mode. It is a basic strcpy stack overflow. Such overflows are hard to...
NetBSD 5.0 - Hack PATH Environment Overflow (PoC)
!/bin/sh NetBSD 5.0 and below Hack PATH Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.unix.c It is a basic strcpy stack overflow. Such overflows are hard to exploit in NetBSD. If you can exploit it successfully feel free to...
NetBSD 5.0 - Hack PATH Environment Overflow (PoC)
NetBSD 5.0 - Hack PATH Environment Overflow PoC !/bin/sh NetBSD 5.0 and below Hack PATH Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.unix.c It is a basic strcpy stack overflow. Such overflows are hard to exploit in NetBSD. If y...
NetBSD 5.0 - Hack GENOCIDE Environment Overflow (PoC)
NetBSD 5.0 - Hack GENOCIDE Environment Overflow PoC !/bin/sh NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.main.c. /usr/games/hack -D use the wizard mode. Only work in wizard mode. It is a basi...
BBSGood论坛程序bottom.asp页面SQL注入漏洞
BBSGOOD是国内首创使用缓存技术的论坛，BBSGOOD的帖子和列表首页是可以生成静态HTML文件的。 在文件bottom.asp中： key=trimRequest"key" //第25行 key2=key key3=key select case mode case 1 if instr1,key," "0 then str=Splitkey," " key="" key3="" For ii=0 to UBoundstr key=key+"Subject LIKE '%"&strii&"%' and " key3=key3+""&strii&" - " Next...
MySQL COM_FIELD_LIST命令远程溢出漏洞
BUGTRAQ ID: 40106 CVE ID: CVE-2010-1850 MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。 远程攻击者可以通过向MySQL数据库提交包含有超长表格名称参数的COMFIELDLIST命令触发缓冲区溢出，导致执行任意代码。 MySQL 5.1/5.0 厂商补丁： Oracle ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://bugs.mysql.com/bug.php?id=53237...
BBSGood论坛程序DelShortInFo.asp页面越权漏洞
在文件DelShortInFo.asp中： sql="select from LxTelshortinfo "&selectid&" "' //第20行 rs.open sql,conn,1,3 if notrs.BOF and rs.EOF then while not rs.EOF select case trimRequestCStringSaferequest"shortinfo" case "收件箱" rs"收件人删除标记"="Y" 程序在修改短信标记的时候没有对用户的合法权限做验证导致越权漏洞的产生 BBSGood 5.0/5.0.2 厂商补丁： BBSGood.Speed...
Xitami 5.0 - '/AUX' Request Remote Denial of Service
source: https://www.securityfocus.com/bid/40027/info Xitami is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Xitami 5.0a0 is vulnerable. !/usr/bin/perl Xitami/5.0a0 Denial Of Service Disclaimer:...
PHP-Nuke 5.0 - Viewslink SQL Injection
PHP-Nuke 5.0 - Viewslink SQL Injection Author: CMD Contact: [email protected] Dork: allinurl: op=viewslink&sid= =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code : Exploit 1: /links.php?op=viewslink&sid=-1//union//select//0,aid//from//nukeauthors//where//radminsuper=1/...
PHP-Nuke 5.0 - Viewslink SQL Injection
Author: CMD Contact: [email protected] Dork: allinurl: op=viewslink&sid= =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code : Exploit 1: /links.php?op=viewslink&sid=-1//union//select//0,aid//from//nukeauthors//where//radminsuper=1/...
[ MDVSA-2010:082 ] clamav
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:082 http://www.mandriva.com/security/ Package : clamav Date : April 18, 2010 Affected: 2008.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been found and corrected ...
Memcached Denial of service vulnerability
The host is running Memcached and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmemcacheddosvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Memcached Denial of service vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 SecPod, http://www.secpod.com This...
CmS 5.0 SQL Injection
----------------------------------------------------------------------- CmS id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : spykit Site : http://devilzc0de.org/ Date : April, 22-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:0...
cms (id) 5.0 - SQL Injection
cms id 5.0 - SQL Injection ----------------------------------------------------------------------- CmS id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : spykit Site : http://devilzc0de.org/ Date : April, 22-2010 Location : Jakarta,...
cms (id) 5.0 - SQL Injection
----------------------------------------------------------------------- CmS id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : spykit Site : http://devilzc0de.org/ Date : April, 22-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:0...