8059 matches found
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution
!/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually believed this populated those...
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL...
Directory traversal
Directory traversal vulnerability in Pro Chat Rooms 3.0.2 allows remote authenticated users to select an arbitrary local PHP script as an avatar via a .. dot dot in the avatar parameter, and cause other users to execute this script by using sendData.php to send a message to 1 an individual user o...
Cross site scripting
Cross-site scripting XSS vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the gud parameter...
CVE-2008-6501
Cross-site scripting XSS vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the gud parameter...
CVE-2008-6502
Directory traversal vulnerability in Pro Chat Rooms 3.0.2 allows remote authenticated users to select an arbitrary local PHP script as an avatar via a .. dot dot in the avatar parameter, and cause other users to execute this script by using sendData.php to send a message to 1 an individual user o...
CVE-2008-6501
Cross-site scripting XSS vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the gud parameter...
CVE-2008-6501
CVE-2008-6501 is a cross-site scripting (XSS) vulnerability in Pro Chat Rooms 3.0.2 , affecting the component profiles/index.php via the gud parameter. The connected OpenVAS NASL entry and the NVD record corroborate an XSS flaw with CVSS around the mid-range (approx. 4.3–4.6; OpenVAS lists 4.6). ...
CVE-2008-6502
The CVE-2008-6502 entry describes a Directory Traversal and potential XSS/CSRF vulnerability in Pro Chat Rooms 3.0.2. The issue arises when an authenticated user can influence the avatar parameter with a .. path to point to a local PHP script, which can then be executed by other users via sendDat...
CVE-2009-0934
Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs...
JDKChat 1.5 - Remote Integer Overflow (PoC)
!/usr/bin/perl Title: JDKChat v1.5 Remote Integer Overflow PoC Summary: JDKChat is a simple C++ chat server for GNU/Linux systems. Users can connect to it through a simple tcp client like telnet. WebSite : http://www.jdkoftinoff.com/ ---------------------------- Demo...
RedHat Update for seamonkey RHSA-2008:0547-01
Check for the Version of seamonkey OpenVAS Vulnerability Test RedHat Update for seamonkey RHSA-2008:0547-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Critical: Red Hat Security Advisory: seamonkey security update
Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...
EFS Easy Chat Server Buffer Overflow
!/usr/bin/perl EFS Easy Chat Server Authentication Request Buffer Overflow SEH Reference: http://www.milw0rm.com/exploits/8142 Tested in Windows XP Pro SP2-3 Coded by Dr4sH Bruno F. Contact: dr4shathotmaildotcom Thankz: His0ka, str0ke, Vinicius N...
Easy Chat Server Change Admin Password
EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Booom!! Username: Password: Confirm Password: Email: chi le3ba /BO...
XChat PySys_SetArgv函数命令执行漏洞
BUGTRAQ ID: 33444 CVECAN ID: CVE-2009-0315 X-Chat是一款免费开放源代码的IRC客户端。 xchat的Python模块中使用了不可信任的搜索路径，本地用户可以在当前工作目录中放置恶意的Python文件并利用PySysSetArgv函数调用中的安全漏洞（CVE-2008-5983）执行任意代码。 X-Chat X-Chat 2.8.7b X-Chat X-Chat 2.8.6 厂商补丁： X-Chat ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
EFS Easy Chat Server Authentication Request Buffer Overflow Exploit (pl)
Exploit for unknown platform in category remote exploits ======================================================================== EFS Easy Chat Server Authentication Request Buffer Overflow Exploit pl ======================================================================== !/usr/bin/perl EFS Easy...
EFS Easy Chat Server 2.2 - Authentication Request Buffer Overflow
!/usr/bin/perl EFS Easy Chat Server Authentication Request Buffer Overflow SEH Reference: http://www.milw0rm.com/exploits/8142 Tested in Windows XP Pro SP2-3 Coded by Dr4sH Bruno F. Contact: dr4shathotmaildotcom Thankz: His0ka, str0ke, Vinicius N...
EFS Easy Chat Server 2.2 - Authentication Request Buffer Overflow (SEH)
!/usr/bin/python Bug : EFS Easy Chat Server Authentication Request Buffer Overflow Exploit SEH Refer : http://www.milw0rm.com/exploits/4289 Tested on : Xp sp2 fr Exploited by : His0k4 Greetings : All friends & muslims HaCkErs DZ import struct import socket buf = "\x41"216 buf += "\xEB\x06\xAE\xFA...