webSPELL <= 4.01.02 Remote PHP Code Execution Exploit

No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; Admin id: 1 Admin hash: 7b24afc8bc80e548d66c4e7ff72171c5 Logged in wsauth=1%3A7b24afc8bc80e548d66c4e7ff72171c5 Trying to upload the malicious file Done http://localhost/webspell4.01.02/downloads/c99shell.php if$ar...

webSPELL 4.01.02 - PHP Remote Code Execution

webSPELL 4.01.02 - PHP Remote Code Execution !/usr/bin/php URL: http://www.acid-root.new.fr/ ----------------------------------------------------------------------- Usage: $argv0 -url -file Options Params: -url For example http://victim.com/webspell/ -file The file you wanna upload c99shell.php...

Multiple browsers OnUnload event handler different vulnerabilities

Different memory corruptions because of race conditions in OnUnload handler. In addition address bar spoofing and creation of pages can not be left is possible...

NukeSentinel 2.5.05 (nsbypass.php) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------ Usage: $argv0&nbs...

NukeSentinel 2.5.05 (nsbypass.php) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== NukeSentinel 2.5.05 nsbypass.php Blind SQL Injection Exploit ============================================================== !/usr/bin/php -victim Opts Options: -isadmin Is the...

Linux kernel privilege escalation

Invalid exception conditions handling leads to multiple reace conditions with privileged memory access...

Sun Solaris TCP packets processing race conditions

DoS against system is possible...

CVE-2007-0472

Multiple race conditions in Smb4K before 0.8.0 allow local users to 1 modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the removelockfile function in core/smb4kfileio.cpp, and 2 add lines to the sudoers file via a symlink attack on...

CVE-2007-0472

Multiple race conditions in Smb4K before 0.8.0 allow local users to 1 modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the removelockfile function in core/smb4kfileio.cpp, and 2 add lines to the sudoers file via a symlink attack on...

CVE-2007-0472

Multiple race conditions in Smb4K before 0.8.0 allow local users to 1 modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the removelockfile function in core/smb4kfileio.cpp, and 2 add lines to the sudoers file via a symlink attack on...

DEBIAN-CVE-2007-0472

Multiple race conditions in Smb4K before 0.8.0 allow local users to 1 modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the removelockfile function in core/smb4kfileio.cpp, and 2 add lines to the sudoers file via a symlink attack on...

CVE-2007-0472

CVE-2007-0472 describes multiple race conditions in Smb4K prior to 0.8.0 that enable a local attacker to escalate privileges or modify sensitive files. The primary issues involve: (1) the removeLockFile path in core/smb4kfileio.cpp allowing manipulation of Smb4K’s lock file to modify arbitrary fi...

CVE-2007-0472

Multiple race conditions in Smb4K before 0.8.0 allow local users to 1 modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the removelockfile function in core/smb4kfileio.cpp, and 2 add lines to the sudoers file via a symlink attack on...

CVE-2007-0472

Multiple race conditions in Smb4K before 0.8.0 allow local users to 1 modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the removelockfile function in core/smb4kfileio.cpp, and 2 add lines to the sudoers file via a symlink attack on...

Multiple Linux kernel vulnerabilities

Multiple DoS conditions in syscalls processing...

MOAB-26-01-2007: Apple Installer Package Filename Format String Vulnerability

Summary Apple Installer is the application in charge of handling the installation of packages for Mac OS X, in form of pkg, distz and mpkg files. Installer fails to properly handle package filename strings. It's a affected by a typical format string vulnerability, which can lead to a denial of...

MOAB-06-01-2007: Multiple Vendor PDF Document Catalog Handling Vulnerability

Summary The Adobe Portable Document Format PDF, specification v. 1.3 defines the root of a document's object hierarchy as the "catalog dictionary". The catalog contains the necessary references to objects and data that compose the document contents and their attributes. Also, it contains directiv...

Microsoft Internet Explorer 7 - CSS Width Element Denial of Service

Microsoft Internet Explorer 7 - CSS Width Element Denial of Service source: https://www.securityfocus.com/bid/21466/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. This issue is triggered when an attack...

Microsoft Internet Explorer 7 - CSS Width Element Denial of Service

source: https://www.securityfocus.com/bid/21466/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. This issue is triggered when an attacker entices a victim user to visit a malicious website. Remote...

Microsoft Internet Explorer 6 - Frame Src Denial of Service

source: https://www.securityfocus.com/bid/21447/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. This issue is triggered when an attacker entices a victim user to visit a malicious website. Remote...