dynamic flash forum 1.0 Beta - Multiple Vulnerabilities

Salvatore "drosophila" Fresta + Application: Dynamic Flash Forum + Version: 1.0 Beta + Website: http://df2.sourceforge.net/ + Bugs: A Information Disclosure B Authentication Bypass C Multiple SQL Injection + Exploitation: Remote + Date: 09 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta +...

[SECURITY] [DSA 1758-1] New nss-ldapd packages fix information disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1758-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 30, 2009 http://www.debian.org/security/faq -...

Firepack Code Execution

!/usr/bin/perl Firepack - Remote Command\Code Execution Exploit Firepack is a web atting toolkit often used in 2008, when the most versions of it were published. A short time ago i looked though the sourcecode and noticed that Vulnerability which can be used if the admin doesn't use a .htaccess...

QuoteBook (poll.inc) Remote Config File Disclosure Vulnerability

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

BlogHelper (common_db.inc) Remote Config File Disclosure Vulnerability

No description provided by source. ...... Remote Config File Disclosure ---------------------------------------------------- script: BlogHelper download from:http://www.freedville.com/oss/BlogHelper.zip vul: www.site.com/path/commondb.inc ................................ $dbhost = ""; $dbusername...

PollHelper (poll.inc) Remote Config File Disclosure Vulnerability

No description provided by source. Remote Config File Disclosure ---------------------------------------------------- script: PollHelper download from:http://www.freedville.com/oss/PollHelper.zip vul: www.site.com/path/poll.inc ............................... $dbhost = ""; $dbusername = "";...

Cain & Abel 4.9.25 - 'Cisco IOS-MD5' Local Buffer Overflow

!perl -w Simple overflow for Cain & Abel v4.9.25 and below? This script will output a file; import this file as a config file under Cracker - Cisco IOS-MD5 Hashes If Cain crashes but calc.exe isn't run, change $eip to reflect your system. send9 /at/ chiseclabs.com use strict; my $eip =...

BlogHelper Configuration File Disclosure

...... Remote Config File Disclosure ---------------------------------------------------- script: BlogHelper download from:http://www.freedville.com/oss/BlogHelper.zip vul: www.site.com/path/commondb.inc ................................ $dbhost = ""; $dbusername = ""; $dbuserpass = "";...

PollHelper (poll.inc) Remote Config File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= PollHelper poll.inc Remote Config File Disclosure Vulnerability ================================================================= Remote Config File Disclosure...

BlogHelper (common_db.inc) Remote Config File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== BlogHelper commondb.inc Remote Config File Disclosure Vulnerability ====================================================================== ...... Remote Config File...

OraMon 2.0.1 Remote Config File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================== OraMon 2.0.1 Remote Config File Disclosure Vulnerability ========================================================...

Arab Portal 2.1 Remote File Disclosure Vulnerability (win only)

Exploit for unknown platform in category web applications =============================================================== Arab Portal 2.1 Remote File Disclosure Vulnerability win only =============================================================== Arab Portal v2.1 Remote File Disclosure Win32...

Arab Portal 2.1 (Windows) - Remote File Disclosure

Arab Portal 2.1 Windows - Remote File Disclosure Arab Portal v2.1 Remote File Disclosure Win32 AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

OLIB 7 WebView 2.5.1.1 - 'infile' Local File Inclusion

Security Advisory for 'OLIB 7 Webview' This software is apart of Moodle. Software - OLIB 7 WebView v2.5.1.1 Exploit - LFI Severity - High Author - ZeN website - http://dusecurity.com/ Date - 2nd October 2008 DUSecurity Team / DarkCode Exploit http://olib.site.com/cgi/?session=sessionkey&infile=LF...

OLIB 7 WebView 2.5.1.1 (infile) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== OLIB 7 WebView 2.5.1.1 infile Local File Inclusion Vulnerability ================================================================== Security Advisory for 'OLIB 7 Webview'...

minbank-rfi.txt

Author : By DaRkLiFe Greetz : str0ke & S.VV.A.T. Script : Micronation Banking Systemminba 1.5.0 Remote File Inclusion Vulnerabilitys Download: http://downloads.sourceforge.net/minbank/minbav0150.zip?modtime=1169500084&bigmirror=0 Exploit :...

WebPortal CMS 0.7.4 - FCKeditor Arbitrary File Upload

WebPortal CMS 0.7.4 - FCKeditor Arbitrary File Upload S.W.A.T. Title: WebPortal = 0.7.4 fckeditor Remote Arbitrary File Upload Vendor: http://webportal.ivanoculmine.com/download.php?mid=14 Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable It In The Config File ; Site:...

Code injection

Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when registerglobals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file...

CVE-2008-3763

Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when registerglobals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file...

EUVD-2008-3749

Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when registerglobals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file...