moziloCMS 1.10.1 (download.php) Arbitrary Download File Exploit

Exploit for unknown platform in category web applications =============================================================== moziloCMS 1.10.1 download.php Arbitrary Download File Exploit =============================================================== !/usr/bin/perl moziloCMS 1.10.1 Perl exploit...

MS Internet Explorer .ANI files handling Universal Exploit (MS05-002)

No description provided by source. / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002 Microsoft Internet Explorer .ANI Files Handling Exploit CAN-2004-1049 .:: houseofdabus ::. universal -- for all affected systems...

CMS Mini 0.2.2 - Multiple Local File Inclusions

===================================================== CMS Mini 0.2.2 Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

ThaiQuickCart 3 - 'sLanguage' Cookie Local File Inclusion

===================================================================== ThaiQuickCart COOKIE:sLanguage Local File Inclusion Vulnerability ===================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

OpenOffice.org overflow possible on allocation

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow...

OtomiGen.X 2.2 (lang) Local File Inclusion Vulnerabilities

No description provided by source. + Author: Saime + Script: OtomigenX v2.2 lang Local File Inclusion + URL: http://kmrg.itb.ac.id/otomigenx/?menu=download + Date: 28/05/2008 + Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed,GM,str0ke, and everyon...

MS08-012: Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (947085)

The remote host is running a version of Microsoft Publisher that may allow arbitrary code to be run on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. Then a bug in the font parsing handler would result in code execution. ...

MPlayer 1.0rc2 - 'demux_mov.c' Remote Code Execution

source: https://www.securityfocus.com/bid/27499/info MPlayer is prone to a remote code-execution vulnerability because it fails to sanitize certain 'MOV' file tags before using them to index heap memory. An attacker can exploit this issue to execute arbitrary code, which can result in the complet...

Liquid-Silver CMS 0.1 (update) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= Liquid-Silver CMS 0.1 update Local File Inclusion Vulnerability ================================================================= Liquid-Silver CMS Local File Inclusion...

Directory traversal

Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsOptionpagetype parameter to the default URI for modules/news/. NOTE: this can be leveraged by using legitimate product...

NuclearBB Alpha 2 - ROOT_PATH Remote File Inclusion

NuclearBB Alpha 2 - ROOTPATH Remote File Inclusion Vuln Product: NuclearBB Alpha 2 Vendor: http://www.nuclearbb.com/ Vulnerability Type: Remote File Inclusion Autor: Infection Team: Rootshell Security Team Vulnerable file: /NuclearBB/tasks/sendqueuedemails.php Exploit URL:...

CVE-2007-4510

ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service application crash via 1 a crafted RTF file, which triggers a NULL dereference in the cliscanrtf function in libclamav/rtf.c; or 2 a crafted HTML document wit...

XOOPS Module horoscope 2.0 - Remote File Inclusion

XOOPS Module horoscope 2.0 - Remote File Inclusion BeyazKurt - [email protected] XOOPS Modules Horoscope http://www.xoops.org/modules/repository/visit.php?cid=32&lid=1162 modules/horoscope/footer.php?xoopsConfigrootpath= NetLife Since : '2003-4' Emekli Heykır BeyazKurt - Neti bıraktım!...

Mozilla Firefox 2.0.0.3 Gran Paradiso 3.0a3 - Hang Crash (Denial of Service)

Mozilla Firefox 2.0.0.3 Gran Paradiso 3.0a3 - Hang Crash Denial of Service usr/bin/python print "-------------------------------------------------------------------------" print " Mozilla Firefox 2.0.0.3 and Gran Paradiso 3.0a3 Denial of Service" print " author: shinnai" print " mail:...

Novell Access Management SSLVPN Server - Security Bypass

source: https://www.securityfocus.com/bid/22787/info Novell Access Management SSLVPN Server is prone to a security-bypass vulnerability. A remote authenticated attacker can exploit this issue to access corporate resources normally restricted within VPN access policy. This may lead to other attack...

CS-Gallery 2.0 (index.php album) Remote File Include Exploit

Exploit for unknown platform in category web applications ============================================================ CS-Gallery 2.0 index.php album Remote File Include Exploit ============================================================ ?php //File Inclusion Exploit for CSGallery = 2.0 //|...

Then the storm BBSxp 7.0 Beta 2 vulnerability-vulnerability warning-the black bar safety net

Author: TTFCT The vulnerability exists in the file setup. asp The first part of the Registration－login-post-edit-capture-package-promoted to administrator-change background-password - login backend-WEBSHELL Here I set the password as: ttfct1 ,NC submitted successfully provided for the...

Discuz论坛爆物理路径

当把变量当成数组提交时，如果不存在该数组，但存在变量，后面的pregmatch正则表达式匹配不了， 这样就出现了绝对路径的泄露 Discuz!5.2 Discuz!5.1 Discuz!4.1 Discuz!4.0 http://www.discuz.net/ 打开论坛 include 目录下的 common.inc.php $extra = isset$extra && pregmatch 改成 $extra = isset$extra && @pregmatch 1.common.inc.php问题代码207行 ..... $navtitle = $navigation = '';...

Rediff Bol Downloader (ActiveX Control) Execute Local File Exploit

No description provided by source. !-- Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/...

SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)

No description provided by source. --------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...