HTTP File Same Name Directory Scanner

This module identifies the existence of files in a given directory path named as the same name of the directory. Only works if PATH is different than '/'. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Unsafe handling of temporary files

PMASA-2010-2 Announcement-ID: PMASA-2010-2 Date: 2010-01-15 Summary Unsafe handling of temporary files Description phpMyAdmin created temporary files with predictable file name. Severity We consider these vulnerabilities to be not critical. Affected Versions For 2.11.x: versions before 2.11.10 ar...

Sub Station Alpha 4.08 - .rt Local Buffer Overflow (PoC)

Sub Station Alpha 4.08 - .rt Local Buffer Overflow PoC /Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0 fl0w/ include include define FIL3 "testfile.rt" char header=...

Apache deformity php file name execution vulnerability-vulnerability warning-the black bar safety net

Affected versions: Unknown Vulnerability description: Create similar to“. php.”, the File name 如 nuanyue.com.php.jpg Upload to server to run the script. Test script: test-image.php.jpg ? php phpinfo;?& gt; Tested linux as 5 + php5+ Apache/2.2.3 effective...

Microsoft Windows Shell Remote Code Execution (MS04-024; CVE-2004-0420)

A vulnerability has been discovered in the Microsoft Windows Shell, an API that provides a basic framework for the Windows user interface. The Shell provides many functions that perform various configuration tasks and background operations, such as launching applications through the Start Menu...

Changetrack 4.3-3 - Local Privilege Escalation

TITLE: Changetrack Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA36756 VERIFY ADVISORY: http://secunia.com/advisories/36756/ DESCRIPTION: A vulnerability has been discovered in Changetrack, which can be exploited by malicious, local users to gain escalated privileges. The application...

MP3 Collector 2.3 - .m3u Local Crash (PoC)

MP3 Collector 2.3 - .m3u Local Crash PoC !/usr/bin/perl MP3 Collector 2.3 m3u File Local Crash PoC By : zAx Application Homepage : http://collectorz.com Application Download : http://downloads.collectorz.com/mp3collectorsetup.exe Go to Playlist menu, select Open Playlist, Select the File and a...

MP3 Collector 2.3 - '.m3u' Local Crash (PoC)

!/usr/bin/perl MP3 Collector 2.3 m3u File Local Crash PoC By : zAx Application Homepage : http://collectorz.com Application Download : http://downloads.collectorz.com/mp3collectorsetup.exe Go to Playlist menu, select Open Playlist, Select the File and a click on file name. $header = "http://";...

Mandriva Update for samba MDKSA-2007:034 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDKSA-2007:034 samba Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CPANEL File Manager XSS Vulnerability

Cpanel File Manager XSS Vulnerability Synopsis ------------- Cpanel www.cpanel.net has two file manager application, standard and legacy one to manage files. Both of them are vulnerable to XSS attack. File name is presented unescaped so that an attacker can craft malicious file name to execute...

CVE-2009-0184

Multiple buffer overflows in the torrent parsing implementation in Free Download Manager FDM 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via 1 a long file name within a torrent file, 2 a long tracker URL in a torrent file, or 3 a long comment in a torrent file...

"GNUBoard 4.31.04 (09.01.30) Multiple Local/Remote Vulnerabilities"

No description provided by source. GNUBoard V4.31.04 09.01.30 Multiple Local/Remote Vulnerability bY [email protected] / SIR GNUBoard VERSION 4.31.04 09.01.30is a widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But we find a file...

GNUBoard 4.31.04 (09.01.30) Multiple Local/Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= GNUBoard 4.31.04 09.01.30 Multiple Local/Remote Vulnerabilities ================================================================= GNUBoard V4.31.04 09.01.30 Multiple...

GNUBoard 4.31.04 LFI / SQL Injection

GNUBoard V4.31.04 09.01.30 Multiple Local/Remote Vulnerability bY [email protected] / SIR GNUBoard VERSION 4.31.04 09.01.30is a widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But we find a file include vulnerability affects SIR...

GNUBoard 4.31.04 (09.01.30) - Multiple LocalRemote Vulnerabilities

GNUBoard 4.31.04 09.01.30 - Multiple LocalRemote Vulnerabilities GNUBoard V4.31.04 09.01.30 Multiple Local/Remote Vulnerability bY [email protected] / SIR GNUBoard VERSION 4.31.04 09.01.30is a widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP...

Get apache the file name parsing flaw vulnerability-vulnerability warning-the black bar safety net

apache file name parsing, is to start from the back to check the suffix, according to the last legitimate the suffix implementation. Such as: cmdshell. php. amxku because amxku is not apache to parse, so the apache put this file when the php file parsing. 可以 参见 http://www.4ngel.net/article/63.htm...

Perl File::Find::Object模块格式串漏洞

BUGTRAQ ID: 31938 CNCAN ID：CNCAN-2008102803 Perl File::Find::Object是一款面向对象的File::Find替代程序。 Perl File::Find::Object处理部分循环条件时存在格式串问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 由于文件名不正确过滤传递给printf STDERR，可导致触发典型的格式串错误，如果应用程序利用这个库扫描目录树，可以应用程序权限执行任意指令。 Olivier Thauvin File::Find::Object 0.1 可升级到File::Find::Object...

CVE-2008-4589

Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and 4.20.0512, allows local users to execute arbitrary code via a long file name...

CVE-2008-4589

Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and 4.20.0512, allows local users to execute arbitrary code via a long file name...

Linux kernel local filesystem DoS

The 1 reallookup and 2 lookuphash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted aka SDEAD directory, which allows local users to cause a denial of service "overflow" of the UBIFS orphan area via a...