Geo++ GNCASTER 1.4.0.7 - GET Denial of Service

Geo++ GNCASTER 1.4.0.7 - GET Denial of Service source: https://www.securityfocus.com/bid/40009/info Geo++ GNCASTER is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, resulting in a denial-of-service condition. Arbitrary...

Geo++ GNCASTER 1.4.0.7 - GET Denial of Service

source: https://www.securityfocus.com/bid/40009/info Geo++ GNCASTER is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, resulting in a denial-of-service condition. Arbitrary code-execution may also be possible; this has not been...

Geo++ GNCASTER 1.4.0.7 NMEA-data - Denial of Service

source: https://www.securityfocus.com/bid/40015/info Geo++ GNCASTER is prone to a denial-of-service vulnerability. An attacker with valid login credentials can exploit this issue to cause the application to crash, resulting in a denial-of-service condition. Arbitrary code-execution may also be...

Infiltrating the Pushdo Botnet

It’s very rare that we researchers get a chance to explore the inner workings of a botnet command and control server. Detailed insight into the botnet server or command component can give us valuable information about the motives of the botnet and possibly the bad guys behind it. But granting...

Code injection

gpsdrive aka gpsdrive-scripts 2.09 allows local users to overwrite arbitrary files via a symlink attack on an a /tmp/geo, a b /tmp/geocaching.loc, a c /tmp/geo., or a d /tmp/geo. temporary file, related to the 1 geo-code and 2 geo-nearest scripts, different vectors than CVE-2008-4959...

CVE-2008-5380

gpsdrive aka gpsdrive-scripts 2.09 allows local users to overwrite arbitrary files via a symlink attack on an a /tmp/geo, a b /tmp/geocaching.loc, a c /tmp/geo., or a d /tmp/geo. temporary file, related to the 1 geo-code and 2 geo-nearest scripts, different vectors than CVE-2008-4959...

CVE-2008-5380

gpsdrive aka gpsdrive-scripts 2.09 allows local users to overwrite arbitrary files via a symlink attack on an a /tmp/geo, a b /tmp/geocaching.loc, a c /tmp/geo., or a d /tmp/geo. temporary file, related to the 1 geo-code and 2 geo-nearest scripts, different vectors than CVE-2008-4959...

CVE-2008-5380

Gpsdrive (gpsdrive-scripts) has multiple local-privilege vectors via symlink attacks in /tmp (geo-*.coords, geo.google, geo.yahoo, geo.# etc.), affecting versions around 2.09–2.10~pre4. The root cause is insecure temporary-file handling in geo-code/geo-nearest and related scripts, allowing local ...

CVE-2008-5380: Improper Link Resolution Before File Access

gpsdrive aka gpsdrive-scripts 2.09 allows local users to overwrite arbitrary files via a symlink attack on an a /tmp/geo, a b /tmp/geocaching.loc, a c /tmp/geo., or a d /tmp/geo. temporary file, related to the 1 geo-code and 2 geo-nearest scripts, different vectors than CVE-2008-4959...

CVE-2008-4959

geo-code in gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/geo.google, 2 /tmp/geo.yahoo, 3 /tmp/geo.coords, and 4 /tmp/geo.coords temporary files...

Code injection

geo-code in gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/geo.google, 2 /tmp/geo.yahoo, 3 /tmp/geo.coords, and 4 /tmp/geo.coords temporary files...

CVE-2008-4959

geo-code in gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/geo.google, 2 /tmp/geo.yahoo, 3 /tmp/geo.coords, and 4 /tmp/geo.coords temporary files...

CVE-2008-4959: Improper Link Resolution Before File Access

geo-code in gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/geo.google, 2 /tmp/geo.yahoo, 3 /tmp/geo.coords, and 4 /tmp/geo.coords temporary files...

DNS Lookup Result Comparison

This module can be used to determine differences in the cache entries between two DNS servers. This is primarily useful for detecting cache poisoning attacks, but can also be used to detect geo-location load balancing. Module Options msf use auxiliary/spoof/dns/compare/results msf undefinedresult...

Debian: Security Advisory (DSA-771-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Magic CMS 4.2.747 (mysave.php file) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Magic CMS 4.2.747 mysave.php file Remote File Include Vulnerability ===================================================================== '/ -.-...

Magic CMS 4.2.747 - 'mysave.php' Remote File Inclusion

'/ -.- ---------------------oOO------OOo--------------------- | Magic CMS v4.2.747 mysave.php Remote File Inclusion | | works only with registerglobals = on | | coded by DNX | --------------------------------------------------------- ! Discovered: DNX ! Vendor: www.geo-soft.net/de-ch/ ! Detected:...

CVE-2006-5141

PHP remote file inclusion vulnerability in script.php in Kevin A. Gordon Open Geo Targeting aka geotarget allows remote attackers to execute arbitrary PHP code via a URL in the anppath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-5141: Undefined Security Weakness

PHP remote file inclusion vulnerability in script.php in Kevin A. Gordon Open Geo Targeting aka geotarget allows remote attackers to execute arbitrary PHP code via a URL in the anppath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

phpBB Blog 2.2.2 SQL inj. vuln.

phpBB Blog 2.2.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpbb-blog-222-sql-inj-vuln.html vendor:http://www.outshine.com/phpbbblog/ affected version:2.2.2 and prior Product Description: This is a blog system for phpBB. It...