1837 matches found
phpSysInfo < 2.4.1 Multiple Vulnerabilities
The remote host is running phpSysInfo, a PHP application that parses the /proc entries on Linux/Unix systems and displays them in HTML. The installed version of phpSysInfo on the remote host has a design flaw in its globalization layer such that the script's variables can be overwritten independe...
Lazy overflow kits: Metasploit-vulnerability warning-the black bar safety net
A few days ago in the QQ on Q the friends said, found a really cool overflow kit, but how do I ask him he wouldn't tell me, and finally sent him a set of clothes only to tell me a kit name. Download back after use but this overflow kit is really cool, dare not exclusive, treat yourself to use the...
FUD Forum < 2.7.1 PHP code injection vurnelability
Avatar upload in FUD Forum 2.7.1 may be tricked to upload a PHP file. To do so merge a graphic avatar file with a PHP file. cat foo.png foo.php uploadme.php under linux/unix. On win try notepat :...
ngIRCd <= v0.8.2 Format String Vulnerability
------------------------------------------------- No System Group - Advisory 11 - 03/02/05 ------------------------------------------------- Program: ngIRCd Homepage: http://arthur.ath.cx/alex/ngircd/ Operating System: Linux and Unix-Compatible Vulnerable Versions: ngIRCd v0.8.2 and prior Risk:...
Open Security Group Advisory #6
List, In May, Open Security Group started a media player security audit to drive out defects in popular media player code with the hope of helping secure our networks, machines and users from malicious attackers. As the second stage of this project, I released an advisory on August 8th, 2004,...
DB4Web 3.43.6 - File Disclosure
DB4Web 3.43.6 - File Disclosure source: https://www.securityfocus.com/bid/5723/info DB4Web is an application server that allows read and write access to relational databases and other information sources, via the web. The application is available for Windows, Linux, and various Unix platforms. A...
ZeroBoard 4.1 - PHP Include File Arbitrary Command Execution
source: https://www.securityfocus.com/bid/5028/info Zeroboard is a PHP web board package available for the Linux and Unix platforms. Under some circumstances, it may be possible to include arbitrary PHP files. The head.php file does not sufficiently check or sanitize input. When the "allowurlfope...
Ayman Akt IRCIT 0.3.1 - Invite Message Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/4998/info IRCIT is a terminal based IRC client for Linux and Unix systems. IRCIT contains a remote buffer overflow vulnerability. When a INVITE message is received, the supplied from user data is copied into a fixed buffer of length MAXHOSTLEN. A...
Vulnerability in Apache Tomcat v3.23 & v3.24 (part 2)
Procheckup Ltd www.procheckup.com Procheckup Security Bulletin PR02-06 Description: Tomcat realPath.jsp gives location of web root. Date: 8/1/2002 Application: Apache Tomcat Java server versions 3.23 and 3.24 Platform: Linux/Unix Severity: Remote attackers can obtain the location of webroot...
Vulnerability in Apache Tomcat v3.23 & v3.24
Procheckup Ltd www.procheckup.com Procheckup Security Bulletin PR02-05 Description: Tomcat source.jsp directory listing and webroot location display Date: 8/1/2002 Application: Apache Tomcat Java server versions 3.23 and 3.24 Platform: Linux/Unix Severity: Remote attackers can obtain listings of...
Vulnerability in Apache Tomcat v3.23 & v3.24 (part 3)
Procheckup Ltd www.procheckup.com Procheckup Security Bulletin PR02-7 Description: Tomcat multiple sample files display webroot location on default configuration on request. Date: 8/1/2002 Application: Apache Tomcat java server v3.23, 3.24. Platform: Linux/Unix Severity: Remote attackers can obta...
LogWatch 2.1.12.5 - Insecure Temporary Directory Creation
LogWatch 2.1.12.5 - Insecure Temporary Directory Creation source: https://www.securityfocus.com/bid/4374/info LogWatch is a freely available, open source script for monitoring log files. It may be used with the Linux and Unix Operating systems. Upon execution, LogWatch creates a directory in /tmp...
SLA-17.Anaconda.txt
Synnergy Laboratories Advisory SLA-2000-17 NAME Anaconda Foundation Directory NULL byte vulnerability AFFECTED Linux/UNIX with Anaconda Foundation Directory SYNOPSIS Synnergy Labs has found a flaw within Anaconda Foundation Directory that allow s a user to successfully traverse the filesystem on ...
PHPix advisory
Synnergy Laboratories Advisory SLA-2000-15 NAME PHPix 1.0.X directory traversal vulnerability AFFECTED Linux/UNIX with PHPix 1.0.0/1.0.1/1.0.2 SYNOPSIS Synnergy Labs has found a flaw within PHPix that allows a user to successfully traverse the filesystem on a remote host, allowing arbitary...
Master Index traverse advisory
Synnergy Laboratories Advisory SLA-2000-16 NAME Master Index directory traversal vulnerability AFFECTED Linux/UNIX with Master Index SYNOPSIS Synnergy Labs has found a flaw within Master Index that allows a user to successfully traverse the filesystem on a remote host, allowing arbitary...
SLA-15-PHPix.txt
Synnergy Laboratories Advisory SLA-2000-15 NAME PHPix 1.0.X directory traversal vulnerability AFFECTED Linux/UNIX with PHPix 1.0.0/1.0.1/1.0.2 SYNOPSIS Synnergy Labs has found a flaw within PHPix that allows a user to successfully traverse the filesystem on a remote host, allowing arbitary...
phpPhotoAlbum.txt
PhotoAlbum 0.9.9 explorer.php Vulnerability + Advisory by pestilence www.synnergy.net |===============================================| Affected program: PhotoAlbum v0.9.9 previous ? System : Linux, UNIX, Windows Problem : Problem located within the explorer.php script. Discovery :...