phpMyConferences-8.0.2.txt

phpMyConferences = 8.0.2 Remote File Inclusion Download Source : http://sedre.loria.fr/phpMyConference/phpMyConferences8.0.2.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; menus.inc.php bugs ; include$lvcincludedir.'/menus-'.$view.'.inc.php';...

PHPMyConferences 8.0.2 - 'menu.inc.php' File Inclusion

phpMyConferences = 8.0.2 Remote File Inclusion Download Source : http://sedre.loria.fr/phpMyConference/phpMyConferences8.0.2.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; menus.inc.php bugs ; include$lvcincludedir.'/menus-'.$view.'.inc.php';...

Jinzora-2.1.txt

Jinzora = 2.1 Remote File Inclusion Download Source : http://www.jinzora.com/downloads/j2.1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; media.php bugs ; // include classes for extending. requireonce$includepath. 'backend/classes.php'; exmple and...

tagit2b -- Remote File Inclusion

tagit2b -- Remote File Inclusion Download Source : http://codewalkers.com/codefiles/453tagit2b.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; delTagUser.php bugs ; include"$configpath/errmsg.inc.php"; exmple and methode exploit ;...

e-Vision CMS 2.0 (all_users.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? / / e-Vision CMS Remote sql injection exploit / By : HACKERS PAL / WwW.SoQoR.NeT / printr' // / e-Vision CMS Remote sql injection exploit / / by HACKERS PAL [email protected] / / site: http://www.soqor.net /'; if $argc2...

CVE-2006-4082: Undefined Security Weakness

Barracuda Spam Firewall BSF, possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 localhost, which allows local users to gain privileges...

ToendaCMS 1.0.0 - 'FCKeditor' Arbitrary File Upload

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...

ipb216.txt

//Product :Invision Power Board //Version :2.1.6 and prior versions must be affected. //XSS= http://localhost/forum/admin.php?phpinfo=alert //You can steal only admins cookie. //www.spymastersnake.org //[email protected]...

EUVD-2002-2149

Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request...

Slackware 10.0 / 10.1 / 10.2 / current : X.Org pixmap overflow (SSA:2005-269-02)

New X.Org server packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a security issue. An integer overflow in the pixmap handling code may allow the execution of arbitrary code through a specially crafted pixmap. Slackware 10.2 was patched against this vulnerability before...

Free SMTP Server open relay

Restriction to localhost relaying only doesn't work in default configuration...

CVE-2005-2729

The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services...

Adobe Version Cue 1.0/1.0.1 (OSX) - '-lib' Local Privilege Escalation

/ Adobe Version Cue VCNativeOSX: local root exploit. dyld by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program allows un-privileged local users to load arbitrary libraries"bundles" while running setuid root. this is done via the "-lib" command-line option. note:...

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...

MySQL Eventum 1.5.5 - login.php SQL Injection

MySQL Eventum 1.5.5 - login.php SQL Injection !/usr/bin/perl -w use IO::Socket; use strict; print "\n"; print " MySQL Eventum new PeerAddr = $host, PeerPort = $port, Proto = 'tcp' || die "! Unable to connect to $host\n"; my $post =...

Baby Web Server 2.6.2 - Command Validation

Baby Web Server 2.6.2 - Command Validation !/bin/perl Baby Web Server Command Validation Exploit -------------------------------------------------- Infam0us Gr0up - Securiti Research E:\nc -v localhost 80 Infam0us-Gr0up 127.0.0.1 80 http open GET HTTP HTTP/1.0 400 Bad Request Server: Baby Web...

Remote File Manager 1.0 Denial of Service Exploit

No description provided by source. / Server Remote File Manager DoS Exploit ------------------------------------------- INFGP - Hacking&security Research + Attacking localhost.. + Build DOS string + Buffer size = 300 byte + Sending bad format.. + localhost : Disconected! Greats: Infam0us...

Remote File Manager 1.0 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================= Remote File Manager 1.0 Denial of Service Exploit ================================================= / Server Remote File Manager DoS Exploit ------------------------------------------- INFGP -...

Remote File Manager 1.0 - Denial of Service

/ Server Remote File Manager DoS Exploit ------------------------------------------- INFGP - Hacking&security Research + Attacking localhost.. + Build DOS string + Buffer size = 300 byte + Sending bad format.. + localhost : Disconected! Greats: Infam0us...

CVE-2001-1474

CVE-2001-1474 concerns SSH prior to version 2.0, where host key checking is disabled when connecting to localhost. This creates a vulnerability condition that can be exploited by poisoning the client’s DNS cache to silently redirect connections to localhost. The description in the connected docum...