CVE-2007-0467

crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges via a symlink attack on application logs in /Library/Logs/CrashReporter/...

Galeria Zdjec 3.0 - 'zd_numer.php' Local File Inclusion

!/usr/bin/perl Script Name: Galeria Zdjec = v3.0 zdnumer.php Local File Include Exploit Coded by : ajann Author : ajann Contact : : $$ : Free use IO::Socket; use LWP::Simple; @apache= "../../../../../var/log/httpd/accesslog", "../../../../../var/log/httpd/errorlog", "../apache/logs/error.log",...

Galeria Zdjec 3.0 - zd_numer.php Local File Inclusion

Galeria Zdjec 3.0 - zdnumer.php Local File Inclusion !/usr/bin/perl Script Name: Galeria Zdjec = v3.0 zdnumer.php Local File Include Exploit Coded by : ajann Author : ajann Contact : : $$ : Free use IO::Socket; use LWP::Simple; @apache= "../../../../../var/log/httpd/accesslog",...

XSS 0DAY-vulnerability warning-the black bar safety net

See dream light out! I also do not hide! 1 0 On 7, When I sent the logs,prompting everyone! Here was the last issued byXSS WORM beginning to try to continue it. Actually very simple,is two times the transfer code. DIV STYLE="background-image: urljavascript:var XmlHttp=new ActiveXObject"Microsoft...

CVE-2003-1312

siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION parameter in a URL, which might allow remote attackers to obtain the ID by sniffing, reading Referer logs, or other methods...

CVE-2006-6302

fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containi...

CVE-2006-6301

DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain...

PHPManta 1.0.2 - view-sourcecode.php Local File Inclusion

PHPManta 1.0.2 - view-sourcecode.php Local File Inclusion !/usr/bin/perl Script Name: phpManta - Mdoc = 1.0.2 view-sourcecode.php Local File Include Exploit Coded by : ajann Author : ajann Contact : : use IO::Socket; use LWP::Simple; @apache= "../../../../../var/log/httpd/accesslog",...

CVE-2006-5199

Adobe Contribute Publishing Server leaks the administrator password in logs that are created during product installation, which allows local users to gain privileges to the server...

CVE-2006-5199

CVE-2006-5199 affects Adobe Contribute Publishing Server running on Windows. The installation logs may contain the administrator password, enabling a local user to gain privileges to the server and potentially access related resources. The public records in the provided documents confirm the leak...

OpenSSH < 4.4 Multiple Vulnerabilities

Binary data 3751.prm...

OpenSSH < 4.4 Multiple Vulnerabilities

According to its banner, the version of OpenSSH installed on the remote host is affected by multiple vulnerabilities : - A race condition exists that may allow an unauthenticated, remote attacker to crash the service or, on portable OpenSSH, possibly execute code on the affected host. Note that...

CVE-2006-4991

RSA Keon Certificate Authority KeonCA Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority CA activities by modifying CA auditor logs without detection by 1 modifying or deleting a and its signature from the XML log in a way that is not detected by the...

CVE-2006-4991

RSA Keon Certificate Authority KeonCA Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority CA activities by modifying CA auditor logs without detection by 1 modifying or deleting a and its signature from the XML log in a way that is not detected by the...

CVE-2006-4991

RSA Keon Certificate Authority (KeonCA) Manager versions 6.5.1 and 6.6 are affected. The vulnerability allows local privileged users to hide CA activities by tampering auditor logs: (1) modifying or deleting a and its signature in the XML log without triggering the integrity check on the entire ...

AlstraSoft E-Friends <= 4.85 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================================= AlstraSoft E-Friends = 4.85 Remote Command Execution Exploit ============================================================= !/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command...

CVE-2006-4642

AuditWizard 6.3.2, when using "Remote Audit," logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file...

Wikepage Opus 10 2006.2a (lng) - Remote Command Execution

Wikepage Opus 10 2006.2a lng - Remote Command Execution !/usr/bin/perl WIKEPAGE "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent:...

barracudeHardcode.txt

Title: Barracuda Hardcoded Password Vulnerability Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected] Discovered on: 28 May 2006 Overview: Barracuda Sp...

sendcard_340_xpl.txt

!/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardless of php.ini settings\n"; echo " and if you succeed ...