WordPress Plugin WP Comment Remix 1.4.3 - SQL Injection

Advisory: http://chxsecurity.org/advisories/adv-3-full.txt PoC Mirror: http://chxsecurity.org/proof-of-concepts/wp-comment-remix-143.zip Attention: This is a Proof-of-Concept it was never intended to be fully functional Notes: Uses cURL / // Script Header function head print "\n WP Comment Remix...

Globsy 1.0 - Remote File Rewriting

!/usr/bin/php -q '".$filename."' could not be opened."; 39. fwrite$handle, $data or die"Write: The file '".$filename."' could not be writen."; $mode is $POST'mode' and $data = $POST'data' so you can rewrite or create any file / errorreporting0; iniset"defaultsockettimeout",5; $host =...

Linux kernel dccp_setsockopt_change() integer overflow

Integer overflow in the dccpsetsockoptchange function in net/dccp/proto.c in the Datagram Congestion Control Protocol DCCP subsystem in the Linux kernel 2.6.17-rc1 through 2.6.26.2 allows remote attackers to cause a denial of service panic via a crafted integer value, related to Change L and Chan...

CVE-2008-4360

moduserdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a...

[20081101] - Core - com_content XSS vulnerability

The defaults on comcontent article submission allow entry of dangerous HTML tags script, etc. This only affects users with access level Author or higher, and only if you have not set filtering options in comcontent configuration...

Mozilla Foundation Security Advisory 2008-40

Mozilla Foundation Security Advisory 2008-40 Title: Forced mouse drag Impact: Low Announced: September 23, 2008 Reporter: Paul Nickerson, Liu Die Yu Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.2 Firefox 2.0.0.17 SeaMonkey 1.1.12 Description Mozilla developer Paul Nickerson reported a varia...

Gentoo Security Advisory GLSA 200412-01 (scponly)

The remote host is missing updates announced in advisory GLSA 200412-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200511-17 (FUSE)

The remote host is missing updates announced in advisory GLSA 200511-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200511-17 (FUSE)

The remote host is missing updates announced in advisory GLSA 200511-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Apache Tomcat's default security policy is too open

The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by...

Invision Power Board 2.3.5 - SQL Injection

?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB = 2.3.5 sql injection exploit // Version 1.0 // written by Janek Vind "waraxe" // Estonia, Tartu // http://www.waraxe.us/...

Be careful Baidu blog rss leak your blog secrets-the vulnerability warning-the black bar safety net

If you apply for a Baidu blog, then in Settings-Display Options-article display options for full-text or summary, then you want to hide the articles through the rss to be seen. For the time being the solution is: Settings--Display Options--article display options to the title, so bad intentions o...

FreeBSD Security Advisory (FreeBSD-SA-04:06.ipv6.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:06.ipv6.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Invision Power Board <= 2.3.5 Multiple Vulnerabilities Exploit (revised)

Exploit for unknown platform in category web applications ======================================================================== Invision Power Board mhead; Gimme your args $this-pattack = $this-getp'attack', true; $this-pprox = $this-getp'proxhost'; $this-pproxa = $this-getp'proxauth';...

Security Best Practice: Familiarize Yourself with the Packet Sanity Protection

The Packet Sanity protection performs several Layer 3 and Layer 4 sanity checks. These include verifying packet size, UDP and TCP header lengths, dropping IP options and verifying the TCP flags.Numerous types of attacks may be hidden in fragmented packets...

Joomla! Component EZ Store Remote - Blind SQL Injection

!/usr/bin/perl Note:Sometimes you have to change the regexp to viewcategory/catid,".$cid." use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Joomla Component EZ Store Blind SQL Injection Exploit \n"; print " Author:His0k4 ALGERIAN HaCkeR \n"; print " \n"; print "...

mojoclassifieds-sql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " MojoClassifieds Blind SQL Injection Exploit \n"; print " mojoClassified.cgi mojo \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected] \n"; print " \n"; print " -::...

CVE-2008-3210

rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service daemon crash via a SIP 1 INVITE or 2 OPTIONS message with a long domain name in a request URI, which triggers an assert error...

[SECURITY] Fedora 8 Update: cairo-dock-1.6.1.1-1.fc8.1

An light eye-candy fully themable animated dock for any Linux desktop. It has a family-likeness with OSX dock, but with more options...

CVE-2008-3210: Improper Input Validation

rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service daemon crash via a SIP 1 INVITE or 2 OPTIONS message with a long domain name in a request URI, which triggers an assert error...