pumpkin-dos.txt

require 'msf/core' class Metasploit3 'PumpKIN TFTP Server DoS', 'Description' = %q PumpKIN TFTP Server 2.7.2.0 eventually reaches a DoS condition when provided with an overly long mode value. It'll take a minute. This condition is reached quicker when hammered repeatedly. , 'Author' = 'Saint...

MyForum 1.3 - padmin Local File Inclusion

MyForum 1.3 - padmin Local File Inclusion o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : MyForum 1.3 | | Download :...

Advisory for Oracle CPU October 2008 - APEX Flows excessive privileges

Advisory for Oracle CPU October 2008 - APEX FLOWS excessive privileges ====================================================================== See http://www.petefinnigan.com/AdvisoryCPUOct2008.htm for details Description ----------- Oracle Appication Express APEX is a rapid development tool for...

Joomla Component RWCards 3.0.11 Local File Inclusion Vulnerability

No description provided by source. o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : RWCards 3.0.11 Component for Joomla...

CVE-2008-4250

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild ...

Joomla! Component RWCards 3.0.11 - Local File Inclusion

Joomla! Component RWCards 3.0.11 - Local File Inclusion o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : RWCards 3.0.11...

CVE-2008-4726

creationtimestamp| type| source ---|---|--- 2008-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6804...

Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.ALTER_AUTOLOG_CHANGE_SOURCE

The module exploits an sql injection flaw in the ALTERAUTOLOGCHANGESOURCE procedure of the PL/SQL package DBMSCDCPUBLISH. Any user with execute privilege on the vulnerable package can exploit this vulnerability. By default, users granted EXECUTECATALOGROLE have the required privilege. Affected...

Oracle DB SQL Injection via SYS.DBMS_CDC_IPUBLISH.ALTER_HOTLOG_INTERNAL_CSOURCE

The module exploits an sql injection flaw in the ALTERHOTLOGINTERNALCSOURCE procedure of the PL/SQL package DBMSCDCIPUBLISH. Any user with execute privilege on the vulnerable package can exploit this vulnerability. By default, users granted EXECUTECATALOGROLE have the required privilege. Affected...

postaffiliate-lfi.txt

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Software : Post Affiliate Pro v2.0 Vulnrability : Local File Inclusion Severity : High Author : ZeN Date : 16 October 2008 Websites http://DUSecurity.com http://DarkCode.me PS : You MUST be logged into the system for the exploit to work...

habaricms-xss.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com Greetings to --d3hydr8 -r45c4l -baltazar -sinner01 -C1c4Tr1Z -Gabitzu and all darkc0de members ; Author: swappie aka faithlove Home :...

Post Affiliate Pro 2.0 (index.php md) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Post Affiliate Pro 2.0 index.php md Local File Inclusion Vulnerability ========================================================================...

Post Affiliate Pro 2.0 - 'md' Local File Inclusion

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Software : Post Affiliate Pro v2.0 Vulnrability : Local File Inclusion Severity : High Author : ZeN Date : 16 October 2008 Websites http://DUSecurity.com http://DarkCode.me PS : You MUST be logged into the system for the exploit to work...

Microsoft Security Bulletin MS08-059 – Critical Vulnerability in Host Integration Server RPC Service Could Allow Remote Code Execution (956695)

Microsoft Security Bulletin MS08-059 – Critical Vulnerability in Host Integration Server RPC Service Could Allow Remote Code Execution 956695 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsof...

CPUOct2008 Advisory

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only th...

vista-access.txt

// ////////////////////////////////////////////////////////////// // Windows Vista BSoD Access violation from limited account. // // Tested on Home Premium & Ultimate @ October 05 2008 // ///////////////////////////////////////////////////////////////// include include WCHAR szClass = L"BSODClass...

MS Windows Vista Access Violation from Limited Account Exploit (BSoD)

No description provided by source. // ////////////////////////////////////////////////////////////// // Windows Vista BSoD Access violation from limited account. // // Tested on Home Premium & Ultimate @ October 05 2008 // ///////////////////////////////////////////////////////////////// include...

[Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001

ID-Commerce Security Advisory - SLR-2007-001 +------------------------------------------------------------------------+ | Product | ID-Commerce | |--------------------+---------------------------------------------------| | Summary | SQL Injection Vulnerabilities |...

Oracle 10g - LT.FINDRICSET SQL Injection (IDS Evasion)

Oracle 10g - LT.FINDRICSET SQL Injection IDS Evasion // / Oracle 10g LT.FINDRICSET SQL Injection Exploit / // / sploit grant DBA to scott / / evil cursor injection / / No "create procedure" privileg needed! / / + Funny IDS evasion vith base64 / // / tested on oracle 10.1.0.2.0 / // // / Date of...

webif-xss.txt

----------------------------- || WWW.SMASH-THE-STACK.NET || ----------------------------- || ADVISORY: IFNET.IT WEBIF XSS VULNERABILITY || 0x00: ABOUT ME || 0x01: DATELINE || 0x02: INFORMATION || 0x03: EXPLOITATION || 0x04: GOOGLE DORK || 0x05: RISK LEVEL || 0x00: ABOUT ME Author: SkyOut Date:...