linux/x86 append ""/etc/passwd"" & exit() 107 bytes

No description provided by source. / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name "toor" Platform: linux/x86 Size: 107 bytes Author: $andman / / 08049054 start: 8049054: eb 38 jmp 804908e callfun...

linux/x86 unlink(/etc/passwd) & exit() 35 bytes

No description provided by source. Title: linux/x86 unlink/etc/passwd & exit 35 bytes Date: 2009-12-24 Author: sandman, n4mdn4s 4T gmail D0T com Tested on: linux/Fedora 12 Code : / unlinkpasswd.c Platform: linux/x86 Size: 35 bytes Author: $andman / include string.h include stdio.h char shell =...

phpGroupWare多个输入验证漏洞

BUGTRAQ ID: 35761 CVE ID: CVE-2009-4414,CVE-2009-4415,CVE-2009-4416 phpGroupWare是一个用PHP编写的多用户的网络组件，为开发其他程序提供了一个API。 phpGroupWare的多个组件中存在输入验证错误，远程攻击者可以通过提交恶意请求泄露敏感信息、执行跨站脚本或SQL注入攻击。 1 没有正确地验证传送给csvfile参数的输入便在addressbook/csvimport.php中使用，这可能导致在受影响系统上读取任意文件的内容。 2...

CVE-2009-4414

SQL injection vulnerability in phpgwapi /inc/class.authsql.inc.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the passwd parameter to login.php...

linux/x86 unlink(/etc/passwd) & exit() 35 bytes

Exploit for linux/x86 platform in category shellcode =============================================== linux/x86 unlink/etc/passwd & exit 35 bytes =============================================== Title: linux/x86 unlink/etc/passwd & exit 35 bytes Date: 2009-12-24 Author: sandman Tested on:...

CVE-2009-4414: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in phpgwapi /inc/class.authsql.inc.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the passwd parameter to login.php...

CVE-2009-4176: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long 1 userid or 2 passwd parameter to ovlogin.exe...

CVE-2009-3846: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long 1 userid or 2 passwd parameter...

Misconfigured /etc/passwd file may share folders unexpectedly

Description If a user in /etc/passwd is misconfigured to have an empty home directory :: and the automated homes share is enabled, or an explicit share is created with that username, then any client connecting to that share name will be able to access the whole filesystem from root / on downwards...

Gentoo Security Advisory GLSA 200909-14 (horde horde-imp horde-passwd)

The remote host is missing updates announced in advisory GLSA 200909-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200909-14 (horde horde-imp horde-passwd)

The remote host is missing updates announced in advisory GLSA 200909-14. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

PunBB Reputation.php Mod 2.0.4 - Local File Inclusion

PunBB Reputation.php Mod 2.0.4 - Local File Inclusion !/usr/bin/perl 0-Day PunBB Reputation.php Mod 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub LocalFileInclusion my $Directory,$Command = @; return "./include/reputation/repprofile.php?punuserlanguage=$Directory$Command%00...

Debian Security Advisory DSA 1829-2 (sork-passwd-h3)

The remote host is missing an update to sork-passwd-h3 announced via advisory DSA 1829-2. OpenVAS Vulnerability Test $Id: deb18292.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1829-2 sork-passwd-h3 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Debian: Security Advisory (DSA-1829-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1829-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1829-2] New sork-passwd-h3 packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1829-2 [email protected] http://www.debian.org/security/ Steffen Joeris July 14, 2009 http://www.debian.org/security/faq -...

DJ Calendar (DJcalendar.cgi TEMPLATE) File Disclosure Vuln

Exploit for cgi platform in category web applications ========================================================== DJ Calendar DJcalendar.cgi TEMPLATE File Disclosure Vuln ========================================================== Discovered by cibbao PoC:...

DJ Calendar - 'DJcalendar.cgi TEMPLATE' File Disclosure

Discovered by cibbao PoC: /cgi-bin/DJcalendar.cgi?TEMPLATE=/../../../../../../../etc/passwd milw0rm.com 2009-07-14...

[SECURITY] [DSA 1829-1] New sork-passwd-h3 packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1829-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 11, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1829-1] New sork-passwd-h3 packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1829-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 11, 2009 http://www.debian.org/security/faq -...