phpPaleo 4.8b156 Local File Inclusion

'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a null-byte attack on the 'lang' GET parameter. II...

Microsoft ASP.NET Forms Authentication Bypass

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Microsoft ASP.NET Forms Authentication Bypass product: Microsoft .NET Framework vulnerable version: Microsoft .NET Framework Version:4.0.30319; ASP.NET...

KnFTPd 1.0.0 Denial Of Service

!/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; use Net::FTP; my $user = "system"; my $password =...

KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; us...

KnFTPd 1.0.0 - FEAT Denial of Service (PoC)

KnFTPd 1.0.0 - FEAT Denial of Service PoC !/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; use Net::FT...

Real Networks RealPlayer '.mp4'文件内存破坏漏洞

BUGTRAQ ID: 52706 RealPlayer是网上收听收看实时音频、视频和Flash的工具。 RealPlayer在处理畸形.mp4文件的实现上存在内存破坏漏洞，攻击者可利用此漏洞执行任意代码 0 Real Networks RealPlayer SP 1.1.4 Build 12.0.0.7 Real Networks RealPlayer SP 1.1.4 Real Networks RealPlayer SP 1.1.3 Real Networks RealPlayer SP 1.1.2 Real Networks RealPlayer SP 1.1.1 Real...

Apple Website Service - SQL Injection Vulnerabilities

Document Title: =============== Apple Website Service - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=476 APPLE ID: 196579501 CREDITS: http://support.apple.com/kb/ht1318 Release Date: ============= 2012-03-28 Vulnerability...

Php Interpreter Remote File Include Vulnerabilities

Exploit for php platform in category web applications TITLE : Php Interpreter Remote File Include Vulnerabilities Google Dork: N\A Download: http://sourceforge.net/projects/phpinterpreter/files/latest/download?source=directory Date: 27.mar.12 Contact: email protected \ email protected Follow:...

Family CMS 2.9 and earlier multiple Vulnerabilities

Exploit for php platform in category web applications Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

Family CMS 2.9 - Multiple Vulnerabilities

Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

RIPS 0.53 Local File Inclusion

RIPS = 0.53 Multiple Local File Inclusion Vulnerabilities Google Dork: allintitle: "RIPS - A static source code analyser for vulnerabilities in PHP scripts" Althout this script is not intended to be accesible from internet, there are some websites that host it. Download:...

PHP 5.4.0 Denial Of Service

!/usr/bin/python Title: PHP 5.4.0 Built-in Web Server DoS PoC Date: 16 March 2012 Author: ls [email protected] Reference: https://bugs.php.net/bug.php?id=61461 Comments: Fixed in PHP 5.4.1RC1-DEV and 5.5.0-DEV The value of the Content-Length header is passed directly to a pemalloc call in...

phpMoneyBooks 1.0.2 Local File Inclusion

Exploit for php platform in category web applications 'phpMoneyBooks' Local File Inclusion CVE-2012-1669 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for module handling that allows for local file inclusion using a...

Multiple XSS vulnerabilities in All-in-One Event Calendar Plugin for WordPress

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in All-in-One Event Calendar Plugin for WordPress, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Cross-Site Scripting XSS in All-in-One Event Calendar Plugin for WordPress: CVE-2012-1835 1.1...

PeerFTP Server 4.01 - Remote Crash (PoC)

PeerFTP Server 4.01 - Remote Crash PoC !/usr/bin/python PeerFTP Server \n" %sys.argv0 sys.exit def checkDefaultUserusername,password: if username == '': username = "anonymous" if password == '': password = "[email protected]" else: pass return username,password def createUser: username =...

Android FTPServer 1.9.0 - Remote Denial of Service

Android FTPServer 1.9.0 - Remote Denial of Service Exploit Title: Android FTPServer 1.9.0 Remote DoS Date: 03/20/12 Author: G13 Twitter: @g13net Software Site: https://sites.google.com/site/andreasliebigapps/ftpserver/ Download Link: http://www.g13net.com/ftpserver.apk Version: 1.9.0 Category: Do...

Android FTPServer 1.9.0 Denial Of Service

Exploit Title: Android FTPServer 1.9.0 Remote DoS Date: 03/20/12 Author: G13 Twitter: @g13net Software Site: https://sites.google.com/site/andreasliebigapps/ftpserver/ Download Link: http://www.g13net.com/ftpserver.apk Version: 1.9.0 Category: DoS android Vulnerability FTPServer is vulnerable to ...

at32 Reverse Proxy 1.060.310 Denial Of Service

Title: at32 Reverse Proxy - Multiple HTTP Header Field Denial Of Service Vulnerability Product : at32 Reverse Proxy Version : v1.060.310 Vendor: http://www.at32.com/doc/rproxy.htm Class: Boundary Condition Error CVE: Remote: Yes Local: No Published: 2012-03-14 Updated: Impact : Medium CVSS2 Base ...

2X Client for RDP 10.1.1204 - ClientSystem Class ActiveX Control Download and Execute

2X Client for RDP 10.1.1204 ClientSystem Class ActiveX Control TuxClientSystem.dll InstallClient Download and Execute Vulnerability tested against: Microsoft Windows Vista SP2 Microsoft Windows Server 2003 r2 sp2 Internet Explorer 8 vendor description: "2X Software is a global leader of desktop a...

Telnet-Ftp Server <= v1.218 Remote Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/python Telnet-Ftp Server \n" %sys.argv0 sys.exit def checkDefaultUserusername,password: if username == '' and password == '': username = "anonymous" password = "email protected" else: pass return username,password def createUser: userna...