Flip 3.0 - Remote Password Hash Disclosure

!/usr/bin/perl use strict; use IO::Socket; my $app = "Flip = 0; $data = substr$data, $index1+4; $index1 = 0; printf "%-20s %-32s\n", "username", "md5 hash"; while$index1 = index$data, "\n" = 0 my $hash = substr$data, 0, 32; my $index2 = index$data, ""; my $index3 = index$data, "", $index2+2; my...

DEBIAN-CVE-2007-4411

ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with 1 CIDR mask arguments or 2 certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies...

AZL-6778 CVE-2007-2768 affecting package openssh for versions less than 8.8p1-2

OpenSSH, when using OPIE One-Time Passwords in Everything for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords OTP, a similar issue to CVE-2007-2243...

1024CMS-disclose.txt

'/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : 1024 CMS Version 0.7 ! Vendor : http://www.treble.lfhost.com ! Author : Dj7xpl ! Type : Remote File...

PT-2007-3745 · Unknown · Seir Anphin

Name of the Vulnerable Software and Affected Versions: Seir Anphin affected versions not specified Description: A directory traversal issue in modules/file.php allows remote attackers to obtain sensitive information via a .. dot dot in the afilepath parameter. Note that a third party has disputed...

CVE-2007-2022

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information browser keystrokes, which are leaked to the Flash Player applet...

openssh-timing.txt

!/bin/bash $Id: raptorsshtime,v 1.1 2007/02/13 16:38:57 raptor Exp $ raptorsshtime - OpenSSH remote timing attack exploit Copyright c 2006 Marco Ivaldi OpenSSH-portable 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote...

UploadScript <=- v1.02 (password.txt) Remote Password Disclosure Vulnerability

UploadScript =- v1.02 password.txt Remote Password Disclosure Vulnerability Script: UploadScript Version: v1.02 URL: http://www.uploadscript.net/demo/download.php?file=1478fb6c5c807cdf12dd69410e14d66d Found By : BorN To K!LL Explo!T:. ^^^^^ www.site.com/path/password.txt GreeTz :. Dr.2 , Asbmay ,...

WWWBoard 2.0 - passwd.txt Remote Password Disclosure

WWWBoard 2.0 - passwd.txt Remote Password Disclosure WWWBoard 2.0 Alpha 2 passwd.txt Password Disclosure Vulnerability Affected Software: WWWBoard 2.0 Alpha Download: http://www.scriptarchive.com/wwwboard.html Bugfounder: bd0rk Contact: bd0rkathackermail.com Greetz: str0ke, Döner, TheJT, x0r32...

Vz (Adp) Forum 2.0.3 Remote Password Disclosure Vulnerablity

No description provided by source. SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC:...

Vz (Adp) Forum 2.0.3 Remote Password Disclosure Vulnerablity

Exploit for unknown platform in category web applications ============================================================ Vz Adp Forum 2.0.3 Remote Password Disclosure Vulnerablity ============================================================ SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity...

Modicon PLC CPU Type SNMP Request Model Type Remote Disclosure

Binary data scadamodiconsnmpcputype.nbin...

Modicon PLC Modbus Slave Mode SNMP Request Modbus Mode Remote Disclosure

Binary data scadamodiconsnmpmodbustype.nbin...

Modicon PLC IO Scan Status SNMP Request Scan Status Remote Disclosure

Binary data scadamodiconsnmpiostatus.nbin...

Modicon PLC Web Password Status Disclosure SNMP Request Password Status Remote Disclosure

Binary data scadamodiconsnmpwebpasswordstatus.nbin...

yet another OpenSSH timing leak?

Hello Bugtraq, Here we are again... During a recent penetration test i stumbled upon yet another OpenSSH timing leak, leading to remote disclosure of valid usernames. It's not as big as the one i found in the past CVE-2003-0190, but it can indeed be exploited over the Internet, nevertheless. This...

DEBIAN-CVE-2006-5117

phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files...

CVE-2006-5117

phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files...

DEBIAN-CVE-2006-4976

The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for 1 server.php, 2 adodb-errorpear.inc.php, 3 adodb-iterator.inc.php, 4 adodb-pear.inc.php, 5 adodb-perf.inc.php, 6 adodb-xmlschema.inc.php, and 7 adodb.inc.php; files ...

DEBIAN-CVE-2006-4679

DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug"...