PT-2007-3745 · Unknown · Seir Anphin

Name of the Vulnerable Software and Affected Versions: Seir Anphin affected versions not specified Description: A directory traversal issue in modules/file.php allows remote attackers to obtain sensitive information via a .. dot dot in the afilepath parameter. Note that a third party has disputed...

CVE-2007-2022

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information browser keystrokes, which are leaked to the Flash Player applet...

openssh-timing.txt

!/bin/bash $Id: raptorsshtime,v 1.1 2007/02/13 16:38:57 raptor Exp $ raptorsshtime - OpenSSH remote timing attack exploit Copyright c 2006 Marco Ivaldi OpenSSH-portable 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote...

UploadScript <=- v1.02 (password.txt) Remote Password Disclosure Vulnerability

UploadScript =- v1.02 password.txt Remote Password Disclosure Vulnerability Script: UploadScript Version: v1.02 URL: http://www.uploadscript.net/demo/download.php?file=1478fb6c5c807cdf12dd69410e14d66d Found By : BorN To K!LL Explo!T:. ^^^^^ www.site.com/path/password.txt GreeTz :. Dr.2 , Asbmay ,...

WWWBoard 2.0 - passwd.txt Remote Password Disclosure

WWWBoard 2.0 - passwd.txt Remote Password Disclosure WWWBoard 2.0 Alpha 2 passwd.txt Password Disclosure Vulnerability Affected Software: WWWBoard 2.0 Alpha Download: http://www.scriptarchive.com/wwwboard.html Bugfounder: bd0rk Contact: bd0rkathackermail.com Greetz: str0ke, Döner, TheJT, x0r32...

Vz (Adp) Forum 2.0.3 Remote Password Disclosure Vulnerablity

No description provided by source. SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC:...

Vz (Adp) Forum 2.0.3 Remote Password Disclosure Vulnerablity

Exploit for unknown platform in category web applications ============================================================ Vz Adp Forum 2.0.3 Remote Password Disclosure Vulnerablity ============================================================ SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity...

Modicon PLC CPU Type SNMP Request Model Type Remote Disclosure

Binary data scadamodiconsnmpcputype.nbin...

Modicon PLC Modbus Slave Mode SNMP Request Modbus Mode Remote Disclosure

Binary data scadamodiconsnmpmodbustype.nbin...

Modicon PLC IO Scan Status SNMP Request Scan Status Remote Disclosure

Binary data scadamodiconsnmpiostatus.nbin...

Modicon PLC Web Password Status Disclosure SNMP Request Password Status Remote Disclosure

Binary data scadamodiconsnmpwebpasswordstatus.nbin...

yet another OpenSSH timing leak?

Hello Bugtraq, Here we are again... During a recent penetration test i stumbled upon yet another OpenSSH timing leak, leading to remote disclosure of valid usernames. It's not as big as the one i found in the past CVE-2003-0190, but it can indeed be exploited over the Internet, nevertheless. This...

DEBIAN-CVE-2006-5117

phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files...

CVE-2006-5117

phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files...

DEBIAN-CVE-2006-4976

The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for 1 server.php, 2 adodb-errorpear.inc.php, 3 adodb-iterator.inc.php, 4 adodb-pear.inc.php, 5 adodb-perf.inc.php, 6 adodb-xmlschema.inc.php, and 7 adodb.inc.php; files ...

DEBIAN-CVE-2006-4679

DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug"...

CVE-2006-4633

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page parameter...

[UNIX] Blog Torrent Remote User and Password Disclosure

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

DEBIAN-CVE-2005-2008

Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a yaw script with a trailing %00 null...

[SA15448] Cookie Cart Exposure of Order Notifications and Passwords

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...