LimeWire 4.1.2 4.5.6 - GET Remote File Read

LimeWire 4.1.2 4.5.6 - GET Remote File Read !/usr/bin/perl Limewire 4.1.2 - 4.5.6 remote and fucking lame exploit written by lammat http://grpower.ath.cx [email protected] Discovered by Kevin Walsh use IO::Socket; $host = @ARGV0; $file = @ARGV1; unless @ARGV == 2 print "usage: $0 host file\n"; pri...

LimeWire 4.1.2 < 4.5.6 - 'GET' Remote File Read

!/usr/bin/perl Limewire 4.1.2 - 4.5.6 remote and fucking lame exploit written by lammat http://grpower.ath.cx [email protected] Discovered by Kevin Walsh use IO::Socket; $host = @ARGV0; $file = @ARGV1; unless @ARGV == 2 print "usage: $0 host file\n"; print "E.g: $0 10.0.0.2 /etc/passwd\n"; exit @r...

CVE-2005-0520

ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut .LNK files in the SITE COPY command, a different vulnerability than CVE-2005-0519...

CVE-2004-1598: Undefined Security Weakness

Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave swf file that references files outside of the temporary directory...

security flaw

Directory traversal vulnerability in the truepath function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences...

CVE-2004-1392

CVE-2004-1392 affects PHP 4.0 with the curl extension: remote attacker can bypass open_basedir and read arbitrary files via a file:// URL argument to curl_init. Public advisories RHSA-2005:405/406 (CentOS/Red Hat) describe updated PHP packages that fix this issue (curl_safe-file lookup; can impac...

CVE-2005-0313

Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to 1 upload arbitrary files via certain parameters to upload.php or 2 read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete...

CVE-2002-1252

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities XXE fields in an HTTP POST request that is processed by the SimpleFileHandler handler...

CVE-2004-0122

CVE-2004-0122 is described as affecting Microsoft MSN Messenger 6.0 and 6.1, allowing remote attackers to read arbitrary files via improper handling of certain requests. Connected advisories for pidgin/libpurple reference a related directory-traversal issue in the MSN protocol plugin (slp.c) that...

PT-2004-1313 · Microsoft · Msn Messenger

Name of the Vulnerable Software and Affected Versions: Microsoft MSN Messenger versions 6.0 through 6.1 Description: The issue allows remote attackers to read arbitrary files due to improper handling of certain requests. Recommendations: For Microsoft MSN Messenger versions 6.0 through 6.1, at th...

DEBIAN-CVE-2004-0129

Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. dot dot sequences in the what parameter...

CVE-2003-0626

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the 1 headername or 2 footername arguments...

CVE-2003-0753

nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphpconfigLangFile parameter...

CVE-2003-0294

The CVE-2003-0294 issue affects php-proxima (version 6.0 and earlier) where autohtml.php contains a flaw in the modload operation that allows remote attackers to read arbitrary files via the name parameter. This is documented across multiple sources (NVD/NVD clone, CVE records, and a Tenable Ness...

[SECURITY] [DSA 264-1] New lxr packages fix information disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 264-1 [email protected] http://www.debian.org/security/ Martin Schulze March 19th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0076: Undefined Security Weakness

Unknown vulnerability in the directory parser for Direct Connect 4 Linux dcgui before 0.2.2 allows remote attackers to read files outside the sharelist...

CVE-2002-2084

Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a .. dot dot in the 1 l and 2 topic parameters...

CVE-2002-1258

CVE-2002-1258 affects Microsoft Virtual Machine (VM) up to build 5.0.3805, as used in Internet Explorer and other applications. The vulnerability allows remote attackers to read files via a Java applet whose CODEBASE parameter in the APPLET tag is spoofed, likely due to a parsing error. Documents...

Multiple vulnerabilities in Tiny HTTPd

======================================== INetCop Security Advisory 2002-0x82-001 ======================================== Title: Multiple vulnerabilities in Tiny HTTPd. 0x01. Description Tiny HTTP daemon is web server that do simple very. Vulnerability and executable vulnerability that this web...

security flaw

The default servlet org.apache.catalina.servlets.DefaultServlet in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet...