FreeStyle Wiki Arbitrary Command Injection Vulnerability

Secunia Advisory: SA16612 Release Date: 2005-08-30 Critical: Moderately critical Impact: System access Where: From remote Solution Status: Vendor Patch Software: FreeStyle Wiki 3.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: A...

Savant Web Server 3.1 - Remote Buffer Overflow (2)

!/usr/local/bin/perl Savant Buffer Overflow Exploit ---------------------------------- Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com Vendor URL: http://savant.sourceforge.net $ARGC=@ARGV; if $ARGC !=3 print "\nUsage: $0 remote IP Port\n"; print...

HAURItraverse.txt

====================================================================== Secunia Research 19/08/2005 - HAURI Anti-Virus Compressed Archive Directory Traversal - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: SqWebMail Attached File Script Insertion Vulnerability

====================================================================== Secunia Research 24/08/2005 - SqWebMail Attached File Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...

atutor151.txt

ATutor 1.5.1 and prior multiple XSS Vulnerabilities SEVERITY: ========= Medium SOFTWARE: ========= ATutor 1.5.1 http://www.atutor.ca/ INFO: ===== ATutor 1.5.1 is a web based education portal. DESCRIPTION: ============ The system is vulnerable to various XSS attacks: --==XSS==-- Some examples -...

sakeru.txt

!/usr/bin/perl sakeru.pl v0.1 URL Filtering Bypass proof of concept By sinhack research labs first version Dec 23 2002 last update Jun 06 2004 Usage: 1 perl sakeru.pl 2 Configure your browser's proxy at localhost:5050 3 Have fun. Known bugs: - This proxy is not multitask, so your browser will...

sbphpstatpoc.txt

? / PHP Stat Administrative User Authentication Bypass POC Exploit Code by Nikyt0x - Soulblack Security Research Advisory: http://www.soulblack.com.ar/repo/papers/phpstatadvisory.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, SWP, Trespasser... [email protected]...

isec-0023-coredump.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, since it became clear from the discussion in January about the uselib vulnerability, that the Linux community prefers full, non-embargoed disclosure of kernel bugs, I release full details right now. However to follows at least some of the...

easymsgb_advisory.txt

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...

Acunetix HTTP Sniffer Denial of Service Exploit

Exploit for unknown platform in category dos / poc =============================================== Acunetix HTTP Sniffer Denial of Service Exploit =============================================== !/usr/bin/perl Acunetix HTTP Sniffer DOS Exploit ------------------------------------ Infam0us Gr0up -...

Acunetix HTTP Sniffer - Denial of Service

!/usr/bin/perl Acunetix HTTP Sniffer DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com Vendor URL: www.acunetix.com $ARGC=@ARGV; if $ARGC !=2 print "\n"; print " Acunetix HTTP Sniffer DOS Exploit\n"; print...

kshoutaxs.txt

=========================================================== ============================================================ Title: Kshout Data Disclosure Vulnerability Discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 26/07/2005 Severity: Medium. Remote users can view...

[SA15870] Opera Download Dialog Spoofing Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

opera -- download dialog spoofing vulnerability

A Secunia Advisory reports: Secunia Research has discovered a vulnerability in Opera, which can be exploited by malicious people to trick users into executing malicious files. The vulnerability is caused due to an error in the handling of extended ASCII codes in the download dialog. This can be...

[SA15776] avast! Antivirus ACE File Handling Two Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Intruder Client 1.00 Remote Command Execution & DoS Exploit

No description provided by source. !/usr/bin/perl Intruder Command Execution DOS Exploit -------------------------------------- Infam0us Gr0up - Securiti Research ? Version: libwww-perl-5.76 + Connecting to 127.0.0.1.. + Connected + Backup for files..DONE + Build malicious pages..DONE + Open CDRo...

Intruder Client 1.00 - Remote Command Execution Denial of Service

Intruder Client 1.00 - Remote Command Execution Denial of Service !/usr/bin/perl Intruder Command Execution DOS Exploit -------------------------------------- Infam0us Gr0up - Securiti Research ? Version: libwww-perl-5.76 + Connecting to 127.0.0.1.. + Connected + Backup for files..DONE + Build...

Remote Control Server 1.6.2 - Denial of Service

Remote Control Server 1.6.2 - Denial of Service !/usr/local/bin/perl Remote Control Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $ARGC=@ARGV; if $ARGC !=1 print "\n"; print " Remote Control...

Remote Control Server 1.6.2 Denial of Service Exploit

No description provided by source. !/usr/local/bin/perl Remote Control Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $ARGC=@ARGV; if $ARGC !=1 print "\n"; print " Remote Control Server DOS...

SquirrelMail Arbitrary Variable Overwriting Vulnerability

GulfTech Security Research July 14th, 2005 Vendor : The SquirrelMail Project Team URL : http://www.squirrelmail.org/ Version : SquirrelMail 1.4.5-RC1 && Earlier Risk : Variable Overwriting Description: SquirrelMail is a standards-based webmail package written in php. It includes built-in pure PHP...