atutor151.txt

ATutor 1.5.1 and prior multiple XSS Vulnerabilities SEVERITY: ========= Medium SOFTWARE: ========= ATutor 1.5.1 http://www.atutor.ca/ INFO: ===== ATutor 1.5.1 is a web based education portal. DESCRIPTION: ============ The system is vulnerable to various XSS attacks: --==XSS==-- Some examples -...

sakeru.txt

!/usr/bin/perl sakeru.pl v0.1 URL Filtering Bypass proof of concept By sinhack research labs first version Dec 23 2002 last update Jun 06 2004 Usage: 1 perl sakeru.pl 2 Configure your browser's proxy at localhost:5050 3 Have fun. Known bugs: - This proxy is not multitask, so your browser will...

sbphpstatpoc.txt

? / PHP Stat Administrative User Authentication Bypass POC Exploit Code by Nikyt0x - Soulblack Security Research Advisory: http://www.soulblack.com.ar/repo/papers/phpstatadvisory.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, SWP, Trespasser... [email protected]...

easymsgb_advisory.txt

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...

isec-0023-coredump.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, since it became clear from the discussion in January about the uselib vulnerability, that the Linux community prefers full, non-embargoed disclosure of kernel bugs, I release full details right now. However to follows at least some of the...

kshoutaxs.txt

=========================================================== ============================================================ Title: Kshout Data Disclosure Vulnerability Discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 26/07/2005 Severity: Medium. Remote users can view...

Acunetix HTTP Sniffer Denial of Service Exploit

Exploit for unknown platform in category dos / poc =============================================== Acunetix HTTP Sniffer Denial of Service Exploit =============================================== !/usr/bin/perl Acunetix HTTP Sniffer DOS Exploit ------------------------------------ Infam0us Gr0up -...

Acunetix HTTP Sniffer - Denial of Service

!/usr/bin/perl Acunetix HTTP Sniffer DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com Vendor URL: www.acunetix.com $ARGC=@ARGV; if $ARGC !=2 print "\n"; print " Acunetix HTTP Sniffer DOS Exploit\n"; print...

[SA15870] Opera Download Dialog Spoofing Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

opera -- download dialog spoofing vulnerability

A Secunia Advisory reports: Secunia Research has discovered a vulnerability in Opera, which can be exploited by malicious people to trick users into executing malicious files. The vulnerability is caused due to an error in the handling of extended ASCII codes in the download dialog. This can be...

[SA15776] avast! Antivirus ACE File Handling Two Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Intruder Client 1.00 Remote Command Execution & DoS Exploit

No description provided by source. !/usr/bin/perl Intruder Command Execution DOS Exploit -------------------------------------- Infam0us Gr0up - Securiti Research ? Version: libwww-perl-5.76 + Connecting to 127.0.0.1.. + Connected + Backup for files..DONE + Build malicious pages..DONE + Open CDRo...

Intruder Client 1.00 - Remote Command Execution Denial of Service

Intruder Client 1.00 - Remote Command Execution Denial of Service !/usr/bin/perl Intruder Command Execution DOS Exploit -------------------------------------- Infam0us Gr0up - Securiti Research ? Version: libwww-perl-5.76 + Connecting to 127.0.0.1.. + Connected + Backup for files..DONE + Build...

Remote Control Server 1.6.2 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================== Remote Control Server 1.6.2 Denial of Service Exploit ===================================================== !/usr/local/bin/perl Remote Control Server DOS Exploit...

Remote Control Server 1.6.2 Denial of Service Exploit

No description provided by source. !/usr/local/bin/perl Remote Control Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $ARGC=@ARGV; if $ARGC !=1 print "\n"; print " Remote Control Server DOS...

DzSoft PHP Editor 3.1.2.8 - Denial of Service

DzSoft PHP Editor 3.1.2.8 - Denial of Service !/usr/bin/perl DzSoft PHP Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $subject = "DzSoft PHP Server DOS Exploit"; $vers = "DzSoft PHP Editor...

SquirrelMail Arbitrary Variable Overwriting Vulnerability

GulfTech Security Research July 14th, 2005 Vendor : The SquirrelMail Project Team URL : http://www.squirrelmail.org/ Version : SquirrelMail 1.4.5-RC1 && Earlier Risk : Variable Overwriting Description: SquirrelMail is a standards-based webmail package written in php. It includes built-in pure PHP...

Remote Control Server 1.6.2 - Denial of Service

Remote Control Server 1.6.2 - Denial of Service !/usr/local/bin/perl Remote Control Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $ARGC=@ARGV; if $ARGC !=1 print "\n"; print " Remote Control...

[Full-disclosure] DMA[2005-0712a] - 'Nokia Affix Bluetooth btftp client buffer overflow'

DMA2005-0712a - 'Nokia Affix Bluetooth btftp client buffer overflow' Author: Kevin Finisterre Vendor: http://www-nrc.nokia.com/affix/, http://affix.sourceforge.net Product: 'affix' References: http://www.digitalmunition.com/DMA2005-0712a.txt Description: Affix is a Bluetooth Protocol Stack for...

Baby Web Server <= 2.6.2 Command Validation Exploit

No description provided by source. !/bin/perl Baby Web Server Command Validation Exploit -------------------------------------------------- Infam0us Gr0up - Securiti Research E:\nc -v localhost 80 Infam0us-Gr0up 127.0.0.1 80 http open GET HTTP HTTP/1.0 400 Bad Request Server: Baby Web Server --...