[HSC Security Group] MaxWebPortal - Multiple SQL injection/XSS

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: Maxwebportal 1.3.5 and prior Risk: High MaxWebPortal is probably the most spread ASP based web portal script. I've found multiple XSS and Sql injection that could easily lead to password strealing or porta...

Yappa-NG Multiple Vulnerabilities

GulfTech Security Research May 11th, 2005 Vendor : Fritz Berger URL : http://sourceforge.net/projects/yappa-ng/ Version : yappa-ng 2.3.1 && Earlier Risk : Multiple Vulnerabilities Description: Yappa-NG is the second generation new and improved version of Yappa yet another php photo album. There a...

CVE-2003-1133

CVE-2003-1133 affects Rit Research Labs The Bat! versions 1.0.11–2.0. The root cause is insecure ACLs used when creating new accounts, allowing local attackers to read other users’ email messages. The vulnerability is local and limited by the product’s access controls. KB/related advisories from ...

Easy Message Board Directory Traversal and Remote Command

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...

Firefox Remote Compromise Technical Details

Firefox Remote Compromise Technical Details Before I start, I need to say that this thing has been patched on Mozilla's server. If you take a look at any of the extension install pages on their site, you will see that the install function has a bunch of random letters and numbers after it. Even...

CVE-2003-1133: Undefined Security Weakness

Rit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs, which allows local users to read other users' email messages...

Remote File Manager 1.0 Denial of Service Exploit

No description provided by source. / Server Remote File Manager DoS Exploit ------------------------------------------- INFGP - Hacking&security Research + Attacking localhost.. + Build DOS string + Buffer size = 300 byte + Sending bad format.. + localhost : Disconected! Greats: Infam0us...

Remote File Manager 1.0 - Denial of Service

/ Server Remote File Manager DoS Exploit ------------------------------------------- INFGP - Hacking&security Research + Attacking localhost.. + Build DOS string + Buffer size = 300 byte + Sending bad format.. + localhost : Disconected! Greats: Infam0us...

Remote File Manager 1.0 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================= Remote File Manager 1.0 Denial of Service Exploit ================================================= / Server Remote File Manager DoS Exploit ------------------------------------------- INFGP -...

Remote File Manager 1.0 - Denial of Service

Remote File Manager 1.0 - Denial of Service / Server Remote File Manager DoS Exploit ------------------------------------------- INFGP - Hacking&security Research + Attacking localhost.. + Build DOS string + Buffer size = 300 byte + Sending bad format.. + localhost : Disconected! Greats: Infam0us...

DataTrac Activity Console Denial of Service Exploit

No description provided by source. / DataTrac Activity Console DoS Exploit ---------------------------------------- INFGP - Hacking&security Research Resolve host... OK + Connecting... OK Target locked Sending bad procedure... OK + Server DoS'ed Greats: Infam0us Gr0up,Yudhamephisthopeles,Kavling...

DataTrac Activity Console - Denial of Service

DataTrac Activity Console - Denial of Service / DataTrac Activity Console DoS Exploit ---------------------------------------- INFGP - Hacking&security Research Resolve host... OK + Connecting... OK Target locked Sending bad procedure... OK + Server DoS'ed Greats: Infam0us...

DataTrac Activity Console Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================== DataTrac Activity Console Denial of Service Exploit =================================================== / DataTrac Activity Console DoS Exploit ---------------------------------------- INFGP -...

DataTrac Activity Console - Denial of Service

/ DataTrac Activity Console DoS Exploit ---------------------------------------- INFGP - Hacking&security Research Resolve host... OK + Connecting... OK Target locked Sending bad procedure... OK + Server DoS'ed Greats: Infam0us Gr0up,Yudhamephisthopeles,Kavling Community, 1st Indonesian...

[HSC Security Group] ASP Inline Corporate Calendar SQL injection

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL injection : ASP Inline Corporate Calendar Risk: Medium The Corporate Calendar is a nice asp script to manage a calendar shared by users. It has been downloaded by thousands people, and it is considered...

Ashley's Web Server - Denial of Service

include include include pragma commentlib, "ws232.lib" char doscore = "GET HTTP/1.0 " "\x3f\x3f\x3f\x3f\x3f\x2e\x48\x54\x4d\x4c\x3f\x74\x65\x73\x74\x76" "\x61\x72\x69\x61\x62\x6c\x65\x3d\x26\x6e\x65\x78\x74\x74\x65\x73" "\x74\x76\x61\x72\x69\x61\x62\x6c\x65\x3d\x67\x69\x66\x20\x48\x54"...

Ashley's Web Server Denial of Service Exploit

No description provided by source. include string.h include winsock2.h include stdio.h pragma commentlib, "ws232.lib" char doscore = "GET HTTP/1.0 " "\x3f\x3f\x3f\x3f\x3f\x2e\x48\x54\x4d\x4c\x3f\x74\x65\x73\x74\x76" "\x61\x72\x69\x61\x62\x6c\x65\x3d\x26\x6e\x65\x78\x74\x74\x65\x73"...

BitchX <= 1.0c20 Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ============================================== BitchX struct char distro; char version; char bx; unsigned int returnadd; unsigned int buffsize; T = "SuSE Linux", "8.2", "BitchX-1.0c20cvs", 0xbfffff88, 2111 , "Debian Linux", "3.0",...

Multiple eGroupware Vulnerabilities

GulfTech Security Research April 20th, 2005 Vendor : eGroupware URL : http://www.egroupware.org/ Version : Versions Prior To 1.0.0.007 Risk : Multiple Vulnerabilities Description: eGroupware is a very popular open source web based collaboration software that can be used within an intranet, or...

PostgreSQL <= 8.01 Remote Reboot Denial of Service Exploit

Exploit for multiple platform in category dos / poc ========================================================== PostgreSQL include include include include include define DEFAULTPORT "5321" define DEFAULTDB "postgresql" define FUNCNAME "uKttest" define TABLENAME "unl0cktable" char str4000; char...