84 matches found
Safemode Gem for Ruby is vulnerable to information disclosure
Safemode is initialised with an optional 'delegate' object. If the delegated object is a Rails controller, 'inspect' could be called which then exposes all informations about the App, including routes, secret tokens, caches and so on...
Foreman Safemode Rails Controller Information Disclosure Vulnerability
Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman version 1.x that stems from an error in the Safemode gem...
PHP 4.x SafeMode Arbitrary File Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2954/info PHP is the Personal HomePage development toolkit, distributed by the PHP.net, and maintained by the PHP Development Team in public domain. A problem with the toolkit could allow elevated privileges, and...
PHP safemode execution protection bypass
It's possible to bypass safemode protection by inserting few backslashes into command...
Linux/x86 - execve(/bin/sh /tmp/p00p) Shellcode (70 bytes)
Linux/x86 - execve/bin/sh /tmp/p00p Shellcode 70 bytes. Shellcode exploit for Linuxx86 platform Author: zillion EMail: [email protected] Home: http://www.safemode.org Linux x86 shellcode that does an execve of /bin/sh /tmp/p00p. File name: execve-tmp-p00p.c / This shellcode will do /bin/sh...
Linux/x86 - execve(/sbin/ipchains -F) Shellcode (70 bytes)
Linux/x86 - execve/sbin/ipchains -F Shellcode 70 bytes. Shellcode exploit for Linuxx86 platform Author: zillion Email: [email protected] Homepage: http://www.safemode.org Linux x86 shell code that does an execve of /sbin/ipchains -F File name: flush-ipchains-shellcode.c / This shellcode will d...
Linux/x86 - Add Root User (w000t) + No Password Shellcode (177 bytes)
Linux/x86 - Add Root User w000t + No Password Shellcode 177 bytes. Shellcode exploit for Linuxx86 platform Linux x86 shellcode that uses execve and echo to create a passwordless root account. Author: zillion Email : [email protected] Homepage: safemode.org File: w000t-shell.c / This shellcode...
Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass"
Script : Cpanel 11.x bug : language.php edite file exploit=Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass" safemode off , modsecurity off Disable functions : All NONE ,access root folder ?php / Deadly Script by Super-Crystal bypass Cpanel fantastico www.arab4services.ne...
PHP safemode bypass
By using LOADFILE, INTO DUMPFILE, INTO OUTFILE SQL modifiers it's possible to access files behind basedir...
PHP 5.2.4 <= various mysql functions safemode & open_basedir bypass
Application: PHP =5.2.4 Web Site: http://php.net Platform: unix Bug: safemode & openbasedir bypass ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1 Introduction =========== "PHP is a widely-used general-purpose scripting...
[Full-disclosure] PHP 5.2.3 PHP 4.4.7, htaccess safemode and open_basedir Bypass Vulnerability
Source: http://securityreason.com/achievementsecurityalert/45 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.2.3 PHP 4.4.7, htaccess safemode and openbasedir Bypass Vulnerability Author: Maksymilian Arciemowicz cXIb8O3 SecurityReason Date: - - Written: 10.02.2007 - - Public: 27.06.2007...
CVE-2006-7204
The imapbody function in PHP before 4.4.4 does not implement safemode or openbasedir checks, which allows local users to read arbitrary files or list arbitrary directory contents...
CVE-2006-7204
The imapbody function in PHP before 4.4.4 does not implement safemode or openbasedir checks, which allows local users to read arbitrary files or list arbitrary directory contents...
CVE-2006-7204
The imapbody function in PHP before 4.4.4 does not implement safemode or openbasedir checks, which allows local users to read arbitrary files or list arbitrary directory contents...
PT-2007-1480 · Php · Php
Name of the Vulnerable Software and Affected Versions: PHP versions prior to 4.4.4 Description: The issue concerns the imap body function, which does not implement safemode or open basedir checks. This allows local users to read arbitrary files or list arbitrary directory contents. Recommendation...
MOPB-21-2007:PHP compress.bzip2:// URL Wrapper safemode and open_basedir Bypass Vulnerability
Summary The compress.bzip2:// URL Wrapper defined by the bz2 extension does not perform any safemode or openbasedir checks and therefore allows access to archives outside the basedir or safemode restrictions. Affected versions Affected is PHP = 5.2.1 Detailed information No details needed Proof o...
CVE-2007-1460
The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement safemode or openbasedir checks, which allows remote attackers to read ZIP archives located outside of the intended directories...
CVE-2007-1460
The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement safemode or openbasedir checks, which allows remote attackers to read ZIP archives located outside of the intended directories...
CVE-2007-1460
CVE-2007-1460 affects the PHP zip extension’s zip:// wrapper prior to PHP 4.4.7 and before 5.2.2 (including 5.2.0/5.2.1). The issue: safemode and open_basedir checks are not applied by the wrapper, allowing remote attackers to read ZIP archives located outside the intended directories. Impact per...
CVE-2007-1460
The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement safemode or openbasedir checks, which allows remote attackers to read ZIP archives located outside of the intended directories...