2312 matches found
Mafia Moblog Full Path Disclosure / SQL injection
Produce : Mafia Moblog WebSite :http://mafia.pearlabs.org Version : 6 Full and Prior Discovred By :Moroccan Security Research Team Simo64 IMPACT : Manipulation of data, System access + Full Path Disclosure : The problem is that it is possible to disclose the full path to 'big.php','upgrade.php' b...
Sasser Worm ftpd Remote Buffer Overflow Exploit (port 5554)
Exploit for unknown platform in category remote exploits =========================================================== Sasser Worm ftpd Remote Buffer Overflow Exploit port 5554 =========================================================== / / // / / / / \ / / / / / / / // // / // / // //// -...
BL4 SMTP Server < 0.1.5 Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ================================================== BL4 SMTP Server 2 usage if$ARGV 2 $prt = $ARGV1 else $prt = "25" ; $adr = $ARGV0; $prt = $ARGV1; $socket = IO::Socket::INET-newProto="tcp", PeerAddr=$adr, PeerPort=$prt, Reuse=1 or die "Error: ca...
BL4 SMTP Server < 0.1.5 - Remote Buffer Overflow (PoC)
!/usr/bin/perl use IO::Socket; use Socket; my$socket = ""; if$ARGV 2 usage if$ARGV 2 $prt = $ARGV1 else $prt = "25" ; $adr = $ARGV0; $prt = $ARGV1; $socket = IO::Socket::INET-newProto="tcp", PeerAddr=$adr, PeerPort=$prt, Reuse=1 or die "Error: cant connect to $adr:$prt\n"; print " -- Connecting T...
BL4 SMTP Server 0.1.5 - Remote Buffer Overflow (PoC)
BL4 SMTP Server 0.1.5 - Remote Buffer Overflow PoC !/usr/bin/perl use IO::Socket; use Socket; my$socket = ""; if$ARGV 2 usage if$ARGV 2 $prt = $ARGV1 else $prt = "25" ; $adr = $ARGV0; $prt = $ARGV1; $socket = IO::Socket::INET-newProto="tcp", PeerAddr=$adr, PeerPort=$prt, Reuse=1 or die "Error: ca...
BL4 SMTP Server < 0.1.5 Remote Buffer Overflow PoC
No description provided by source. !/usr/bin/perl use IO::Socket; use Socket; my$socket = ""; if$ARGV 1 | $ARGV 2 usage if$ARGV 2 $prt = $ARGV1 else $prt = "25" ; $adr = $ARGV0; $prt = $ARGV1; $socket = IO::Socket::INET-newProto="tcp", PeerAddr=$adr, PeerPort=$prt, Reuse=1 or die "Error: cant...
RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities
---------------------------------------------------------------------------------- - GroundZero Security Research and Software Development 2006 - ---------------------------------------------------------------------------------- - - - Security Advisory regarding RechnungsZentrale v2. - - SQL...
Multiple critical and high risk issues in Oracle's database server
David Litchfield of NGSSoftware has discovered multiple critical and high risk vulnerabilities in Oracle's Database Server. Versions affected include Oracle Database 10g Release 2, versions 10.2.0.1, 10.2.0.2 Oracle Database 10g Release 1, versions 10.1.0.4, 10.1.0.5 Oracle9i Database Release 2,...
RechnungsZentrale V2 <= 1.1.3 Remote Inclusion Vulnerability
No description provided by source. - GroundZero Security Research and Software Development 2006 - Software: RechnungsZentrale V2 Version: 1.1.3, likely older versions are affected aswell. Vendor: http://www.nfec.de/ Remote Inclusion:...
[Full-disclosure] RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities
The Advisory can be found here: http://www.g-0.org/code/rz2-adv.html Regards, GroundZero Security Research and Software Development http://www.groundzero-security.com Wir widersprechen der Nutzung oder Ubermittlung unserer Daten fur Werbezwecke oder fur die Markt- oder Meinungsforschung § 28 Abs....
rev.txt
!/usr/bin/perl -w revilloC mail server PoC exploit for xp sp1 Discovered securma massine from MorX Security Research Team http://www.morx.org. RevilloC is a MailServer and Proxy v 1.21 http://www.revilloC.com The mail server is a central point for emails coming in and going out from home or offic...
[Full-disclosure] RevilloC mail server USER command heap overflow
1-title: Revilloc mail server "USER" command heap overflow Product: Revilloc MailServer and Proxy v 1.21 http://www.revilloC.com The mail server is a central point for emails coming in and going out from home or office The service will work with any standard email client that supports POP3 and...
RevilloC-poc.pl.txt
!/usr/bin/perl -w revilloC mail server PoC exploit for xp sp1 Discovered securma massine from MorX Security Research Team http://www.morx.org. RevilloC is a MailServer and Proxy v 1.21 http://www.revilloC.com The mail server is a central point for emails coming in and going out from home or offic...
RevilloC MailServer 1.21 - USER Remote Buffer Overflow
RevilloC MailServer 1.21 - USER Remote Buffer Overflow !/usr/bin/perl -w revilloC mail server PoC exploit for xp sp1 Discovered securma massine from MorX Security Research Team http://www.morx.org. RevilloC is a MailServer and Proxy v 1.21 http://www.revilloC.com The mail server is a central poin...
RevilloC MailServer 1.21 (USER) Remote Buffer Overflow Exploit PoC
Exploit for unknown platform in category remote exploits ================================================================== RevilloC MailServer 1.21 USER Remote Buffer Overflow Exploit PoC ================================================================== !/usr/bin/perl -w revilloC mail server Po...
DBeSession102.txt
GulfTech Security Research February 11, 2006 Vendor : Lawrence Osiris URL : http://www.phpclasses.org/browse/package/1624.html Version : DBeSession 1.0.2 Risk : SQL Injection Description: DBeSession is a feature-packed PHP class that stores the session data in a MySQL database rather than files. ...
[SA18805] DB_eSession "deleteSession()" Function SQL Injection
TITLE: DBeSession "deleteSession" Function SQL Injection SECUNIA ADVISORY ID: SA18805 VERIFY ADVISORY: http://secunia.com/advisories/18805/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: DBeSession 1.x http://secunia.com/product/8010/ DESCRIPTION: James...
[SA18765] CPAINT "cpaint_response_type" Cross-Site Scripting
TITLE: CPAINT "cpaintresponsetype" Cross-Site Scripting SECUNIA ADVISORY ID: SA18765 VERIFY ADVISORY: http://secunia.com/advisories/18765/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: CPAINT 1.x http://secunia.com/product/5543/ CPAINT 2.x...
Power Daemon <= 2.0.2 (WHATIDO) Remote Format String Exploit
Exploit for linux platform in category remote exploits ============================================================ Power Daemon include include include include include include include include include include /== Prototypes ==/ void fatalchar ; void Usagechar ; void FakeServerchar ,int; void...
[Full-disclosure] Re: cPanel Multiple Cross Site Scripting Vulnerability
One more to ur list http://localhost:2095/dowebmailforward.cgi?fwd=3Cscript3Ealert28document.cookie293B3C2Fscript3E&action=Add+Forwarder Sumit On 2/4/06, Hamish Stanaway [email protected] wrote: Hi there, Thank you for finding this vulnerability in a widely used software. I was wondering i...