Prototype of an PHP Application 0.1 - gestionindex.php?path_inc Remote File Inclusion

Prototype of an PHP Application 0.1 - gestionindex.php?pathinc Remote File Inclusion source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the...

AIOCP 1.3.x - 'cp_dpage.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20931/info All In One Control Panel AIOCP is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

AIOCP 1.3.x - 'cp_newsletter.php' SQL Injection

source: https://www.securityfocus.com/bid/20931/info All In One Control Panel AIOCP is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

Help Center Live 2.1.2 - module.php Directory Traversal

Help Center Live 2.1.2 - module.php Directory Traversal source: https://www.securityfocus.com/bid/19256/info Help Center Live is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve arbitrary files...

Subscribe Me Pro 2.44 - S.pl Directory Traversal

Subscribe Me Pro 2.44 - S.pl Directory Traversal source: https://www.securityfocus.com/bid/14817/info Subscribe Me Pro is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. Exploitation of this vulnerability could lead to a loss of...

xine security announcement: multiple heap overflows in MMS and Real RTSP streaming clients

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xine security announcement ========================== Announcement-ID: XSA-2004-8 Summary: By a user receiving data from a malicious network streaming server, an attacker can overrun a heap buffer, which can, on some systems, lead to or help in...

Winace UnAce 1.x - ACE Archive Directory Traversal

source: https://www.securityfocus.com/bid/12628/info A remotely exploitable client-side directory-traversal vulnerability affects Winace unace. The application fails to properly sanitize file and directory names contained within malicious ACE format archives. An attacker may leverage this issue b...

ZeroBoard Multiple Vulnerabilities

Binary data 2636.prm...

MS Internet Explorer .ANI files handling Universal Exploit (MS05-002)

Exploit for unknown platform in category remote exploits ===================================================================== MS Internet Explorer .ANI files handling Universal Exploit MS05-002 ===================================================================== / Added string.h /str0ke / /...

wget 1.9 - Directory Traversal

!/usr/bin/perl -W wgettrap.poc -- A POC for the wget1 directory traversal vulnerability Copyright 2004 Jan Min???? jjminar fastmail fm License: Public Domain When wget connects to us, we send it a HTTP redirect constructed so that wget wget will connect the second time, it will be attempting to...

linux/x86 break chroot 34 bytes

linux/x86 break chroot 34 bytes. Shellcode exploit for linx86 platform / The setuid0+chroot shellcode. It is the one of the smallest shellcodes in the !!world!! it will put '../' 10 times Size 34 bytes OS BSD /rootteam/dev0id www.sysworld.net [email protected] BITS 32 xor ecx,ecx xor eax,eax...

[ GLSA 200408-24 ] Linux Kernel: Multiple information leaks

Gentoo Linux Security Advisory GLSA 200408-24 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Yahoo! Messenger 5.6 - 'YInsthelper.dll' Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/10199/info Yahoo! Messenger COM objects YInstHelper.YInstStarter.1 and YInstHelper.YSearchSetting2 have been reported prone to remotely exploitable buffer overflow vulnerabilities. The conditions are triggered when properties are assigned values strings o...

Gemitel 3.50 - '/affich.php' Remote File Inclusion / Command Injection

source: https://www.securityfocus.com/bid/10156/info A vulnerability has been identified in the handling of input by Gemitel. Because of this, it may be possible for a remote user to gain unauthorized access to a system using the vulnerable software. It is possible to influence the include path o...

AllMyGuests 0.x - info.inc.php Arbitrary Code Execution

AllMyGuests 0.x - info.inc.php Arbitrary Code Execution source: https://www.securityfocus.com/bid/9664/info Reportedly the AllMyPHP application AllMyGuests is prone to a remote file include vulnerability. The issue is due to insufficient filtering of URI passed variables that are used in a...

PY Software Active Webcam 4.3 - WebServer Directory Traversal

source: https://www.securityfocus.com/bid/9260/info It has been reported that Active Webcam webserver may be prone to a directory traversal vulnerability that may allow a remote attacker to gain access to sensitive information, which may be used to launch further attacks against a vulnerable...

Microsoft Internet Explorer 6 - ADODB.Stream Object File Installation

Microsoft Internet Explorer 6 - ADODB.Stream Object File Installation source: https://www.securityfocus.com/bid/10514/info Microsoft Internet Explorer is prone to a security weakness that may permit malicious HTML documents to create or overwrite files on a victim file system when interpreted fro...

passlogd.txt

======================================== INetCop Security Advisory 2003-0x82-015 ======================================== Title: Remote Multiple Buffer Overflow vulnerability in passlogd sniffer. 0x01. Description About: passlogdpassive syslog capture daemon is a purpose-built sniffer for capturi...

Automatic File Content Type Recognition Tool contains memory allocation problem

Overview A memory allocation problem exists in the "Automatic File Content Type Recognition Tool" versions of the file1 package prior to 3.41. Description According to an OpenPKG advisory, a memory allocation problem exists in the "Automatic File Content Type Recognition Tool" AFCTR tool versions...

IRIX talkd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: talkd vulnerability Number: 20020603-01-I Date: June 10, 2002 Reference: CVE-2000-1010 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that the /usr/etc/talkd daemon contains a format...