593 matches found
LibSPF2 < 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)
Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS, dating at least back to 2002 in Sendmail 8.2.0 and almost...
a4deskphp-rfi.txt
================================================================= ========A4Desk PHP Event Calendar Remote File Inclusion======== ================================================================= Vendor: WebUnion Media Ltd Vendor Site: http://php.a4desk.com/calendar/ Date Discovered: 9-29-08...
iShowMusic V1. 2 direct write shell vulnerability-vulnerability warning-the black bar safety net
By qiur3n http://www.wolvez.org/ 2008-06-17 iShow Music is a basic set in the PHP+TXT online music player. The program uses text data stored in a way, without MYSQL database support, and the program code and interface templates separated, and easy to your music website interface to modify. Offici...
barcodegen 2.0.0 - class_dir Remote File Inclusion
barcodegen 2.0.0 - classdir Remote File Inclusion Name : barcodegen = 2.0.0 Remote File Inclusion Vulnerability Download From : http://www.barcodephp.com/processdownload.php?id=barcodegen.1d-php4.v2.0.0.zip Found By : Br0k3n H34rT Home Page : WwW.Sec-Code.CoM...
barcodegen <= 2.0.0 (class_dir) Remote File Inclusion Vulnerability
No description provided by source. Name : barcodegen = 2.0.0 Remote File Inclusion Vulnerability Download From : http://www.barcodephp.com/processdownload.php?id=barcodegen.1d-php4.v2.0.0.zip Found By : Br0k3n H34rT Home Page : WwW.Sec-Code.CoM...
barcodegen 2.0.0 - 'class_dir' Remote File Inclusion
Name : barcodegen = 2.0.0 Remote File Inclusion Vulnerability Download From : http://www.barcodephp.com/processdownload.php?id=barcodegen.1d-php4.v2.0.0.zip Found By : Br0k3n H34rT Home Page : WwW.Sec-Code.CoM ============================================================================ Vulne Code...
DNS Spoofing Helper Service
This module provides a DNS service that returns TXT records indicating information about the querying service. Based on Dino Dai Zovi DNS code from Karma. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'resol...
iShowMusic V1.2 写入shell漏洞
iShow Music 是一套基本于PHP+TXT的在线音乐播放程序。程序采用文本数据存储方式，无需MYSQL数据库支持，同时程序代码与界面模板分离，方便你的音乐网站界面修改。 在error.php 12-26行 elseif $POST'action'=="save" $cknumon && GdConfirm$gdcode; ifempty$id Showmsg"no","你还未选择歌曲呢!","返回重新填写","javascript:history.back-1"; exit; elseifempty$POST'user'...
irforum-rfi.txt
Istant-Replay Forum Remote File Inclusion Vulnerability AUTHOR: THuGM4N Email : [email protected] Script : Istant-Replay Forum Site : http://www.chattaitaliano.com Vulnerable CODE : /read.php $a = $GET'data'; $b = $GET'post'; $foo = include "$a.txt"; BUT THE EXPLOIT IS LIKE THAT :...
Legendary TXT overflow-vulnerability warning-the black bar safety net
Legendary TXT overflow Six years ago the discovery of the cave,the EXP is now estimated to don't hurt to kill the power,release to primarily meet the noob's curiosity. Basically can also prove Nothing Is Impossible. CVE: CAN-2 0 0 4-0 9 0 1 MST: MS04-0 4 1 Affected component:mswrd632. wpc/mswrd6...
Directory traversal
Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter in a save action...
CVE-2008-0480
Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter to 1 RTEfilebrowser.asp or 2 filebrowser.asp...
Directory traversal
Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter...
CVE-2008-0479
Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter...
MODx CMS 0.9.6.1 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================ MODx CMS 0.9.6.1 Multiple Remote Vulnerabilities ================================================ AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com...
SuSE 10 Security Update : avahi (ZYPP Patch Number 3845)
Local attackers could send empty TXT data via D-BUS, causing the avahi daemon to exit. CVE-2007-3372 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...
Mandrake Linux Security Advisory : avahi (MDKSA-2007:185)
The Avahi daemon in 0.6.20 and previous allows attackers to cause a denial of service via empty TXT data over D-Bus, which triggers an assert error. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...
Design/Logic Flaw
ipskernel/classupload.php in Invision Power Board IPB or IP.Board 2.3.1 up to 20070912 allows remote attackers to upload arbitrary script files with crafted image filenames to uploads/, where they are saved with a .txt extension and are not executable. NOTE: there are limited usage scenarios unde...
CVE-2007-4913
ipskernel/classupload.php in Invision Power Board IPB or IP.Board 2.3.1 up to 20070912 allows remote attackers to upload arbitrary script files with crafted image filenames to uploads/, where they are saved with a .txt extension and are not executable. NOTE: there are limited usage scenarios unde...
