718 matches found
Dedecms V5可执行文件上传漏洞
这是一个比较有意思的东西，但是成功利用起来并不容易，呵呵。 首先看configrglobals.php文件，摘的一段代码如下。这里作者本意是为了帮我们注册变量的，但是他却疏忽了我们不但能注册变量，还能覆盖一些变量。configrglobalsmagic.php也有同样的问题 ………………………………………………………………………… ifisarray$GET foreach$GET AS $key = $value $$key = $value; //可以覆盖任意变量 ………… …………………………………………………………………………...
CVE-2008-2292
Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair AVP...
DeDeCMS V5 用户验证函数转义符漏洞
在include\incuserlogin.php文件中，checkUser函数对过滤处理不当，导致可以注入转义符，致使系统数据库语句出错。。。 $this-userName = eregreplace"^0-9a-zA-Z@!.-","",$username; ，是不是代码编写人员忘记了，在引号内，转义符只能转义单引号和斜杠 :-P,这样，在变量username中输入一个单引号，变成',然后过滤'留下,导致数据库语句执行出错。 DeDeCMS V5、DeDeCMS 2007 去掉代码中的斜杠，语句改为：$this-userName =...
Joomla Component joomlaradio v5 Remote File Inclusion Vulnerability
No description provided by source. Joomla Radio v5 Component RFI Bug in : administrator/components/comjoomlaradiov5/admin.joomlaradiov5.php Variable : $mosConfiglivesite Download : http://www.joomlaos.de/option,comremository/Itemid,41/func,fileinfo/id,2661.html Dork: inurl:"comjoomlaradiov5"...
joomlaradio-rfi.txt
Joomla Radio v5 Component RFI Bug in : administrator/components/comjoomlaradiov5/admin.joomlaradiov5.php Variable : $mosConfiglivesite Download : http://www.joomlaos.de/option,comremository/Itemid,41/func,fileinfo/id,2661.html Dork: inurl:"comjoomlaradiov5" Example:...
Joomla! Component Joomlaradio 5.0 - Remote File Inclusion
Joomla Radio v5 Component RFI Bug in : administrator/components/comjoomlaradiov5/admin.joomlaradiov5.php Variable : $mosConfiglivesite Download : http://www.joomlaos.de/option,comremository/Itemid,41/func,fileinfo/id,2661.html Dork: inurl:"comjoomlaradiov5" Example:...
Joomla Component joomlaradio v5 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== Joomla Component joomlaradio v5 Remote File Inclusion Vulnerability =================================================================== Joomla Radio v5 Component RFI Bug i...
[SECURITY] Fedora 7 Update: krb5-1.6.1-4.fc7
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...
[SECURITY] Fedora Core 6 Update: krb5-1.5-23.fc6
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...
[SECURITY] Fedora Core 6 Update: krb5-1.5-22.fc6
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...
[SECURITY] Fedora Core 5 Update: krb5-1.4.3-5.5
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...
krb5 RPC library unitialized pointer free
The gssrpcsvcauthgssapi function in the RPC library in MIT Kerberos 5 krb5 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup...
[SECURITY] Fedora Core 5 Update: krb5-1.4.3-5.4
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...
[SECURITY] Fedora Core 6 Update: krb5-1.5-21
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...
[SECURITY] Fedora Core 5 Update: krb5-1.4.3-5.3
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...
[SECURITY] Fedora Core 6 Update: krb5-1.5-13
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...
listpics v5
Title: listpics v5 Author: BLaSTER Contact: [email protected] Script: http://www.aspindir.com/indir.asp?id=2866 //Database Hacked.. http://target/path/Database/.mdb Example: http://victim.com/KhaledMuratList/Database/listpics.mdb // Greetz : BLaCKWHITE, Satanist-imam, EaGLe, FreeZe, LGMAN and...
xFlow v5.x multiple vuln.
xFlow v5.x multiple vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendorlink:http://www.skymarx.com/affiliatesoftware.html affected versions:v5.46.11 and previous orginal advisory: http://pridels.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html Product info: After over five years of...
Web4Future eDating Professional v5 sql vuln.
Web4Future eDating Professional v5 sql vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/web4future-edating-professional-v5-sql.html vendor:http://www.web4future.com/products.php?p=edating affected version: v5 and prior Product Description:...
