2461 matches found
Microsoft Internet Explorer 5.x - Valid File Drag and Drop Embedded Code (MS04-038)
source: https://www.securityfocus.com/bid/11466/info The Microsoft cumulative Internet Explorer patch MS04-038 attempted to limit what files may be dragged and dropped onto the local computer from the Internet Zone to prevent executable objects from being placed on the file system in this manner...
BlackBoard Internet Newsboard System checkdb.inc.php libpath Parameter Remote File Inclusion
The remote host is running the BlackBoard Internet Newsboard System, an open source, PHP-based internet bulletin board software application. The remote version of this software is vulnerable to a remote file include flaw in checkdb.inc.php, due to a lack of sanitization of user-supplied data to t...
SAMBA shared directory traversal
By using /.///etc path it's possible to access /etc directory...
@lex Guestbook livre_include.php Remote File Inclusion
Binary data 2333.prm...
BroadBoard Multiple Script SQL Injection
The remote host appears to be running BroadBoard, an ASP script designed to manage a web-based bulletin-board system. There is a flaw in the remote software that could allow a remote attacker to inject arbitrary SQL commands, which could in turn be used to gain administrative access on the remote...
ROSE Attack (variation 2)
Exploit for unknown platform in category dos / poc ========================= ROSE Attack variation 2 ========================= / ROSE attack variation 2 chuck at lemure.net Discovered by: gandalf at digital.net code modified from large IGMP attack by: Kox by Coolio coolio at k-r4d.com Sends out...
sitenewsAuth.txt
SecurityTracker Alert ID: 1011159 SecurityTracker URL: http://securitytracker.com/id?1011159 Date: Sep 5 2004 Impact: Modification of user information Exploit Included: Yes Versions: 1.1 Description: A vulnerability was reported in Site News. A local user can add or edit news items. LwB Security...
CVE-2002-1537
adminugauth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling adminugauth.php with modifed form fields such as "u"...
XV 3.x - .BMP Parsing Local Buffer Overflow
XV 3.x - .BMP Parsing Local Buffer Overflow / xv exploit for the bmp parsing buffer overflow infamous42md AT hotpop DOT com PEOPLE STOP EMAILING MY BUGTRAQ ADDRESS AND USE THIS ONE!! n00batlocalho.outernet gcc -Wall xvbmpslap.c n00batlocalho.outernet ./a.out Usage: ./a.out align...
ArGoSoft FTP Server < 1.4.3.7 RNTO Overflow
Binary data 3529.prm...
Flash FTP Server - Directory Traversal
TestCode: C:\ftp localhost Connected to server. 220 Flash FTP Server v2.1 ready... User server:none: CoolICE 331 Password required for CoolICE. Password: 230 User CoolICE logged in. ftp get /winnt/system.ini 200 Port command successful. 150 Opening data connection for /winnt/system.ini. 226 File...
Mensajeitor Tag Board 1.x - Authentication Bypass
Mensajeitor Tag Board 1.x - Authentication Bypass source: https://www.securityfocus.com/bid/10774/info It has been reported that Mensajeitor Tag Board is affected by an authentication bypass vulnerability. This issue is due to a failure of the application to properly handle authentication control...
dos_in_file_share_2.6
Hello bugtraq, LionMax Software WWW File Share Pro Remote Denial of Service Vulnerability remote Yes local No vulnerable WWW File Share Pro 2.60 download http://www.wfshome.com/download/wfssetup.exe WWW File Share Pro HTTP server may be prone to a remote denial of service condition. Successful...
[FMADV] Format String Bug in OllyDbg 1.10
FMADV - OllyDbg Format String Bug Introduction: There exists a format string bug in the code that handles Debugger Messages in OllyDbg. This means any traced application can crash OllyDbg and execute machine code. About From the Webpage: OllyDbg is a 32-bit assembler level analysing debugger for...
Mozilla 1.7 - External Protocol Handler
source: https://www.securityfocus.com/bid/10681/info Mozilla Internet Browser is reported prone to a weakness that may permit an external protocol to be called without any user interaction. This may expose Mozilla users to vulnerabilities that exist in the underlying operating system or in the...
RHEL 2.1 : util-linux (RHSA-2002:137)
The util-linux package shipped with Red Hat Linux Advanced Server contains a locally exploitable vulnerability. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. The 'chfn' utility included in this package allows users...
Linksys Web Camera directory traversal
No description provided...
Land Down Under - BBCode HTML Injection
source: https://www.securityfocus.com/bid/10435/info Land Down Under is prone to an HTML injection vulnerability. This issue is exposed through their BBCode implementation. Exploitation could permit theft of cookie credentials, manipulation of content, or other attacks...
oscommerce 2.2 file_manager.php file browsing
l0om - l0omatexcluded.org - www.excluded.org greets, while i was "warsearching" with google i suddenly have been on the admin interfaces of many oscommerce sites. i made a: allinurl:admin/filemanager.php for nomal you can only view your oscommerce directorys, but if you type in the following you...
