PHP 5.2.6 - 'chdir()' Function http URL Argument Safe_mode Restriction Bypass

source: https://www.securityfocus.com/bid/29796/info PHP is prone to multiple 'safemode' restriction-bypass vulnerabilities. Successful exploits could allow an attacker to determine the presence of files in unauthorized locations; other attacks are also possible. Exploiting these issues allows...

SendCard <= 3.4.0 Unauthorized Administrative Access Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "SendCard = 3.4.0 unauthorized administrative access / remote commands\n"; echo "execution exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by sendcard...

UPublisher 1.0 (viewarticle.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : UPublisher 1.0 viewarticle.asp Remote SQL Injection Vulnerability Author : ajann Dork : UPublisher Vendor: http://www.superfreaker.com/ http://target/path//viewarticle.asp?ID=SQL Example:...

Opera 9 - long href Remote Denial of Service

a...

Opera 9 (long href) Remote Denial of Service Exploit

No description provided by source. !-- Opera 9 DoS by Critical Security, Advisory 009 Advisory can be reached: http://www.critical.lt/?vuln/349 We are: N9, bigb0u, cybergoth, iglOo, mircia, Povilas Shouts to Lithuanian girlz! and our friends ; Product: Opera 9 8.x is immune to this Vulnerability...

Xmame 0.102 - '-pb/-lang/-rec' Local Buffer Overflow

/ xmame-expl.c by sj [email protected] On 20th of Jan it came to my attention that Xmame suffered from several buffer overflow problems. Thinking this issue was resolved, I installed Xmame on my Ubuntu laptop, from the Ubuntu repositories which installed a vulnerable version of Xmame. This is what...

CVE-2005-2654

phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disableanonbind is set, via an HTTP request to login.php with the anonymousbind parameter set...

artmedic_links5 remote file access exploit

You can read details of this vulnerability here: http://www.securityfocus.com/archive/1/367144 Very simple source of exploit, enjoy. / artmediclinks5 remote file access exploit Adam Simuntis [email protected] / include stdio.h include stdlib.h include arpa/inet.h include sys/types.h include sys/socket.h...

phpbb2013SQL.txt

heres a update of the paper: phpBB 2.0.13 = downloads.php Mod SQL injection www.batznet.com Discussion: -------------------- This exploit makes it possible to insert SQL Code through downloads.php Bug: -------------------- http://www.phpbb.de/downloads.php?cat=batz Spits out an error msg: Could n...

phpBB 2.0.12 - Session Handling Authentication Bypass

phpBB 2.0.12 - Session Handling Authentication Bypass phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2-...

Einstein <= 1.01 Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits ================================================== Einstein include HKEY hKey; define BUFSIZE 100 char usernameBUFSIZE, passwordBUFSIZE; DWORD dwBufLen=BUFSIZE; LONG lRet; int mainvoid ifRegOpenKeyExHKEYLOCALMACHINE,"Software\einstein", 0,...

HP-UX PHNE_30224 : HP-UX sendmail, Remote Unauthorized Privileged Access (HPSBUX00281 SSRT3631 rev.11)

s700800 11.04 VVOS sendmail1m 8.9.3 patch : A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability could be exploited remotely to gain unauthorized privileged access. References: CERT/CC CA-2003-25, CAN-2003-0681. %NASLMINLEVEL 70300 C Tenable...

CVE-2005-0192

Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 6.0.12.1040 and earlier allows remote attackers to read arbitrary files via a .. dot dot in an RJS filename...

[SECURITY] [DSA 660-1] New kdebase packages fix authentication bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 660-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26th, 2005 http://www.debian.org/security/faq -...

YardRadius process_menu Function Remote Buffer Overflow

The remote host appears to be running YARD RADIUS 1.0.20 or older. This version is vulnerable to a buffer overflow that allows a remote attacker to execute arbitrary code in the context of the RADIUS server. It is likely that this check made the remote RADIUS server crash C Tenable Network...

Debian DSA-438-1 : linux-kernel-2.4.18-alpha+i386+powerpc - missing function return value check

Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to missing function return value check of internal functions a local attacker can gain root privileges. %NASLMINLEVEL 70300 C...

Debian DSA-172-1 : tkmail - insecure temporary files

It has been discovered that tkmail creates temporary files insecurely. Exploiting this an attacker with local access can easily create and overwrite files as another user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

Artmedic Webdesign Kleinanzeigen Script - Remote File Inclusion

Artmedic Webdesign Kleinanzeigen Script - Remote File Inclusion / source: https://www.securityfocus.com/bid/10746/info Kleinanzeigen is prone to a file include vulnerability. This issue could allow a remote attacker to include malicious files containing arbitrary code to be executed on a vulnerab...

Solaris 2.6 (sparc) : 108492-01

SunOS 5.6: Snoop may be exploited to gain root access. Date this patch was last updated by Sun : Dec/07/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc...

Solaris 2.6 (x86) : 108493-01

SunOS 5.6x86: Snoop may be exploited to gain root access. Date this patch was last updated by Sun : Dec/07/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security,...