LoudBlog <= 0.4 (path) Arbitrary Remote Inclusion Exploit

Exploit for unknown platform in category web applications ========================================================= LoudBlog LoudBlog 4.0 remote commands execution meta http-equiv="Content-Type" content="text/html;...

PHPGedView <= 3.3.7 Arbitrary Remote Code Execution Exploit

Exploit for unknown platform in category web applications =========================================================== PHPGedView PhpGedView body background-color:111111; SCROLLBAR-ARROW-COLOR: ffffff; SCROLLBAR-BASE-COLOR: black; CURSOR: crosshair; color: 1CB081; img background-color: FFFFFF...

PHPCOIN 1.2.2 - &#039;/includes/db.php?$_CCFG[_PKG_PATH_DBSE]&#039; Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/15831/info PhpCOIN is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote PHP code and execute it in the context ...

[Full-disclosure] Advisory 13/2005: Remote code execution in SysCP

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Remote code execution in SysCP Release Date: 2005/08/09 Last Modified: 2005/08/08 Author: Christopher Kunz [email protected] Application: SysCP 1.2.10 and prio...

PHP-Nuke 7.x - Multiple Remote File Inclusions

PHP-Nuke 7.x - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/18186/info PHP-Nuke is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issue...

Solaris systems may crash in response to certain IPv6 packets

Overview Solaris 8 systems that accept IPv6 traffic may be subject to denial of service attacks from arbitrary remote attackers. Description Sun Microsystems has reported that systems running Solaris 8 may encounter a system panic in response to IPv6 packets with certain characteristics. Sun Aler...

State-based firewalls fail to effectively manage session table resource exhaustion

Overview There is a vulnerability in several state-based firewall products that allows arbitrary remote attackers to conduct denial of service attacks against vulnerable firewalls. Description Many firewall products use state tables to determine whether a given packet belongs to an existing sessi...

CVE-2001-0969

CVE-2001-0969 affects FreeBSD’s ipfw firewall. The vulnerability arises from improper handling of the string "me" in rules when point-to-point interfaces are used, allowing connections from arbitrary remote hosts. The issue impacts the firewall decision logic, potentially bypassing intended restr...