3184 matches found
osCommerce 2.1/2.2 - 'product_info.php' SQL Injection
source: https://www.securityfocus.com/bid/19774/info osCommerce is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...
comcomprofiler.txt
--------------------------------------------------------------------------- Mambo/Joomla comcomprofiler Components == v1.0 RC 2 Multiple Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Matdhule Date : August, 25th 2006...
opera9dos.txt
/ Opera 9 IRC client DOS exploit by Preddy and NNP http://www.smashthestack.org http://silenthack.co.uk http://www.team-rootshell.com 12 August 2006 / include include include include include include include include include include include define MYPORT 6667 define BACKLOG 10 // : KICK\r\n char di...
altnwebadmin.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TTG0601 - Alt-N WebAdmin Multiple Vulnerabilities RELEASE DATE: August 21st, 2006 VENDOR: Alt-N Technologies http://www.altn.com VULNERABLE: Tested on Alt-N WebAdmin v3.2.3/3.2.4 running with MDaemon v9.0.5, earlier versions are suspected vulnerable a...
Mambo Peoplebook Component 1.0 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ Mambo Peoplebook Component 1.0 Remote File Include Vulnerability ================================================================...
Opera 9 IRC Client Remote Denial of Service Exploit (c)
Exploit for unknown platform in category dos / poc ======================================================= Opera 9 IRC Client Remote Denial of Service Exploit c ======================================================= / Opera 9 IRC client DOS exploit by Preddy and NNP http://www.smashthestack.org...
Opera 9 - IRC Client Remote Denial of Service
/ Opera 9 IRC client DOS exploit by Preddy and NNP http://www.smashthestack.org http://silenthack.co.uk http://www.team-rootshell.com 12 August 2006 / include include include include include include include include include include include define MYPORT 6667 define BACKLOG 10 // : KICK\r\n char di...
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution (extra)
Exploit for hardware platform in category remote exploits =================================================================== Barracuda Spam Firewall /cgi-bin/previewemail.cgi?file=/mail/mlog/../tmp/backup/periodicconfig.txt.tmp https:///cgi-bin/previewemail.cgi?file=/mail/mlog/../../bin/ls%20/|...
wzdftpdwarez.pl.txt
0day0day0day0day0day0day0day ------------------------------- wzdftpd remote exploit by kcope nice call to popen3 on custom site commands... August 2005 confidential! keep private! ------------------------------- 0day0day0day0day0day0day0day . . | // / | | / \ / / /\ // |\ \ \ \ / | \ / / // //...
WzdFTPD 0.5.4 - Remote Command Execution
WzdFTPD 0.5.4 - Remote Command Execution 0day0day0day0day0day0day0day ------------------------------- wzdftpd remote exploit by kcope nice call to popen3 on custom site commands... August 2005 confidential! keep private! ------------------------------- 0day0day0day0day0day0day0day . . | // / | | ...
WzdFTPD <= 0.5.4 Remote Command Execution Exploit
Exploit for linux platform in category remote exploits ================================================= WzdFTPD // | // / \ | || || | /\ | / / || / \ / / /\ \ / \ / \ / / | | /\ / / / // /| \ \ / / / VER1 use Net::FTP; sub usage print "usage: wzdftpdwarez.pl remotehost remoteport...
WzdFTPD 0.5.4 - Remote Command Execution
0day0day0day0day0day0day0day ------------------------------- wzdftpd remote exploit by kcope nice call to popen3 on custom site commands... August 2005 confidential! keep private! ------------------------------- 0day0day0day0day0day0day0day . . | // / | | / \ / / /\ // |\ \ \ \ / | \ / / // //...
Site News v 1.1 admin head error
+| Advisory 16. Site News v 1.1 admin head error Software: Site News v 1.1 Problem-Type: local Platforms: All Vulnerability: admin error Date: 29'Aug 2004 discovered by XSPYD3X -xspyd3xatinboxdotru- HTTP: www.lwb57.org IRC: irc.lwb57.org:6667 lwb +:| Exploit |: Messages are added by the usual use...
[ GLSA 200408-11 ] Nessus: "adduser" race condition vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200408-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
Solaris 8 (sparc) : 111069-01
SunOS 5.8: bsmunconv overwrites root cron. Date this patch was last updated by Sun : Aug/02/01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Solaris 2.6 (x86) : 108308-02
SunOS 5.6x86: keyserv fixes. Date this patch was last updated by Sun : Aug/21/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...
ecartis buffer overflows and input validation bugs
Timo Sirainen reports multiple buffer overflows that may be triggered while parsing messages, as well as input validation errors that could result in disclosure of mailing list passwords. These bugs were resolved in the August 2003 snapshot of ecartis...
oce9400.txt
This appeared on bugtraq in August of 99 I am aware of the Intelligent Peripherals bulletin by CIAC. http://www.ciac.org/ciac/bulletins/j-019.shtml I have a few plotters / printers under my audit umbrella and noticed something interesting on an Oce' 9400 plotter. The printer has the ability to be...
