naxtorShop.txt

Hello All, I have discovered a couple of remote vulnerabilities in: Naxtor Shopping Cart 1.0 Authors Site: http://www.naxtor.com.au/ Naxtor is described by its authors as: Naxtor Shopping Cart is one stop solution for companies' interested in selling merchandise online...

Windows Command Shell, Reverse Ordinal TCP Stager (No NX or Win7)

Spawn a piped command shell staged. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 93 include Msf::Payload::Stager include Msf::Payload::Windows def...

e107617.txt

Software: http://www.e107.org Author: Heintz Advisory origin: http://www.waraxe.us Software bugtracker: http://e107.org/e107plugins/bugtracker2/bugtracker2.php?0.bug.558 e107 v 0.617 search.php line 142 if$POST'searchquery' echo ""; unset$text; extract$POST; here extract registeres and overwrites...

whoiscartInsert.txt

Subject: Saeven.net's WhoisCart all versions released prior to this disclosure is vulnerable in that it allows an attacker to insert Javascript into user viewed pages, and also to view any world readable file on the server hosting the WhoisCart software. Severity: Severe; These vulnerabilities ca...

ZH2005-03SA.txt

ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 Author: Gerardo 'Astharot' Di Giacomo Date: 26 March 2005 Product: NukeBookmarks .6 URL: http://nukebookmarks.sourceforge.net/ About the product ----------------- From the home page: "Nuke Bookmarks is a module for PHP-Nuke that allows...

dcl15.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: Download Center Lite DCL Version: Location: Poland Email: groszynskif gmail com HP: http://shell.homeunix.org -- == -- == -- == -- == -- == -- == -- == -- == -- == --...

formmail23.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: Form Mail Script FS Version: Location: Poland Email: groszynskif gmail com HP: http://shell.homeunix.org -- == -- == -- == -- == -- == -- == -- == -- == -- == --...

phpnews124.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHP News Version: 1.2.4 and possibly 1.2.3 Homepage: http://newsphp.sourceforge.net/ Author: Filip Groszynski VXSfx Date: 23 February 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in auth.php: if...

iGeneric12.txt

Hello All, I have discovered multiple vulnerabilities in: iGeneric eShop 1.2 Authors Site: http://www.igeneric.co.uk +-Examples:--------------------------------------------------+ Information Disclosure & Possible SQL Injection:...

osCommerceXSS.txt

Hello All, I have discovered XSS vulnerability in: osCommerce 2.2-MS2 Authors Site: http://www.oscommerce.com/ +-Example:--------------------------------------------------+ XSS: http://www.victimsite.com/contactus.php?&name=1&email=1&enquiry=%3C/textare a%3E%3Cscript%3Ealert'w00t';%3C/script%3E...

[NOBYTES.COM: #5] iGeneric eShop 1.2 - Information Disclosure & Possible SQL Injection

Hello All, I have discovered multiple vulnerabilities in: iGeneric eShop 1.2 Authors Site: http://www.igeneric.co.uk +-Examples:--------------------------------------------------+ Information Disclosure & Possible SQL Injection:...

CVE-2004-1448

Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code...

winaceHKI.txt

Application: WinAce, WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: ZIP File Directory Transversal Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1...

pntresmailer.txt

Hello All, PnTresMailer code browser 6.03 is open to information disclosure. Authors Site: http://canvas.anubix.net +-Examples:-----+ 1 www.victimsite.com/codebrowserpntm.php?foldertohighlight=pnTresMailer&fileto highlight=w00t Warning: highlightfilecodebrowserPnTM/pnTresMailer/w00t: failed to op...

SudoEdit 1.6.8 - Local Change Permission

/ Copyright © Rosiello Security 2004 http://www.rosiello.org sudoedit Exploit SOFTWARE : sudoedit REFERENCE: http://www.sudo.ws/sudo/alerts/sudoedit.html DATE: 18/09/2004 Summary: A flaw in exists in sudo's -u option aka sudoedit in sudo version 1.6.8 that can give an attacker read permission to ...

CDRecords ReadCD - Local Privilege Escalation

CDRecords ReadCD - Local Privilege Escalation !/bin/bash echo "readcd-exp.sh -- ReadCD local exploit Test on cdrecord-2.01-0.a27.2mdk" echo "Author : newbug at chroot.org" echo "Date :09.13.2004" echo "IRC : irc.chroot.org discuss" export READCD=/usr/bin/readcd cd /tmp cat s.c include include int...

SquirrelMail - 'chpasswd' Local Privilege Escalation (Brute Force)

/ PSTchpasswdexp-vb.c: Squirrelmail chpasswd local root bruteforce exploit Author: Bytes || www ph4nt0m net Notice: vb: Local bruteforce version vR: remote bruteforce version Greatze: ph4nt0m,music@0x557 All PST member,Grip2,Airsupply,Jambalaya,Ann,Paul,Happy... Thax: My...

isec-0016-procleaks.txt

Synopsis: Linux kernel file offset pointer handling Product: Linux kernel Version: 2.4 up to to and including 2.4.26, 2.6 up to to and including 2.6.7 Vendor: http://www.kernel.org/ URL: http://isec.pl/vulnerabilities/isec-0016-procleaks.txt CVE: CAN-2004-0415 Author: Paul Starzetz Date: Aug 04,...

SoX - '.wav' Local Buffer Overflow

//--------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there are two buffer overflows in the...

[Full-Disclosure] injection html CuteNews

Original Advisory: http://www.darkbicho.iberhosting.net/advisory-11.txt ------------------------------------------------------------------------------------------------- :.: injection html CuteNews :.: PROGRAM: CuteNews HOMEPAGE: http://cutephp.com/ VERSION: v1.3.x BUG: injection html DATE:...