Plume CMS 1.1.3 - dbinstall.php Remote File Inclusion

Plume CMS 1.1.3 - dbinstall.php Remote File Inclusion /------------------------------------------------ IHS Public advisory -------------------------------------------------/ Plume CMS Remote File Inclusion It uses PHP and MySql. With a single installation of Plume you can have multiple websites,...

spank.c

Your machine answers to TCP packets that are coming from a multicast address. This is known as the 'spank' denial of service attack. OpenVAS Vulnerability Test $Id: spank.nasl 8145 2017-12-15 13:31:58Z cfischer $ spank.c Authors: Michel Arboi Copyright: Copyright C 2003 Michel Arboi This program ...

CVE-2005-1712

Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged authors to upload arbitrary media files...

CVE-2005-1712

CVE-2005-1712 affects Serendipity 0.8; when used with multiple authors, unprivileged authors can upload arbitrary media files. The provided documents state the vulnerability and affected scenario but do not disclose root cause, exploit details, or a remediation. No explicit patch information is g...

CVE-2005-1712

Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged authors to upload arbitrary media files...

Web_Store.cgi allows Command Execution

WebStore.cgi allows Command Execution: This application was written by Selena Sol and Gunther Birznieks. You can execute shellcommands: http://www.victim.com/cgi-bin/webstore.cgi?page=.html|cat /etc/passwd| Zero X, member of www.Lobnan.de and www.Lostkey.org...

uudeview buffer overflows

The authors of UUDeview report repairing two buffer overflows in their software...

OpenBSD 2.6 / 2.7ftpd Remote Exploit

Exploit for bsd platform in category remote exploits ==================================== OpenBSD 2.6 / 2.7ftpd Remote Exploit ==================================== / h0h0h0 0-day k0d3z Exploit by Scrippie, help by dvorak and jimjones greets to sk8 Not fully developt exploit but it works most of t...

CVE-2000-0720

news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi progr...

x11amp.txt

Vulnerability: Any user can overwrite any file in the system. title=x11amp ver .70 authors=Mikael Alm, Thomas Nilsson, Olle Hallnas system=any that run this version [email protected] Grampa Elite Overview: To start out with I am pretty sure that I am not the one that has found this...