phpRPC decode function command execution

Added: 03/13/2006 CVE: CVE-2006-1032 BID: 16833 OSVDB: 23514 Background phpRPC is an xmlrpc library written in PHP supporting most databases. Problem A vulnerability in the decode function allows a remote attacker to execute arbitrary PHP commands placed inside a tag. Resolution phpRPC is no long...

Apple Mac OS X 10.4.5 Mail.app (Real Name) Buffer Overflow Exploit

Exploit for macOS platform in category remote exploits ================================================================== Apple Mac OS X 10.4.5 Mail.app Real Name Buffer Overflow Exploit ================================================================== !/usr/bin/perl Code by Kevin Finisterre...

phpRPC decode function command execution

Added: 03/13/2006 CVE: CVE-2006-1032 BID: 16833 OSVDB: 23514 Background phpRPC is an xmlrpc library written in PHP supporting most databases. Problem A vulnerability in the decode function allows a remote attacker to execute arbitrary PHP commands placed inside a tag. Resolution phpRPC is no long...

Apple Mac OSX 10.4.5 Mail.app - Real Name Buffer Overflow

!/usr/bin/perl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom http://www.digitalmunition.com Mail.app Version 2.0.7 746.2 on OSX 10.4.5 Build 8H14 + Security Update 2006-001 PowerPC v1.0 RFC-1740 MIME-based Mac file buffer overflow AppleSingle file header: 4 byte magic number4 byte versi...

CVE-2006-1032

Eval injection vulnerability in the decode function in rpcdecoder.php for phpRPC 0.7 and earlier, as used by runcms, exoops, and possibly other programs, allows remote attackers to execute arbitrary PHP code via the base64 tag...

phpRPC Library Remote Code Execution

GulfTech Security Research February 26, 2006 Vendor : Robert Hoffman URL : http://sourceforge.net/projects/phprpc/ Version : phpRPC = 0.7 Risk : Remote Code Execution Description: phpRPC is meant to be an easy to use xmlrpc library. phpRPC is greatly simplified with the use of database/rpc-protoc...

Ubuntu 4.10 : exim4 vulnerabilities (USN-56-1)

A flaw has been found in the hostaton function, which can overflow a buffer if it is presented with an illegal IPv6 address that has more than 8 components. When supplying certain command line parameters, the input was not checked, so that a local attacker could possibly exploit the buffer overfl...

drupal.txt

Drupal all versiyon xss ---------------------------------------------------- site:http://www.drupal.org Hex, Base64, Decimal site: http://liz0zim.no-ip.org/code.php -------------------------------------------------- img tag : on...

drupal all versiyon xss

Drupal all versiyon xss ---------------------------------------------------- site:http://www.drupal.org Hex, Base64, Decimal site: http://liz0zim.no-ip.org/code.php -------------------------------------------------- img tag : on...

CVE-2005-4326

The CVE-2005-4326 entry concerns APC PowerChute Network Shutdown’s web interface, where all communication is performed in cleartext (base64-encoded). This design allows remote attackers to sniff authentication credentials. Public references confirm the issue and the metric suggests a network-base...

CVE-2005-4326

The web interface for American Power Conversion APC PowerChute Network Shutdown performs all communication in cleartext base64-encoded, which allows remote attackers to sniff authentication credentials...

Horde IMP 2.2.x3.2.x4.0.x - Email Attachments HTML Injection

Horde IMP 2.2.x3.2.x4.0.x - Email Attachments HTML Injection source: https://www.securityfocus.com/bid/15730/info Horde IMP is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically...

CVE-2004-2619

ripMIME 1.3.2.3 and earlier allows remote attackers to bypass e-mail protection via a base64 MIME encoded attachment containing invalid characters that are not properly extracted...

CVE-2004-2619

CVE-2004-2619 affects ripMIME up to version 1.3.2.3, where a base64 MIME encoded attachment containing invalid characters may bypass email protection due to improper extraction. The vulnerability enables remote attackers to influence processing of base64 content in email attachments (attack vecto...

CVE-2004-2619: Undefined Security Weakness

ripMIME 1.3.2.3 and earlier allows remote attackers to bypass e-mail protection via a base64 MIME encoded attachment containing invalid characters that are not properly extracted...

MDaemon 8.0.3 - IMAPD CRAM-MD5 Authentication Overflow (Metasploit)

$Id: mdaemoncrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Wordpress <= 1.5.1.3 Remote Code Execution 0-Day Exploit

Exploit for unknown platform in category web applications ======================================================== Wordpress = 1.5.1.3 Remote Code Execution 0-Day Exploit ======================================================== ?php echo "Wordpress = 1.5.1.3 - remote code execution 0-DDAAYY...

CVE-2001-1550: Undefined Security Weakness

CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users...

File Upload Manager Sploits

Below is some code for a recent unpatched exploit for file managers using php as the base code. Share this with the world and help protect. File Upload Manager - Bypass File Extension and Arbitrary File Delete nothing to see here @ hackthissite.org Through an input validation flaw, users are able...

CVE-2005-1957: Improper Authentication

mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote attackers to provide a modified base64-encoded file parameter and 1 read arbitrary files via the "view" action or 2 delete arbitrary files via the del action...