CVE-2005-1360

PHP remote file inclusion vulnerability in error.php in GrayCMS 1.1 allows remote attackers to execute arbitrary PHP code by modifying the pathprefix parameter to reference a URL on a remote web server that contains the code...

Soldier of Fortune 2 1.03 - 'cl_guid' Server Crash

/ by Luigi Auriemma / include include include include / Quake 3 engine Huffman algorithm 0.2 ALL the code comes from the Q3fusion project of Andrey Nazarov: http://sourceforge.net/projects/q3fusion/ I have simply modified some variables and the prototype of the decompressing and compressing...

SQL Injection Vulnerability In IBProArcade

A flaw exists in the high scores module of IbProArcade which allows malicious SQL Code to be executed on the database the board & arcade use. Demo: http://www.ibproarcade.com/index.php?act=Arcade&do=stats&gameid=104FOO Fix this vuln by following the following directions... open your...

Bypass personal firewall application protection . Again.

Bypass personal firewall application protection . Again. coded by offtopic [email protected] 2004 Special thank to 3APA3A for links to the debuggers for Windows. quote src= http://www.security.nnov.ru/advisories/bypassing.asp?l=EN Personal firewall usually restricts access to network to the list o...

TorrentTrader 1.0 RC2 SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================== TorrentTrader 1.0 RC2 SQL Injection Exploit =========================================== !/usr/bin/php ? / TorrentTrader 1.0 RC2 SQL Injection Proof of Concept By aCiDBiTS acidbitsathotmail.com...

CVE-2004-0091

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the regsite or possibly regsite parameter. NOTE: the vendor has disputed this issue, saying...

A security vulnerability in S8Forum

INFORMATIONS : ============= - Product : S8Forum - Tested version : 3.0 maybe other versions. - Website : http://www.kellishaver.com/ Vendor Status: not informed yet !!! - Problem : A security vulnerability in S8Forum PROBLEM : ========= This forum writen by PHP. It doesn't use database, instead...

AnyPortal(php)-0.1 Vulnerability

======================================================== AnyPortalphp-0.1 Vulnerability ======================================================== Date: 08/09/2000 Author: zorgon [email protected] Web: http://www.nightbird.free.fr Introduction -------------- Secure Reality Pty Ltd. has publishe...

MacOS_encryption_algorithm.txt

Subject: MacOS system encryption algorithm 3 To: [email protected] Sometime ago, Dawid adix Adamski sent to bugtraq the encryption algorithm in MacOS personal AppleShare server he found. I have been researching a little on this subject, and I've found his code fails when decoding the firs...