Community CMS 0.1 - 'include.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/30275/info Community CMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may allow...

Simple DNS Plus 5.0/4.1 - Remote Denial of Service

!/usr/bin/perl Simple DNS Plus 5.0/4.1 Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect DNS server"; $address = $ARGV0; $trans = pack"H4","1337"; $flags =...

Do not release details about securrity vulnerabilities until after the fix was available for a reasonable period of time

It is an unfortunate practice at Atlassian to as a part of release notes release all the information, often including example exploits|http://jira.atlassian.com/browse/CONF-9350, about security vulnerabilities that were fixed in the version being released. This gives us great headaches because: w...

Do not release details about securrity vulnerabilities until after the fix was available for a reasonable period of time

It is an unfortunate practice at Atlassian to as a part of release notes release all the information, often including example exploits|http://jira.atlassian.com/browse/CONF-9350, about security vulnerabilities that were fixed in the version being released. This gives us great headaches because: w...

PHPwebnews 0.2 MySQL Edition - det SQL Injection

PHPwebnews 0.2 MySQL Edition - det SQL Injection ...:::::phpwebnews-mysql 0.2 SQL Injection Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir ================================================================================= Discoverd By :virangar security team User In...

drinkswebsite-sql.txt

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Easysitenetwork Jokes Complete Website 2.1.3 - jokeid SQL Injection

Easysitenetwork Jokes Complete Website 2.1.3 - jokeid SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection...

Simple Machines Forum <= 1.1.4 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== Simple Machines Forum | |||| /| / / ================================================================================================= This was a priv8 Exploit...

Simple Machines Forum (SMF) 1.1.4 - SQL Injection

Simple Machines Forum SMF 1.1.4 - SQL Injection !/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / /...

[SECURITY] Fedora 7 Update: openoffice.org-2.3.0-6.9.fc7

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

[SECURITY] Fedora 9 Update: openoffice.org-2.4.1-17.3.fc9

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

MDaemon <= 9.6.5 Multiple Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category dos / poc ============================================================ MDaemon = 9.6.5 Multiple Remote Buffer Overflow Exploit PoC ============================================================ MDaemon == v9.6.5 Multiple Remote Buffer Overflow Vendor Site:...

IBM Lotus Sametime Community Services Multiplexer buffer overflow

Added: 05/30/2008 CVE: CVE-2008-2499 BID: 29328 OSVDB: 45610 Background IBM Lotus Sametime is enterprise instant messaging and web conferencing software. Problem A buffer overflow vulnerability in the Community Services Multiplexer allows remote attackers to execute arbitrary commands by requesti...

IBM Lotus Sametime Community Services Multiplexer buffer overflow

Added: 05/30/2008 CVE: CVE-2008-2499 BID: 29328 OSVDB: 45610 Background IBM Lotus Sametime is enterprise instant messaging and web conferencing software. Problem A buffer overflow vulnerability in the Community Services Multiplexer allows remote attackers to execute arbitrary commands by requesti...

DSquare Exploit Pack: D2SEC_SAMETIME

Name| d2secsametime ---|--- CVE| CVE-2008-2499 Exploit Pack| D2ExploitPack Description| IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability Notes|...

CVE-2008-2499: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Community Services Multiplexer aka MUX or StMux.exe in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL...

IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Sametime. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of long URLs in the Community Services Multiplexer StMux.exe listening on...

WirelessIP5000 has multiple vulnerabilities

Overview WirelessIP5000, a wireless IP phone from Hitachi Cable, contains multiple vulnerabilities; - Illegal access using the port TCP3390 - SNMP access using an arbitrary community name - Access to the HTTP server by an unauthorized user in the factory default configuration - The HTTP server...

[SECURITY] Fedora 7 Update: openoffice.org-2.3.0-6.8.fc7

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGLANGUAGECPATH parameter to modules/forum/embedforum.php and the 2...