1702 matches found
Electronic Engineering Tool (EE TOOL) <= 0.4.1 File Include Vulnerability
No description provided by source. Script Download: http://kent.dl.sourceforge.net/sourceforge/eetool/eetool-0.4-1.tar.gz Code: if$type == 1 $url = "$cgipath" . "ipcalc.cgi"; else $url = "$cgipath" . "ipcalc.cgi?host=$host&mask1=$mask1&mask2=$mask2"; nclude"$url";...
Electronic Engineering Tool (EE TOOL) 0.4.1 - Remote File Inclusion
Script Download: http://kent.dl.sourceforge.net/sourceforge/eetool/eetool-0.4-1.tar.gz Code: if$type == 1 $url = "$cgipath" . "ipcalc.cgi"; else $url = "$cgipath" . "ipcalc.cgi?host=$host&mask1=$mask1&mask2=$mask2"; nclude"$url"; Exploit:www.target.com/ip.inc.php?type=1&cgipath=evilscripts Found:...
Electronic Engineering Tool (EE TOOL) 0.4.1 - Remote File Inclusion
Electronic Engineering Tool EE TOOL 0.4.1 - Remote File Inclusion Script Download: http://kent.dl.sourceforge.net/sourceforge/eetool/eetool-0.4-1.tar.gz Code: if$type == 1 $url = "$cgipath" . "ipcalc.cgi"; else $url = "$cgipath" . "ipcalc.cgi?host=$host&mask1=$mask1&mask2=$mask2"; nclude"$url";...
Electronic Engineering Tool (EE TOOL) <= 0.4.1 File Include Vulnerability
Exploit for unknown platform in category web applications ========================================================================= Electronic Engineering Tool EE TOOL = 0.4.1 File Include Vulnerability ========================================================================= Code: if$type == 1...
Debian DSA-967-1 : elog - several vulnerabilities
Several security problems have been found in elog, an electronic logbook to manage notes. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2005-4439 'GroundZero Security' discovered that elog insufficiently checks the size of a buffer used for processing...
jetboxInclude.txt
Found by : CarcaBot -- E-mail : CarcaBotx at Yahoo dot com -- $relativescriptpath.'/libs/htmlheader.php -- Exploit -- Google Dork: powered by Jetbox CMS -- http://www.sitename.com/path/includes/phpdig/libs/searchfunction.php?relative scriptpath=Evil Code -- Greets goes to : CarcaBot Administrator...
JetBox cms (search_function.php) Remote File Include
Found by : CarcaBot -- E-mail : CarcaBotx at Yahoo dot com -- $relativescriptpath.'/libs/htmlheader.php -- Exploit -- Google Dork: powered by Jetbox CMS -- http://www.sitename.com/path/includes/phpdig/libs/searchfunction.php?relative scriptpath=Evil Code -- Greets goes to : CarcaBot Administrator...
PT-2006-4866 · Scatterchat · Scatterchat
Name of the Vulnerable Software and Affected Versions: ScatterChat versions 1.0.x Description: The issue allows attackers to identify patterns in large numbers of messages by exploiting collisions using a birthday attack on the custom padding mechanism for ECB mode encryption. Recommendations: Fo...
DSA-967-1 elog - several
Bulletin has no description...
ELOG < 2.6.2 Multiple Vulnerabilities
Binary data 3379.prm...
Ubuntu 4.10 / 5.04 : openssl weak default configuration (USN-179-1)
The current default algorithm for creating 'message digests' electronic signatures for certificates created by openssl is MD5. However, this algorithm is not deemed secure any more, and some practical attacks have been demonstrated which could allow an attacker to forge certificates with a valid...
Mandrake Linux Security Advisory : openssl (MDKSA-2005:179)
Yutaka Oiwa discovered vulnerability potentially affects applications that use the SSL/TLS server implementation provided by OpenSSL. Such applications are affected if they use the option SSLOPMSIESSLV2RSAPADDING. This option is implied by use of SSLOPALL, which is intended to work around various...
Foreign hackers resources-vulnerability warning-the black bar safety net
allhack.com This website provides a library and a download area. The library for beginners provides hacking knowledge and computer technology basics. The download area includes the Scan Tool, FLOOD tool, decryption tools, denial of service attacks and the like. alw. nih,gov In the security...
Electronic Mail Operator symbolic links problem
statsdump symlink problem during temporary file creation...
Slackware 8.1 / 9.0 / 9.1 / current : mutt security update (SSA:2004-043-01)
Mutt is a text-based program for reading electronic mail. New mutt packages are available for Slackware 8.1, 9.0, 9.1, and -current. These have been upgraded to version 1.4.2i to fix a buffer overflow that could lead to a machine compromise. All sites using mutt should upgrade to the new mutt...
CVE-2005-2230
Electronic Mail Operator elmo 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files...
CVE-2005-2230
Electronic Mail Operator elmo 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files...
CVE-2005-2230
CVE-2005-2230 affects Electronic Mail Operator (elmo) 1.3.2-r1 and earlier. The vulnerability arises from insecure creation of the elmostats temporary file, enabling a local attacker to overwrite arbitrary files. Public details in the connected documents confirm the affected component and the loc...
CVE-2005-2230
Electronic Mail Operator elmo 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files...
CVE-2002-1697
Electronic Code Book ECB mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information...