[20120202] - Core - Information Disclosure

On some servers the error log could be read by unauthorised users...

USN-1231-1: PHP Vulnerabilities

Mateusz Kocielski, Marek Kroemeke and Filip Palian discovered that a stack-based buffer overflow existed in the socketconnect function's handling of long pathnames for AFUNIX sockets. A remote attacker might be able to exploit this to execute arbitrary code; however, the default compiler options...

PHP 5.3 < 5.3.7 Multiple Vulnerabilities

Binary data 801087.prm...

WeBid 1.0.2 - Persistent Cross-Site Scripting (via SQL Injection)

WeBid 1.0.2 - Persistent Cross-Site Scripting via SQL Injection Exploit Title: presistent XSS through SQLi WeBid 1.0.2 Google Dork: "powered by WeBid" Date: 15-06-2011 Author: Saif El-Sherei Software Link: http://sourceforge.net/projects/simpleauction/ Version: 1.0.2 Tested on: Firefox 4, XAMPP...

WeBid 1.0.2 presistent XSS via SQL Injection

Exploit for php platform in category web applications Exploit Title: presistent XSS through SQLi WeBid 1.0.2 Google Dork: "powered by WeBid" Author: Saif El-Sherei Software Link: http://sourceforge.net/projects/simpleauction/ Version: 1.0.2 Tested on: Firefox 4, XAMPP Info: Open source php/mysql...

WeBid 1.0.2 - Persistent Cross-Site Scripting (via SQL Injection)

Exploit Title: presistent XSS through SQLi WeBid 1.0.2 Google Dork: "powered by WeBid" Date: 15-06-2011 Author: Saif El-Sherei Software Link: http://sourceforge.net/projects/simpleauction/ Version: 1.0.2 Tested on: Firefox 4, XAMPP Info: Open source php/mysql fully featured auction script. Perfec...

Seraph in Confluence 3.5 environment no longer able to instantiate custom authenticator

Customer using custom authenticator no longer works in Confluence 3.5 despite updates to latest API, latest Atlassian SDK, and building against Confluence 3.5 and embedded Crowd. See attached error log from customer. In brief, error is: noformat Caused by:...

Seraph in Confluence 3.5 environment no longer able to instantiate custom authenticator

Customer using custom authenticator no longer works in Confluence 3.5 despite updates to latest API, latest Atlassian SDK, and building against Confluence 3.5 and embedded Crowd. See attached error log from customer. In brief, error is: noformat Caused by:...

Apple QuickTime Streaming Debug Error Logging Buffer Overflow

Added: 08/05/2010 BID: 41962 OSVDB: 66636 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime is vulnerable to a stack buffer overflow in QuickTimeStreaming.qtx when processing specially crafted SMIL files. The crafted SMIL files contain an invalid and...

Design/Logic Flaw

Cisco Digital Media Manager DMM before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a 1 error log or 2 stack trace, aka Bug ID CSCtc46050...

CVE-2010-0572

Cisco Digital Media Manager DMM before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a 1 error log or 2 stack trace, aka Bug ID CSCtc46050...

CVE-2010-0572

Cisco Digital Media Manager DMM before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a 1 error log or 2 stack trace, aka Bug ID CSCtc46050...

An error log data are not sanitized

An error log data are not sanitized Severity: none CVE-2009-4487 Not vulnerable: none Vulnerable: all...

MySQL COM_TABLE_DUMP Information Leakage and Arbitrary Command Execution

No description provided by source. / April 21.st 2006 myexploit.c MySql COMTABLEDUMP Memory Leak & MySql remote B0f MySql = 5.0.20 MySql COMTABLEDUMP Memory Leak MySql = 4.x.x copyright 2006 Stefano Di Paola stefano.dipaolaatwisec.it GPL 2.0 Disclaimer: In no event shall the author be liable for...

Wordpress Plugin Lytebox (wp-lytebox) Local File Inclusion Vulnerability

No description provided by source. WP Plugin Lytebox Local File İnclude and Remote Code Exe. Download ; http://grupenet.com/wp-content/uploads/wp-lytebox.zip Author : TurkGuvenligi Site : www.turkguvenligi.info - [email protected] AgdScorp - t4cs1zkr4L - TheHacker - Fatih - BLaSTeR LFİ;...

PowerCHM 5.7 (hhp File) Stack Overflow poC

Exploit for unknown platform in category dos / poc ========================================== PowerCHM 5.7 hhp File Stack Overflow poC ========================================== exploit.py PowerCHM 5.7 hhp file Stack overflow PoC By:Encrypt3d.M!nd Orginally Discovered by: Biks Security...

Syzygy CMS 0.3 - Local File Inclusion SQL Injection

Syzygy CMS 0.3 - Local File Inclusion SQL Injection !/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shel...

Bloginator v1a SQL Command Injection via Cookie Bypass Exploit

No description provided by source. Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotatautisticidotorg / osirysatautisticidotorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download =...

Free Arcade Script 1.0 LFI Command Execution Exploit

Exploit for unknown platform in category web applications ==================================================== Free Arcade Script 1.0 LFI Command Execution Exploit ==================================================== !/usr/bin/perl...

Graugon Forum 1 - id Command Injection SQL Injection

Graugon Forum 1 - id Command Injection SQL Injection !/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...