1648 matches found
Mambo Open Source 4.0.14 Server - SQL Injection
source: https://www.securityfocus.com/bid/9196/info It has bee reported that Mambo Open Source 4.0.14 Server is prone to SQL injection attacks. The problem is said to occur due to insufficient sanitization of data passed to specific index.php variables. As a result, an attacker may be capable of...
Cross Site Scripting in VP-ASP
Advisory Name: Cross Site Scripting in VP-ASP Release Date: December 05st, 2003 Application: VP-ASP Version Affected: 4.50 Platform: ASP Severity: Low Discover: Xnuxer Research Lab. [email protected], [email protected] Vendor URL: http://www.vp-asp.com Reference: http://infosekuriti.com Proof Of...
OpenBSD 2.x < 3.3 - 'exec_ibcs2_coff_prep_zmagic()' kernel stack overflow
/ OpenBSD 2.x - 3.3 / / execibcs2coffprepzmagic kernel stack overflow / / note: ibcs2 binary compatibility with SCO and ISC is enabled / / in the default install / / Copyright Feb 26 2003 Sinan "noir" Eren / / noir olympos org | noir uberhax0r net / / greets to brother nahual for making this...
Microsoft Windows XP/2000 - Workstation Service Overflow (MS03-049)
/ Proof of concept for MS03-049. This code was tested on a Win2K SP4 with FAT32 file system, and is supposed to work only with that it will probably crash the the other 2Ks, no clue about XPs. To be compiled with lcc-win32 hint link mpr.lib ... I will not improve this public version, do not bothe...
NIPrint LPD-LPR Print Server <= 4.10 Remote Exploit
Exploit for unknown platform in category remote exploits =================================================== NIPrint LPD-LPR Print Server include else include include include include include include include include endif include // JMP ESP ADDRESS in Win XP 5.1.2600 define RET 0x77F5801c define...
php-nuke.6.5.php.txt
Hello, Here my Exploit for PHP-Nuke = v6.5 & Spaiz-Nuke SQL v1.2 SQL Injection Code in PHP: Grettings, Blade... |Blade «[email protected]»| www.abez.org Of AbeZ www.rzw.com.ar By XyborG www.adictosnet.com.ar By LaKosa www.fihezine.tsx.to Of FiH eZine / echo' PHP-Nuke And Spaiz-Nuke Injection Exploit...
DeskPro 1.1 - Multiple SQL Injections
DeskPro 1.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/8856/info It has been reported that DeskPro is prone to multiple SQL injection vulnerabilities due to insufficient sanitization of user-supplied input. The problem is reported to be present in various parameters such ...
Gaim festival plugin code execution
Published plugin example allows code execution...
shatterSEH3.txt
============================================================================ = Shattering SEH III = = [email protected] = http://www.security-assessment.com = = Originally posted: September 29, 2003 ============================================================================ ==...
Microsoft Windows - RPC DCOM2 Remote (MS03-039)
Microsoft Windows - RPC DCOM2 Remote MS03-039 / RPCDCOM2.c ver1.1 copy by FLASHSKY flashsky at xfocus.org 2003.9.14 / include include include include include include unsigned char bindstr= 0x05,0x00,0x0B,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x7F,0x00,0x00,0x00,...
Go2Call Cash Calling vulnerable
Hi, sorry fo my english. I found some bug in programm Go2Call Cash Calling It's dialer for talking from Internet Pc2Phone If you send a little UDP packets with size 1500 bytes for example 1472 chars 'A' on 5000 port then this prog will doesn't work The exploit is very easy a part of code on Delph...
DameWare Mini Remote Control Server SYSTEM Exploit
Exploit for unknown platform in category local exploits ================================================== DameWare Mini Remote Control Server SYSTEM Exploit ================================================== / DameWare Mini Remote Control Server Local SYSTEM Exploit Vulnerable Versions Prior to...
Apache 1.3.x mod_mylo Remote Code Execution Exploit
Exploit for multiple platform in category remote exploits =================================================== Apache 1.3.x modmylo Remote Code Execution Exploit =================================================== / Apache + modmylo remote exploit By Carl Livitt / July 2003 carllivitt at hush dot...
Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)
Microsoft IIS 5.0 - WebDAV Remote Code Execution 3 xwdav / IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without netcat or telnet and with pretty magic number as RET / include include include include include include include include include define RET 0xc9c9...
Microsoft IIS 5.0 5.1 - Remote Denial of Service
Microsoft IIS 5.0 5.1 - Remote Denial of Service / Microsoft IIS versions 5.0 and 5.1 remote denial of service exploit that makes use of the vulnerability recently published by SPI dynamics Published on 31.05.2003 / include include include pragma comment lib,"ws232" void graphitte printf"\n ";...
PHP source code injection in BLNews
Product: BLNews Version: 2.1.3 OffSite: http://www.blnews.de/ Problem: PHP source code injection -------------------------------------------- Vulnerability: ------------admin/objects.inc.php4------------ if $itheme!="blubb" include"$Serverpath/admin/tools.inc.php4";...
Batalla Naval 1.0 4 - Remote Buffer Overflow (1)
source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game server. !/usr/bin/perl Priv8security.com remote...
Mike Bobbitt Album.PL 0.61 - Remote Command Execution
source: https://www.securityfocus.com/bid/7444/info A remote command execution vulnerability has been reported for Album.pl. The vulnerability reportedly exists when alternate configuration files are used. The precise technical details of this vulnerability are currently unknown. This BID will be...
IkonBoard 3.1 - Lang Cookie Arbitrary Command Execution (1)
IkonBoard 3.1 - Lang Cookie Arbitrary Command Execution 1 source: https://www.securityfocus.com/bid/7361/info It has been reported that IkonBoard is prone to an arbitrary command execution vulnerability. The vulnerability is due to insufficient sanitization performed on user supplied cookie data...
Buffer Overflow Vulnerability Found in MailMax Version 5
Buffer Overflow Vulnerability Found in MailMax Version 5 http://www.smartmax.com Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ -----SUMMARY This is a scalable e-mail server that supports SMTP, IMAP4 and POP3 protocols. Its...