8382 matches found
CVE-2008-2146
wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATHINFO $PHPSELF, which allows remote attackers to bypass intended access restrictions for certain pages...
CVE-2008-2146
CVE-2008-2146 affects WordPress prior to 2.2.3, where wp-includes/vars.php fails to correctly extract the current path from PATH_INFO ($PHP_SELF). This allows remote attackers to bypass page access restrictions. The root cause is a path-determination flaw in WordPress’ request handling. A fix is ...
ibdmicro-sql.txt
01010111 01001001 01010010 01000101 01000100 01010011 - 01000101 01000011 01010101 01010010 01001001 01010100 - 01011001 ADVISORY: IBD MICRO CMS 3.5 SQL INJECTION LOGIN BYPASS || 0x00: ABOUT ME || 0x01: DATELINE || 0x02: INFORMATION || 0x03: EXPLOITATION || 0x04: RISK LEVEL || 0x00: ABOUT ME...
WordPress <= 2.2.2 - BYPASS
The attackers can bypass intended access restrictions for certain pages, because wp-includes/vars.php does not properly extract the current path from the PATHINFO. Solution Update WordPress...
[SECURITY] Fedora 8 Update: chmsee-1.0.0-2.30.fc8
A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...
Comdev News Publisher Remote SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By:...
nk_exploit.txt
URL: http://realn.free.fr/releases/46556 Date: 04-01-08 - Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec vulnerability used in this exploit was discovered by DarkFig. / print "\n"; print " Nuked-Klan \n\n\n"; if$argc options\n\n"; print " Options: -mode 0 -...
Nuked-Klan <= 1.7.6 Multiple Vulnerabilities Exploit
Exploit for unknown platform in category web applications ==================================================== Nuked-Klan Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec vulnerability used in this exploit was discovered by DarkFig. / print "\n"; print "...
Nuked-klaN 1.7.6 - Multiple Vulnerabilities
URL: http://realn.free.fr/releases/46556 Date: 04-01-08 - Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec vulnerability used in this exploit was discovered by DarkFig. / print "\n"; print " Nuked-Klan \n\n\n"; if$argc options\n\n"; print " Options: -mode 0 -...
Nuked-Klan <= 1.7.6 Multiple Vulnerabilities Exploit
?php / Name: Nuked-Klan = 1.7.6 Multiple Vulnerabilities Exploit Credits: Charles "real" F. charlesfolathotmail.fr URL: http://realn.free.fr/releases/46556 Date: 04-01-08 - Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec vulnerability used in this exploit was...
Nuked-Klan <= 1.7.6 Multiple Vulnerabilities Exploit
No description provided by source. ?php / Name: Nuked-Klan = 1.7.6 Multiple Vulnerabilities Exploit Credits: Charles "real" F. charlesfolathotmail.fr URL: http://realn.free.fr/releases/46556 Date: 04-01-08 - Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec...
Nuked-klaN 1.7.6 - Multiple Vulnerabilities
Nuked-klaN 1.7.6 - Multiple Vulnerabilities URL: http://realn.free.fr/releases/46556 Date: 04-01-08 - Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec vulnerability used in this exploit was discovered by DarkFig. / print "\n"; print " Nuked-Klan \n\n\n"; if$argc...
PEEL CMS Admin Hash Extraction and Remote Upload Exploit
No description provided by source. !/usr/bin/php ?php /---------------------------------------------------------------\ Exploit: PEEL CMS Admin Hash Extraction and Remote Upload Credits: Charles "real" F. charlesfolathotmail.fr URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL...
PEEL CMS 3.x - Admin Hash Extraction Arbitrary File Upload
PEEL CMS 3.x - Admin Hash Extraction Arbitrary File Upload !/usr/bin/php URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL PROFESSIONNELLE This exploit will use multiple vulns of multiple versions of PEEL to try to spawn a Remote Upload File. Speci...
PEEL CMS Admin Hash Extraction and Remote Upload Exploit
Exploit for unknown platform in category web applications ======================================================== PEEL CMS Admin Hash Extraction and Remote Upload Exploit ======================================================== !/usr/bin/php ^',...
peelcms-upload.txt
!/usr/bin/php URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL PROFESSIONNELLE This exploit will use multiple vulns of multiple versions of PEEL to try to spawn a Remote Upload File. Special thanks to: ddx39...
Loginwindow.app and Mac OS X
Moin moin Bugtraq readers, Bill Paul and I have discovered that LoginWindow.app doesn't clear credentials after a user is authenticated. We discovered this while testing our EFI-based memory recovery utilities discussed recently0. We've found that depending on the state of capture, the passwords...
xoopseempregos-sql.txt
XOOPS Module eEmpregos SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: "modules/eEmpregos/index.php" DORK 2 : allinurl: cid "modules/eEmpregos" example http://xxxx/modules/eEmpregos/index.php?pa=view&cid=explo...
[SECURITY] Fedora 8 Update: chmsee-1.0.0-1.28.fc8
A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...
[SECURITY] Fedora 7 Update: chmsee-1.0.0-1.28.fc7
A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...