Debian Security Advisory DSA 998-1 (libextractor)

The remote host is missing an update to libextractor announced via advisory DSA 998-1. Derek Noonburg has fixed several potential vulnerabilities in xpdf, which are also present in libextractor, a library to extract arbitrary meta-data from files. The old stable distribution woody does not contai...

xchat-sql.txt

!/usr/bin/python Exploit for xchat 2.0.5 Saca los usuarios y los hash By nonroot - 2008 it's a PoC, please use responsibly import string,urllib import sys,re print "Target host: i.e: http://127.0.0.1/x7chat/" host=rawinput"Target host include http and /: " print "Output file: i.e: salida.txt"...

WorkingOnWeb 2.0.1400 events.php Remote SQL Injection Vulnerability

No description provided by source. WorkingOnWeb 2.0.1400 Remote SQL Injection d0rk: Powered by WorkingOnWeb 2.0.1400 bug found by ka0x - D.O.M TEAM contact: ka0x01!gmail.com we: ka0x, an0de, xarnuz, s0cratex, Hendrix from spain 1: ? 2: $query = "SELECT cnfshortname, cnfname, cnfbegindate,...

[SECURITY] Fedora 8 Update: chmsee-1.0.0-1.26.fc8

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

phpnukema-sql.txt

!/usr/bin/perl Product: PHP-Nuke Module Advertising BugFounder: 0x90 HomePage: WwW.0x90.COM.Ar Problem: Blind SQL Injection use strict; use warnings; use LWP; use Time::HiRes; use IO::Socket; my $host = "http://url/modules.php?name=Advertising"; my $useragent = LWP::UserAgent-new; my $metodo =...

Mozilla-based browsers jar: URI cross-site scripting vulnerability

Overview Mozilla-based web browsers including Firefox contain a vulnerability that may allow an attacker to execute code, or conduct cross-site scripting attacks. Description The jar: protocol is designed to extract content from ZIP compressed files. Mozilla-based browsers include support for jar...

ASP Message Board 2.2.1c Remote SQL Injection Vulnerability

No description provided by source. Bug Found On : "ASP Message Board" Found By : Q7x Home : Www.Larestankids.coM Ashiyane2 Security Team Dork : inurl:"printer.asp?forum=" Version : 2.2.1c Bug : ASP Message Board - printer.asp - Remote Sql Injection Exploit Exploit : Admin User / Password :...

CVE-2007-4613

CVE-2007-4613 affects BEA WebLogic Server SSL libraries (versions 6.1 Gold–SP7, 7.0 Gold–SP7, 8.1 Gold–SP5). Vulnerability: an attacker in a MITM can obtain plaintext from an SSL stream by injecting crafted data and measuring timing of error responses. This is a separate issue from CVE-2006-2461....

CVE-2007-4546

Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP archive, but extracts to local filenames corresponding to names in Local File Header fields in this archive, which might allow remote attackers to trick a user into performing a dangerous file overwrit...

Design/Logic Flaw

Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP archive, but extracts to local filenames corresponding to names in Local File Header fields in this archive, which might allow remote attackers to trick a user into performing a dangerous file overwrit...

Design/Logic Flaw

Unreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when extracting from an archive with malformed size information in a file header, which might allow user-assisted attackers to obtain sensitive information memory contents by reading the extracted files. NOTE:...

CVE-2007-4546

Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP archive, but extracts to local filenames corresponding to names in Local File Header fields in this archive, which might allow remote attackers to trick a user into performing a dangerous file overwrit...

CVE-2007-4547

Unreal Commander 0.92 build 565 and 573 is vulnerable to a heap-memory leakage issue during extraction from archives with malformed size info in the file header. The affected component writes portions of heap memory into local files, potentially enabling a user with sufficient privileges or acces...

Directory traversal and absolute path in multiple archivers

Directory traversal and absolute path allow to overwrite any file during archive extraction...

UnrealCommander file manager directory traversal

Directory traversal on archive extraction...

Moderate: Red Hat Security Advisory: tar security update

Updated tar package that fixes a path traversal flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the SERVERDOCUMENTROOT parameter in 1 poll.php and 2 pollarchive.php. NOTE: a reliable third party states that this issue is resultant from a variable...

WSN Links Basic Edition - catid SQL Injection

WSN Links Basic Edition - catid SQL Injection --==+================================================================================+==-- --==+ WSN Links Basic Edition SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR...

Buddy Zone 1.5 - view_sub_cat.php?cat_id SQL Injection

Buddy Zone 1.5 - viewsubcat.php?catid SQL Injection --==+================================================================================+==-- --==+ Buddy Zone Version 1.5 SQL Injection Vulnerability +==-- --==+================================================================================+==--...

WebChat 0.78 - 'login.php?rid' SQL Injection

webchat 0.78 Class: SQL Injection Published 28/06/2007 Remote: Yes Critical Level : Dangerous Site: http://sourceforge.net/projects/webdev-webchat/ Download: http://downloads.sourceforge.net/webdev-webchat/webchat-078.zip?modtime=1046649600&bigmirror=0 Author: r00t Vulnerable code: login.php...