linux/x86 examples of long-term payloads hide-wait-change (.s)

No description provided by source. ============================================================================================= hide-wait-change final v4 ------------------------------------------------------------------------------------------- Author: xort [email protected] Date: 09/14/2005...

linux/x86 examples of long-term payloads hide-wait-change 187 bytes+

No description provided by source. /---------------------------------------------------------------------------- Mystique Project: Examples of long-term payloads hide-wait-change code by [email protected] & [email protected] ----------------------------------------------------------------------------...

x_aix5_bellmail.pl.txt

-bash-2.05b$ -bash-2.05b$ cat xaix5bellmail.pl !/usr/bin/perl FileName: xaix5bellmail.pl Exploit "Race condition vulnerability BUGTRAQ ID: 8805" of /usr/bin/bellmail command on Aix5 to change any file owner to current user. Usage : xaix5bellmail.pl aimfile aimfile : then file wich you want to cho...

[SECURITYREASON.COM] PostNuke SQL Injection 0.760-RC2=>x cXIb8O3.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke SQL Injection 0.760-RC2=x cXIb8O3.3 Author: cXIb8O3Maksymilian Arciemowicz Date: 20.2.2005 from securityreason.com TEAM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 and 0.760-RC2 PostNuke is an open source, open developement...

CVE-2004-1571

AJ-Fork 167 is affected by an information-disclosure vulnerability where direct requests to 13 PHP scripts (auto-acronyms.php, auto-archive.php, ount-article-views.php, kses.php, custom-quick-tags.php, disable-all-comments.php, easy-date-format.php, enable-disable-comments.php, filter-by-author.p...

CVE-2004-1572

AJ-Fork 167 is vulnerable to an information-disclosure flaw where access to directories (data, inc, plugins, skins, tools) is not restricted, enabling remote attackers to list files via direct HTTP requests. The CVE-2004-1572 entry documents this risk, with impact limited to exposure of directory...

CVE-2004-1573

The CVE-2004-1573 entry concerns AJ-Fork 167 where insecure file permissions on users.db.php (set to 777) allow local users to execute arbitrary PHP code and gain administrator privileges. The vulnerability’s impact is (local) arbitrary code execution with full privileges as described; exploitati...

CVE-2004-1571

AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to 1 auto-acronyms.php, 2 auto-archive.php, 3 ount-article-views.php, 4 kses.php, 5 custom-quick-tags.php, 6 disable-all-comments.php, 7 easy-date-format.php, 8 enable-disable-comments.php, 9...

CVE-2004-1572

AJ-Fork 167 does not restrict access to directories such as 1 data, 2 inc, 3 plugins, 4 skins, or 5 tools, which allows remote attackers to list files in those directories via a direct HTTP request...

CVE-2004-1573

The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator...

CVE-2004-1572: Undefined Security Weakness

AJ-Fork 167 does not restrict access to directories such as 1 data, 2 inc, 3 plugins, 4 skins, or 5 tools, which allows remote attackers to list files in those directories via a direct HTTP request...

CVE-2004-1571: Undefined Security Weakness

AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to 1 auto-acronyms.php, 2 auto-archive.php, 3 ount-article-views.php, 4 kses.php, 5 custom-quick-tags.php, 6 disable-all-comments.php, 7 easy-date-format.php, 8 enable-disable-comments.php, 9...

CVE-2004-1573: Undefined Security Weakness

The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator...

CVE-2004-1571

AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to 1 auto-acronyms.php, 2 auto-archive.php, 3 ount-article-views.php, 4 kses.php, 5 custom-quick-tags.php, 6 disable-all-comments.php, 7 easy-date-format.php, 8 enable-disable-comments.php, 9...

CVE-2004-1573

The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator...

CVE-2004-1572

AJ-Fork 167 does not restrict access to directories such as 1 data, 2 inc, 3 plugins, 4 skins, or 5 tools, which allows remote attackers to list files in those directories via a direct HTTP request...

Echo Security Advisory 2004.7

ECHOADV07$2004 --------------------------------------------------------------------------- Multiple Vulnerabilities in AJ-Fork --------------------------------------------------------------------------- Author: y3dips Date: September, 23th 2004 Location: Indonesia, Jakarta Web:...

AJ-Fork Permission Weakness Information Disclosure

Binary data 2342.prm...

Multiple Vulnerabilities in AJ-Fork

ECHOADV07$2004 --------------------------------------------------------------------------- Multiple Vulnerabilities in AJ-Fork --------------------------------------------------------------------------- Author: y3dips Date: September, 23th 2004 Location: Indonesia, Jakarta Web:...

Debian DSA-339-1 : semi - insecure temporary file

NOTE: due to a combination of administrative problems, this advisory was erroneously released with the identifier 'DSA-337-1'. DSA-337-1 correctly refers to an earlier advisory regarding gtksee. semi, a MIME library for GNU Emacs, does not take appropriate security precautions when creating...