[SECURITY] Fedora 8 Update: kazehakase-0.5.4-2.fc8.1

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine. If you want to use WebKit for HTML rendering engine, install "kazehakase-webkit" rpm instead...

[SECURITY] Fedora 8 Update: kazehakase-0.5.4-2.fc8

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine. If you want to use WebKit for HTML rendering engine, install "kazehakase-webkit" rpm instead...

DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================== DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit ====================================================== !/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Ma...

[SECURITY] Fedora 8 Update: kazehakase-0.5.2-1.fc8.2

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable...

WordPress $_SERVER变量跨站脚本漏洞

BUGTRAQ ID: 26885 WordPress是一款免费的论坛Blog系统。 WordPress处理全局变量时存在漏洞，远程攻击者可能利用此漏洞控制导致跨站脚本执行攻击。 WordPress信任了$SERVER'REQUESTURI'全局变量，因此远程攻击者控制了$SERVER'REQUESTURI'就可以执行跨站脚本攻击。以下是/wp-includes/query.php文件中第34行的有漏洞函数： function isadmin global $wpquery; return $wpquery-isadmin || stripos$SERVER'REQUESTURI',...

[SECURITY] Fedora 8 Update: kazehakase-0.5.0-1.fc8.2

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable...

[SECURITY] Fedora 7 Update: kazehakase-0.5.0-1.fc7.2

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable...

[SECURITY] Fedora 7 Update: sylpheed-2.3.1-5

This program is an X based fast email client which has features like: o user-friendly and intuitive interface o integrated NetNews client partially implemented o ability of keyboard-only operation o Mew/Wanderlust-like key bind o multipart MIME o unlimited multiple account handling o message...

CVE-2007-2569

Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the friendlypath parameter to 1 core/data/yaml.inc.php, or load.php in 2 core/data/, 3 core/display/, or 4 core/support/...

CVE-2007-2569

CVE-2007-2569 describes multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier. The flaw allows an attacker to trigger execution of arbitrary PHP code by supplying a crafted URL in the friendly_path parameter to one of four vulnerable scripts: core/data/yaml.inc.php, _lo...

friendly-rfi.txt

Friendly 1.0d1 friendlypathRemote File Inclusion Vulnerabilities D.Script: http://friendlyphp.org/downloads/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/friendly/core/data/load.php?friendlypath=shell Exploit:Path/friendly/core/data/yaml.inc.php?friendlypath=shell...

Friendly <= 1.0d1 (friendly_path) Remote File Inclusion Vulnerabilities

No description provided by source. Friendly 1.0d1 friendlypathRemote File Inclusion Vulnerabilities D.Script: http://friendlyphp.org/downloads/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/friendly/core/data/load.php?friendlypath=shell...

Friendly 1.0d1 - friendly_path Remote File Inclusion

Friendly 1.0d1 - friendlypath Remote File Inclusion Friendly 1.0d1 friendlypathRemote File Inclusion Vulnerabilities D.Script: http://friendlyphp.org/downloads/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/friendly/core/data/load.php?friendlypath=shell...

Friendly <= 1.0d1 (friendly_path) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= Friendly = 1.0d1 friendlypath Remote File Inclusion Vulnerabilities ======================================================================= Friendly 1.0d1...

Friendly 1.0d1 - 'friendly_path' Remote File Inclusion

Friendly 1.0d1 friendlypathRemote File Inclusion Vulnerabilities D.Script: http://friendlyphp.org/downloads/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/friendly/core/data/load.php?friendlypath=shell Exploit:Path/friendly/core/data/yaml.inc.php?friendlypath=shell...

PMB Services <= 3.0.13 Multiple Remote File Inclusion Vulnerability

No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV68$2007 ----------------------------------------------------------------------------------------- ECHOADV68$2007 PMB Services = 3.0.13 Multiple Remote File Inclusion Vulnerability...

Azucar CMS <= 1.3 (admin/index_sitios.php) File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Azucar CMS +------------------------------------------------------------------------------------------- + Details: + Azucar CMS admin/indexsitios.php uses the include...

CVE-2006-5665

PHP remote file inclusion vulnerability in admin/modulesdata.php in the phpBB module Spider Friendly 1.3.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

EUVD-2006-5650

PHP remote file inclusion vulnerability in admin/modulesdata.php in the phpBB module Spider Friendly 1.3.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5665

This CVE concerns a PHP remote file inclusion in the phpBB module Spider Friendly 1.3.10 and earlier. The vulnerability is in admin/modules_data.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the phpbb_root_path parameter. Affected software is the Spider Frien...