Cahier de texte 2.2 - Bypass General Access Protection

'Administrateur' header"Location: ../index.php"; ; else header"Location: ../index.php";? ... / if!isset$GET'host' || empty$GET'host' headers; if!isset$GET'wanted' $wanted = 'index.php'; $host = $GET'host'; $prox = $GET'prox'; $path = $GET'path'; echo...

CVE-2006-6206

SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2006-6206

CVE-2006-6206 affects WarHound General Shopping Cart, where an SQL injection vulnerability exists in item.asp via the ItemID parameter. The underlying issue allows remote attackers to execute arbitrary SQL commands. Documentation provides no explicit patch/version or mitigation steps; exploitatio...

CVE-2006-6206

SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

aria-general.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: General Shopping Cart Method: SQL Injection Vendor:http://warhound.com PoC: http://target/item.asp?ItemID=SQL Injection Contact: [email protected]...

traceroute Local Root Exploit

No description provided by source. / MasterSecuritY www.mastersecurity.fr openwall.c - Local root exploit in LBNL traceroute Copyright C 2000 Michel "MaXX" Kaempf [email protected] Updated versions of this exploit and the corresponding advisory will be made available at:...

phpBBXS2.txt

SolpotCrew Community phpBB XS 2 spain version phpbbrootpath Remote File Inclusion Download : http://www.elanzuelo.es/phpbb.tar.gz Bug Found By :Solpot a.k.a k. Hasibuan 28-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-10.txt Greetz: choi , h4ntu ,...

DEBIAN-CVE-2006-5051

Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free...

CVE-2006-3442

Unspecified vulnerability in Pragmatic General Multicast PGM in Microsoft Windows XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted multicast message...

Microsoft Windows XP Pragmatic General Multicast memory corruption

Memory corruption on parsing multicast PGM message if Microsoft Message Queuing Services MSMQ service is installed...

MS06-052: Vulnerability in Pragmatic General Multicast (PGM) Could Allow Remote Code Execution (919007)

The remote version of Windows is affected by a vulnerability in the Pragmatic General Multicast protocol installed with the MSMQ service. An attacker may exploit this flaw to execute arbitrary code on the remote host with KERNEL privileges. C Tenable Network Security, Inc. include"compat.inc"; if...

X11R6 6.4 XKEYBOARD (sco x86) - Local Buffer Overflow

X11R6 6.4 XKEYBOARD sco x86 - Local Buffer Overflow / X11R6 XKEYBOARD extension Strcmp for SCO UnixWare 7.1.3 x86 Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...

X11R6 6.4 XKEYBOARD (SolarisSPARC) - Local Buffer Overflow (1)

X11R6 6.4 XKEYBOARD SolarisSPARC - Local Buffer Overflow 1 / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 SPARC Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public Licen...

X11R6 < 6.4 XKEYBOARD (sco x86) - Local Buffer Overflow

/ X11R6 XKEYBOARD extension Strcmp for SCO UnixWare 7.1.3 x86 Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either versi...

X11R6 < 6.4 XKEYBOARD (solaris x86) - Local Buffer Overflow

/ X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 x86 Copyright 2006 RISE Security , / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 x86 Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms...

X11R6 < 6.4 XKEYBOARD (Solaris/SPARC) - Local Buffer Overflow (1)

/ X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 SPARC Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...

Cisco MARS &lt; 4.2.1 remote compromise

Cisco MARS Monitoring, Analysis and Response System, sometimes referred to as CS-MARS prior to version 4.2.1 ships with an unprotected JBoss installation which ultimately leads to a complete compromise of the device. The caveat here is that, despite much work on Cisco's part, they were not able t...

PHPClassifieds General

PHPClassifieds General v.n/a Homepage: http://www.phpclassifieds.info/ Affected files: search.php Posting classified ads ----------------------------------------- SQL injection on search.php via rate var: http://www.example.com/search.php?rate=sql ----------------------------------------- XSS vul...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service crash from null dereference via 1 multiple vectors in H.248, and the 2 X.509if, 3 SRVLOC, 4 H.245, 5 AIM, and 6 general packet dissectors; and 7 the statistics counter...

Apple Mac OSX Safari 2.0.3 (417.9.2) - Multiple Vulnerabilities

Tested on: Mac OS X 10.4.5 using Safari 03/16/2006 Security-Protocols.com Advisory: http://www.security-protocols.com/advisory/sp-xxx This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2, 1991 as published by the Free...