7043 matches found
solaris/x86 portbind/tcp shellcode generator
Exploit for solaris/x86 platform in category shellcode ============================================ solaris/x86 portbind/tcp shellcode generator ============================================ \n\n"; function win32bind$port if$port 65535 || $port 4100 echo "Erreur Port\nSelect a port between 4100 an...
solaris/x86 portbind/tcp shellcode generator
solaris/x86 portbind/tcp shellcode generator. Shellcode exploit for solarisx86 platform http://www.shell-storm.org/shellcode/ / function syntax echo "\nSyntax:\nroot@laptop:/ php ./payload.php \n\n"; function win32bind$port if$port 65535 || $port 4100 echo "Erreur Port\nSelect a port between 4100...
Random number generator and input name linebreaks can be used to send custom data to other sites – Opera Security Advisories
Random number generator and input name linebreaks can be used to send custom data to other sites – Opera Security Advisories OPCOM Team | June 10, 2009 Severity Moderately severe Problem description Input names can contain line breaks when data is sent using POST. Suitable use of the random numbe...
Random number generator and input name linebreaks can be used to send custom data to other sites
Input names can contain line breaks when data is sent using POST. Suitable use of the random number generator can reveal predictable boundaries that will be used when sending the POST data. These can be combined to add extra boundaries into the data, containing payloads that may confuse the...
Podcast Generator多个模块文件包含和任意文件删除漏洞
BugCVE: CVE-2009-1230 CVE-2008-1124 CVE-2008-1125 BUGTRAQ: 34317 28038 Podcast Generator的core/archivecat.php、core/admin/itunescategories.php和core /admin/login.php页面没有正确地过滤对GLOBALSabsoluteurl参数所传送的输入，core/themes.php页面没有正确地过滤对GLOBALSthemepath参数所传送的输入，这可能用于包含本地或外部资源的任意文件；此外core/admin...
Podcast Generator 1.2 Re-Installation
$file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1. blocks all 'amilogged' REQUEST variables,what about GLOBALS?,therefore useless! 2. if 'amilogged' isn't true - exit function activated. 3. unlink...
Podcast Generator <= 1.2 unauthorized Re-Installation Remote Exploit
No description provided by source. ?php Podcast Generator = 1.2 unauthorized CMS Re-Installation Remote Exploit by staker -------------------------------------- mail: stakerathotmaildotit url: http://podcastgen.sourceforge.net -------------------------------------- it works with registerglobals=o...
Podcast Generator 1.2 File Inclusion / Deletion
++ | Podcast Generator RFI | | | magicquotesgpc=off -- LFI | +-------------------------+-----------------------------------------------------------+ | delete.php?GLOBALSamilogged=true&file&GLOBALSabsoluteurl= | | admin.php?p=admin&GLOBALSabsoluteurl= | |...
Podcast Generator 1.2 - Unauthorized Re-Installation
$file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1. blocks all 'amilogged' REQUEST variables,what about GLOBALS?,therefore useless! 2. if 'amilogged' isn't true - exit function activated. 3. unlink...
Podcast Generator 1.2 - Unauthorized Re-Installation
Podcast Generator 1.2 - Unauthorized Re-Installation $file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1. blocks all 'amilogged' REQUEST variables,what about GLOBALS?,therefore useless! 2. if...
Podcast Generator <= 1.2 unauthorized Re-Installation Remote Exploit
Exploit for unknown platform in category web applications ==================================================================== Podcast Generator $file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1...
Podcast Generator 1.2 - GLOBALS[] Multiple Vulnerabilities
Podcast Generator 1.2 - GLOBALS Multiple Vulnerabilities ++ | Podcast Generator RFI | | | magicquotesgpc=off -- LFI | +-------------------------+-----------------------------------------------------------+ | delete.php?GLOBALSamilogged=true&file&GLOBALSabsoluteurl= | |...
Podcast Generator <= 1.2 GLOBALS[] Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== Podcast Generator RFI | | | magicquotesgpc=off -- LFI | +-------------------------+-----------------------------------------------------------+ |...
Podcast Generator <= 1.2 GLOBALS[] Multiple Remote Vulnerabilities
No description provided by source. ++ | Podcast Generator = 1.2 GLOBALS Multiple Remote Vulnerabilities | ++ | by staker - stakerathotmaildotit / http://zeroidentity.org | ++ +-------------------------------------------------------------------------------------+ | Remote/Local Arbitrary File...
Podcast Generator 1.2 - 'GLOBALS[]' Multiple Vulnerabilities
++ | Podcast Generator RFI | | | magicquotesgpc=off -- LFI | +-------------------------+-----------------------------------------------------------+ | delete.php?GLOBALSamilogged=true&file&GLOBALSabsoluteurl= | | admin.php?p=admin&GLOBALSabsoluteurl= | |...
Unfixed XSS vulnerability at jugendschutzprogramm.de
Security researcher Hanno Boeck, has submitted on 23/05/2009 a cross-site-scripting XSS vulnerability affecting jugendschutzprogramm.de, which at the time of submission ranked 465971 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2010. I...
symfony 1.2.6: Security fix
In accordance with our security policy, we are releasing today symfony 1.2.6 to fix a security issue that has been spotted by the symfony core team. This post contains the description of the vulnerability and the description of the changes we have made to fix it. The affected symfony versions are...
CentOS 4 : kernel (CESA-2007:0939)
Updated kernel packages that fix various security issues in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel is the core of the operating system. These updated kernel...
Podcast Generator 'core/admin/delete.php' Arbitrary File Deletion Vulnerability
Podcast Generator is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in the context of the webserver. Successful attacks may aid in launching further attacks. Podcast Generator 1.1 is vulnerable; prior versions may also be affected. OpenVAS Vulnerabili...
Podcast Generator Detection (HTTP)
HTTP based detection for Podcast Generator. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...