OpenBSD 4.2 - rtlabel_id2name() Local Null Pointer Dereference Denial of Service

OpenBSD 4.2 - rtlabelid2name Local Null Pointer Dereference Denial of Service / OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $...

Citrix NetScaler Generic_API_Call.PL跨站脚本漏洞

Citrix NetScaler是一款安全易用的Web应用交付解决方案。 Citrix NetScaler GenericAPICall.PL不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行跨站脚本攻击，获得目标用户敏感信息。 问题是由于'GenericAPICall.PL'脚本对用户提交的'standalone'参数缺少过滤，提交恶意脚本代码作为参数数据，并诱使用户处理，可导致获得目标用户敏感信息，或未授权访问应用程序。 Citrix NetScaler 8.0 build 47.8 目前没有详细解决方案提供：...

CVE-2007-5137: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-4302: Undefined Security Weakness

Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit GSWTK allow local users to defeat system call interposition and possibly gain privileges or bypass auditing...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

CVE-2007-3773

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

CVE-2007-3773

CVE-2007-3773 involves a CSRF flaw in the Email-Template module of a Generic YouTube Clone Script. The vulnerability enables remote attackers to cause administrators to upload files with arbitrary types to templates/emails/. The documents confirm the affected component (Email-Template module) and...

CVE-2007-3773: Improper Control of Generation of Code

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 datumVonDatumBis.inc.php, 2 footer.inc.php, 3 header.inc.php, and 4 stylesheets.php in templates/; and 5 wochenuebersicht.inc.php, 6...

CVE-2007-2156

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 datumVonDatumBis.inc.php, 2 footer.inc.php, 3 header.inc.php, and 4 stylesheets.php in templates/; and 5 wochenuebersicht.inc.php, 6...

CVE-2007-2156

Summary of CVE-2007-2156 (initial document): Rezervi Generic 0.9 contains multiple PHP remote file inclusion vulnerabilities. An attacker can trigger PHP code execution by supplying a URL in the root parameter to various scripts under templates/ (datumVonDatumBis.inc.php, footer.inc.php, header.i...

CVE-2007-2156

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 datumVonDatumBis.inc.php, 2 footer.inc.php, 3 header.inc.php, and 4 stylesheets.php in templates/; and 5 wochenuebersicht.inc.php, 6...

EUVD-2007-2151

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 datumVonDatumBis.inc.php, 2 footer.inc.php, 3 header.inc.php, and 4 stylesheets.php in templates/; and 5 wochenuebersicht.inc.php, 6...

CVE-2007-2156: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 datumVonDatumBis.inc.php, 2 footer.inc.php, 3 header.inc.php, and 4 stylesheets.php in templates/; and 5 wochenuebersicht.inc.php, 6...

Rezervi Generic 0.9(root)Remote File Include Vulnerablities

Rezervi Generic 0.9rootRemote File Include Vulnerablities D.Script: http://www.rezervi.com/www/german/download/rezerviGenericV09.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/templates/datumVonDatumBis.inc.php?root=Shell...

PHP-Generics 1.0.0 Beta - Multiple Remote File Inclusions

PHP-Generics 1.0.0 Beta - Multiple Remote File Inclusions -------------------------------------------------------- php-generics 1.0 Remote File Inclusion Vulnerabilities -------------------------------------------------------- Software: php-generics 1.0Beta Vendor:...

Linux SCSI devices unauthorized access

pam module problem allows console users to access generic SCSI and pseudo-SCSI devices directly...

phpgenlib-rfi.txt

Exp coding : X-Turk web app : PhP Generic library & framework includepath Remote File Include Exploit My Site : Worldhackerz.net Thanx : Madconfig , H0tturk , Pala , Darkworm , Batty , Akrep , Str0ke , And Al Worldhackerz.net Team Users $rfi = "membres/membreManager.php?includepath="; $path = "/"...

CVE-2007-0584

PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm g-neric allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2007-0584

PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm g-neric allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...