CVE-2006-5902

viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GMAILFS: 13;a;1 message with a new filename and a file attachment, which injects a new file into the filesystem; 2 a GMAILFS:...

CVE-2006-5902

The CVE-2006-5902 issue affects the viksoe GMail Drive shell extension. The vulnerability allows remote attackers to perform virtual filesystem actions by sending specially crafted e-mail messages with certain subject lines (e.g., GMAILFS: [13;a;1], which can inject a new file; GMAILFS: [13;a;1] ...

CVE-2006-5902: Undefined Security Weakness

viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GMAILFS: 13;a;1 message with a new filename and a file attachment, which injects a new file into the filesystem; 2 a GMAILFS:...

CVE-2006-5903: Undefined Security Weakness

Rahul Jonna Gmail File Space GSpace allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GSPACE "2174|1|1|1|gs:/ d$" message, which injects a new file into the filesystem; and 2 a GSPACE "|-135|1|1|0|gs:/ d$" message,...

ArticleBeach Script 2.0 - 'index.php' Remote File Inclusion

------------------------------------------------------------------------------ ArticleBeach Script = 2.0 page Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Author : Zeni Susanto a.k.a Bithedz Date Found : October, 22th 2006...

adv45-K-159-2006.txt

ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

LBlog <= "comments.asp" SQL Injection Exploit

LBlog = "comments.asp" SQL Injection Exploit - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] Googledork | Powered By LBlog - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Usage :...

TSEP <= 0.942 (colorswitch.php) Remote Inclusion Vulnerability

No description provided by source. Script: TSEP = 0.942 URL: www.tsep.info Discovered: beford xbefordx gmail com Comments: "registerglobals" must be enabled duh. document.this != http://www.milw0rm.com/exploits/2098 Vulnerable Files/Code:...

os-x/ppc sync, reboot 32 bytes

os-x/ppc sync, reboot 32 bytes. Shellcode exploit for osxppc platform / MacOSX/PowerPC Shellcode for: sync, reboot 32 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / include include char shellcode = "\x7c\x63\x1a\x79" "\x39\x40\x01\x06" "\x38\x0a\xff\x1e" "\x44\xff\xff\x02"...

Gmail File System Detection (deprecated)

Binary data 3342.prm...

gmailXSSinject.txt

------=Part28477486378.1135858452675 Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: base64 Content-Disposition: inline IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIwpH TWFpbFNpdGUgdmFyaWFibGUgQ3Jvc3MtU2l0ZSBTY3JpcHRpbmcgYW5kIHNjcmlwdCBpbmplY3...

gmailbug.txt

Gmail Bug - INTRODUCTION This bug has already been corrected, that's why it's been published. In this manual you will see step by step how to exploit Gmail's vulnerability, that gave you access to any account, reported by Anelkaos, colaborator of elhacker.net's forum and patched by Google by...

froogleCookie.txt

The flaw which was discovered by Nir Goldshlagger and was tested many times. hey this is Cross site Scripting In Froogle And its leads to steal the cookie in gmail if you send this link to the Victim in gmail email: when he click this link you steal is cookie in gmail And Even if the victim does...

lostmonGmail.txt

Date: Sat, 20 Nov 2004 03:37:04 +0100 From: Lostmon Subject: multiples vulnerabilities in gmail service XSS, Denial of Service, Denial of service On gmail account vendor url: http://gmail.google.com/ vendor notified:yes exploit included :yes original advisore:http://lostmon.spymac.net/blog/ wen a...

GFHost PHP GMail Remote Command Execution Exploit

No description provided by source. GFHost explo Spawn bash style Shell with webserver uid Greetz SPAX, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my @results; my $probe; my @U; $U1 =...

GFHost PHP GMail - Remote Command Execution

GFHost PHP GMail - Remote Command Execution GFHost explo Spawn bash style Shell with webserver uid Greetz SPAX, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my @results; my $probe; my @U; $U1 =...

gmailSurf.txt

Anonymous Surfing Via Gmail Login Window - Poor Sanitization User can do anonymous surfing apart form other cool tricks from Gmail login window. The window is small, still checking your mails via google is phun. : 1. Open https://gmail.google.com/?dest=http%3A%2F%2Fblablabla. 2. The login window...