TUTOS 1.3 - cmd.php Remote Command Execution

TUTOS 1.3 - cmd.php Remote Command Execution AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net Script : TUTOS Tested in version 1.3 other versions may also be affected. Download : http://www.tutos.org/homepage/index.html BUG : Command Execution Vulnerability | 3xpl0it4t10n -1- :...

TUTOS 1.3 (cmd.php) Remote Command Execution Vulnerability

Exploit for unknown platform in category web applications ========================================================== TUTOS 1.3 cmd.php Remote Command Execution Vulnerability ========================================================== AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net...

Joomla Component PU Arcade Remote <= 2.1.3 SQL Injection Vuln

No description provided by source. Joomla Component PU Arcade Remote SQL Injection Exploit AUTHOR : HouSSamix of H-T TeaM We are HouSSamix ToXiC350 CoNaN HOME : http://no-hack.net Script : PU Arcade Joomla Component Tested in version 2.0.3 & 2.1.3 Beta Download : http://www.pragmaticutopia.com/...

AGENCY4NET WEBFTP 1 - 'download2.php' File Disclosure

AGENCY4NET WEBFTP 1 download2.php Remote File Disclosure Vulnerability http://sourceforge.net/project/platformdownload.php?groupid=206982 POC : /Script/download2.php?file=../../../../../../../../../../../etc/passwd D0rk : : TrYaG-TeaM Tryag.com/cc, H-T Team , RoMaNcYxHaCkEr , Asb-May's Team...

Tikiwiki 1.9.8.3 tiki-special_chars.php XSS Vulnerability

H - Security Labs Tikiwiki v1.9.8.3 Security Advisory ID : HSEC20072212 General Information -------------------------- Name : Tikiwiki 1.9.8.3 Vendor HomePage :http://tikiwiki.org Platforms : PHP && MySQL Vulnerability Type : Input Validation Error Timeline ------------------------- 17 December...

Falt4 CMS RC4 10.9.2007 Multiple Remote Vulnerabilities

No description provided by source. H - Security Labs Falt4 CMS RC4 10.9.2007 Security Report /Advisory ID : HSEC20071012 General Information -------------------------- Name : Falt4Extreme CMS RC4 10.9.2007 Vendor HomePage :http://sourceforge.net/projects/falt4/ Platforms : PHP && MySQL...

Falt4 CMS rc4 10.9.2007 - Multiple Vulnerabilities

H - Security Labs Falt4 CMS RC4 10.9.2007 Security Report /Advisory ID : HSEC20071012 General Information -------------------------- Name : Falt4Extreme CMS RC4 10.9.2007 Vendor HomePage :http://sourceforge.net/projects/falt4/ Platforms : PHP && MySQL Vulnerability Type : Input Validation Errors...

falt4cms-multi.txt

H - Security Labs Falt4 CMS RC4 10.9.2007 Security Report /Advisory ID : HSEC20071012 General Information -------------------------- Name : Falt4Extreme CMS RC4 10.9.2007 Vendor HomePage :http://sourceforge.net/projects/falt4/ Platforms : PHP && MySQL Vulnerability Type : Input Validation Errors...

CVE-2004-2758

Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a denial of service segmentation fault and process crash, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol...

CVE-2004-2758

CVE-2004-2758 affects Sun SunForum 3.2 and Sun Forum 3D 1.0 via the H.323 protocol implementation. The NVD entry describes multiple unspecified vulnerabilities that allow remote attackers to cause a denial of service (segmentation fault and process crash), demonstrated via the PROTOS test suite f...

Unfixed XSS vulnerability at www-cgi.hrz.tu-darmstadt.de

Security researcher H-GIB, has submitted on 12/02/2007 a cross-site-scripting XSS vulnerability affecting www-cgi.hrz.tu-darmstadt.de, which at the time of submission ranked 20157 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It i...

Unfixed XSS vulnerability at cnsdl.miis.edu

Security researcher BiG-H, has submitted on 12/02/2007 a cross-site-scripting XSS vulnerability affecting cnsdl.miis.edu, which at the time of submission ranked 199287 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is currently...

eggblog-xss.txt

H - Security Labs Eggblog v3.1.0 Security Advisory ID : HSEC20071111 General Information -------------------------- Name : EggBlog v.3.1.0 Vendor HomePage :http://sourceforge.net/projects/eggblog/ Platforms : PHP && MySQL Vulnerability Type : Input Validation Error Timeline...

Eggblog v3.1.0 XSS Vulnerability

H - Security Labs Eggblog v3.1.0 Security Advisory ID : HSEC20071111 General Information -------------------------- Name : EggBlog v.3.1.0 Vendor HomePage :http://sourceforge.net/projects/eggblog/ Platforms : PHP && MySQL Vulnerability Type : Input Validation Error Timeline...

Unfixed XSS vulnerability at www.internetwache.brandenburg.de

Security researcher H-GIB, has submitted on 11/02/2007 a cross-site-scripting XSS vulnerability affecting www.internetwache.brandenburg.de, which at the time of submission ranked 98280 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007...

Unfixed XSS vulnerability at www.control2000.de

Security researcher H-GIB, has submitted on 11/02/2007 a cross-site-scripting XSS vulnerability affecting www.control2000.de, which at the time of submission ranked 425550 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is...

CVE-2002-2266

NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service firewall session table consumption by establishing multiple half-open H.323 sessions, which are not cleaned up on garbage removal and do not time out for 36 hours...

CVE-2002-2266

CVE-2002-2266 affects NetScreen ScreenOS versions 2.8 through 4.0. The issue occurs when forwarding H.323 or Netmeeting traffic, where remote attackers can trigger a denial of service by establishing multiple half‑open H.323 sessions that are not cleaned up and do not time out for 36 hours, leadi...

pwssondages-sql.txt

PwsPHP sondages Module Remote SQL Injection Exploit + Author: d3hydr8 + Original Post: http://darkcode.h1x.com/forum/ + Description: The sql injection for KwsPHP put out by "H-T Team" also works for PwsPHP. + Site: http://pwsphp.com + Dork: Réalisé avec Pwsphp Dork: inurl:/pwsphp/index.php + Sql:...

S21SEC-036-EN Ekiga <= 2.0.5 Denial of service

S21Sec Advisory - Title: Ekiga Denial of Service ID: S21SEC-036-en Severity: Medium - Remote DoS History: 14.May.2007 Vulnerability discovered 09.Jul.2007 Vendor contacted Scope: Application Denial of Service Platforms: Any Author: Jose Miguel Esparza [email protected] URL:...