forum livre 1.0 - SQL Injection / Cross-Site Scripting

Title : Forum Livre 1.0 Multiple Remote Vulnerabilities Author : ajann Contact : : $$ : Free SQL--------------------------------------------------------- Login Before..- http://target/path//infouser.asp?user=SQL Example:...

Apple Mac OSX 10.4.8 - SLP Daemon Service Registration Buffer Overflow (PoC)

!/usr/bin/ruby c Copyright 2006 Lance M. Havok Kevin Finisterre All pwnage reserved. Proof of concept for MOAB-17-01-2007 http://projects.info-pull.com/moab/MOAB-17-01-2007.html Originally reported to Apple by Kevin, on 08/02/2006. require 'socket' targetpath = ARGV0 || '/var/run/slpipc' slpsocke...

UBUNTU-CVE-2007-0255

XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain M3U file that contains a long EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017...

Information disclosure

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATHINFO begins with 1 AbfrageForm or 2 EingabeForm, allows remote attackers to cause a denial of service daemon crash via multiple requests containing many /../ sequences in the Name parameter. NOTE: The provenance of this information is...

Application Enhancer (APE) 2.0.2 - Local Privilege Escalation

Application Enhancer APE 2.0.2 - Local Privilege Escalation !/usr/bin/ruby Exploit Of The Apes: A practical pwnage for Application UNEnhancer aka APU c 2006 LMH and Johnny Pwnerseed. This goes dedicated to macdev. For the childish flaming and great brain lag. Lesson: Don't talk about stuff you ha...

CVE-2006-6728

Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to cause a denial of service application crash or transmit spam via unspecified vectors...

CVE-2006-6728

Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to cause a denial of service application crash or transmit spam via unspecified vectors...

CVE-2006-6728

CVE-2006-6728 describes an unspecified vulnerability in the info request mechanism of LAN Messenger prior to 1.5.1.2. The flaw allows remote attackers to cause a denial of service (application crash) or to transmit spam via unspecified vectors. Documents consistently cite the same description acr...

PT-2006-7153 · Phorum · Phorum

Name of the Vulnerable Software and Affected Versions: Phorum versions 3.2.11 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the db file parameter. Recommendations: For Phorum versions 3.2.11 and earlier, at the moment, there is ...

KDE JPEG KFile Info插件EXIF本地拒绝服务漏洞

JPEG kfile-info插件用于多个KDE应用程序显示图象META信息。 JPEG kfile-info插件在解析图象META信息时存在问题，本地攻击者可以利用漏洞对使用此插件的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 KDE KDE 3.5.5 KDE KDE 3.5.4 KDE KDE 3.5.3 KDE KDE 3.5.2 KDE KDE 3.5 KDE KDE 3.4.3 - Gentoo Linux KDE KDE 3.4.2 KDE KDE 3.4.1 + RedHat Fedora Core4 KDE KDE 3.4 KDE KDE 3.4 KDE KD...

ecomkit1.txt

vendor site:http://www.sitesoutlet.com/ product:E-commerce Kit 1 PayPal Edition bug:injection sql risk:medium injection sql : http://site.com/PATH/catalogue.asp?keyword='sql http://site.com/PATH/catalogue.asp?cid='sql http://site.com/PATH//viewDetail.asp?pid='sql laurent gaffié & benjamin mossé...

[Full-disclosure] Lotus Notes pre-login User.ID key leak

Hello, We have coordinated a vuln disclosure with IBM Lotus Notes security for today, relating to an info leak issue with Lotus Notes where it is possible to: 1. Retrieve User.ID keyfiles, without entering a valid passphrase as is normally required 2. Validate existing Lotus Notes users login nam...

On the Windows System to achieve the DDOS attack-vulnerability warning-the black bar safety net

First said we used to attack the client and server method of configuration, using the moment the most famous of REDHAT LINUX for testing, the present attack test I'm using FEDORA CORE3, the software is the most famousDDOSattack tool TFN2K LINUX Edition, is to attack the WINDOWS Server system is...

D-Link DSL-G624T - Information Disclosure

source: https://www.securityfocus.com/bid/20689/info D-Link DSL-G624T devices are prone to a remote information-disclosure vulnerability because the devices fail to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attackers to gain access to potentially...

CVE-2006-5316

registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat...

PT-2006-5897 · Mozilla · Firefox

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox affected versions not specified Description: A stack-based buffer overflow issue in Mozilla Firefox allows remote attackers to potentially execute arbitrary code via unspecified vectors involving JavaScript. However, the...

CVE-2006-4880

David Bennett PHP-Post PHPp 1.0 and earlier allows remote attackers to obtain sensitive information via a direct request for 1 footer.php, 2 template.php, or 3 lastvisit.php, which reveals the installation path in various error messages...

J. River Media Center 11.0.309 - Remote Denial of Service (PoC)

!/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a dos exploit.As we know the port always changes for the UPnP...

Muratsoft Haber Portal 3.6 - 'tr' SQL Injection

Muratsoft Haber Portal v3.6 tr SQL Injection Vulnerability Author : ASIANEAGLE Site : www.asianeagle.org Contact: [email protected] Link : http://www.aspindir.com/Goster/4350 Demo Portal : http://www.muratsoft.com/haber/www/ Price of Portal: 300YTL // Good money for Bad Script Exploit :...

PowerZip 7.06.38950 - 'Filename Handling' Local Buffer Overflow

/ PowerZip 7.06 Exploit by bratax http://www.bratax.be/ Just a quick one as I was able to reuse most of my zipcentral eploit code.. Greetz to everyone I like...special greetz to mobbie and DT as they were sad I didn't mention them the previous time :p Some technical info: - Original advisory +...