51 matches found
Meeting Cliff Stoll
Today I had the chance to meet the man who unintentionally invented the modern digital forensics practice, Cliff Stoll. In 1989 he published a book about his 1986-87 detection and response against KGB-backed spies who hacked his lab and hundreds of government, military, and university computers. ...
DEBIAN-CVE-2015-1192
Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted archive...
CVE-2015-1192
Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted archive...
CVE-2015-1192
Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted archive...
Path traversal
Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted archive...
CVE-2015-1192
Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted archive...
UBUNTU-CVE-2015-1192
Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted archive...
CVE-2015-1192
CVE-2015-1192 pertains to the kgb 1.0b4 package and describes an absolute path traversal vulnerability. The issue allows remote attackers to write to arbitrary files by supplying a crafted archive containing a full path, enabling potential unauthorized file writes on affected systems. The initial...
KGB <= 1.9 (sesskglogadmin.php) Local File Include Exploit
No description provided by source...
KGB <= 1.9 Remote Code Execution Exploit
No description provided by source. ? //Kacper & str0ke Settings $exploitname = "KGB = 1.9 Remote Code Execution Exploit"; $scriptname = "KGB 1.9"; $scriptsite = "http://www.kgb.xs.com.pl/index.php?tri=2"; $dork = 'inurl:"kgb19"'; // print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+:...
CVE-2007-0337
Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the skinnn parameter, as demonstrated by invoking kg.php with a postek parameter containing PHP code, which is injected into a fi...
Directory traversal
Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the skinnn parameter, as demonstrated by invoking kg.php with a postek parameter containing PHP code, which is injected into a fi...
EUVD-2007-0339
Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the skinnn parameter, as demonstrated by invoking kg.php with a postek parameter containing PHP code, which is injected into a fi...
CVE-2007-0337
CVE-2007-0337 describes a directory traversal in KGB 1.9 and earlier where sesskglogadmin.php can include and execute arbitrary local files via a .. in the skinnn parameter. The attack path involves invoking kg.php with a postek parameter containing PHP code, which is injected into a file in the ...
CVE-2007-0337
Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the skinnn parameter, as demonstrated by invoking kg.php with a postek parameter containing PHP code, which is injected into a fi...
KGB Sesskglogadmin.PHP本地文件包含漏洞
KGB是一款基于PHP的WEB应用程序。 KGB不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB进程权限查看系统文件内容。 问题是'Sesskglogadmin.PHP'脚本对用户提交的'skinnn'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB进程权限查看系统文件内容。 KGB 1.9 目前没有解决方案提供： http://www.kgb.xs.com.pl/ http://www.sebug.net/show-exp-949.html...
KGB <= 1.9 (sesskglogadmin.php) Local File Include Exploit
No description provided by source. ? //Kacper & str0ke Settings $exploitname = "KGB = 1.9 Remote Code Execution Exploit"; $scriptname = "KGB 1.9"; $scriptsite = "http://www.kgb.xs.com.pl/index.php?tri=2"; $dork = 'inurl:"kgb19"'; // print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+:...
kgb19-lfi.txt
? //Kacper & str0ke Settings $exploitname = "KGB = 1.9 Remote Code Execution Exploit"; $scriptname = "KGB 1.9"; $scriptsite = "http://www.kgb.xs.com.pl/index.php?tri=2"; $dork = 'inurl:"kgb19"'; // print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:...
KGB 1.9 - sesskglogadmin.php Local File Inclusion
KGB 1.9 - sesskglogadmin.php Local File Inclusion ? //Kacper & str0ke Settings $exploitname = "KGB = 1.9 Remote Code Execution Exploit"; $scriptname = "KGB 1.9"; $scriptsite = "http://www.kgb.xs.com.pl/index.php?tri=2"; $dork = 'inurl:"kgb19"'; // print ' ::::::::: :::::::::: ::: ::: :::::::::::...
KGB <= 1.9 (sesskglogadmin.php) Local File Include Exploit
Exploit for unknown platform in category web applications ========================================================== KGB = 1.9 sesskglogadmin.php Local File Include Exploit ========================================================== ? //Kacper & str0ke Settings $exploitname = "KGB = 1.9 Remote Cod...