openSUSE 10 Security Update : mono-core (mono-core-2373)

By appending spaces to URLs and attackers could download the source code of scripts that normally get executed by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mono-core-2373...

eGov Content Manager Cross Site Scripting Vulrnability

HSC eGov Content Manager Cross Site Scripting Vulrnability The eGov Manager was designed to simplify the efforts of government staffers who are responsible for posting public documents, news updates, events, managing staff directories and online services. This issue is due to a failure in the...

LinkedIn Toolbar 3.0.2.1098 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== LinkedIn Toolbar 3.0.2.1098 Remote Buffer Overflow Exploit ========================================================== In God We Trust, VDA Labs, LLC function repeatn,c retval=""; fo...

LinkedIn Toolbar 3.0.2.1098 - Remote Buffer Overflow

LinkedIn Toolbar 3.0.2.1098 - Remote Buffer Overflow In God We Trust, VDA Labs, LLC function repeatn,c retval=""; for i=0;i milw0rm.com 2007-07-24...

[Full-disclosure] IPSwitch WS_FTP Logging Server Remote Denial of Service -- a VDA Labs, LLC discovery

IPSwitch WSFTP Logging Server Remote Denial of Service ------------------------------------------------ Version: 7.5.29.0 Logsrv.exe Overview -------- The WS FTP logging server is a daemon that listens on UDP port 5151 and is shipped with WS FTP and by default is turned on and used by the local W...

http://marmarahosting.org/infinity.txt

"Infinity Solutions LLC" e/description.asp sql injection Credit : CodeXpLoder'tq mail : codexploderathotmaildotcom site : Biyosecurity.net,expw0rm.com thx : BiyoSecurityTeam spec.note : "Live The Life" 1- example.com/patch/description.asp?id=sql methot 1- example.com/e/description.asp?id=sql meth...

gis-mdb.txt

Found By: Hasadya Raed Contact : [email protected] Greetz : Guardian Information Systems ----------------------- Script :PortalApp ==bypass Download :www.portalapp.net Dork:"Copyright @2007 Iatek LLC" or "powered by PortalApp" or"Copyright @2007 Iatek LLC powered by PortalApp"...

ByPass In PortalApp

Found By: Hasadya Raed Contact : [email protected] Greetz : Guardian Information Systems ----------------------- Script :PortalApp ==bypass Download :www.portalapp.net Dork:"Copyright @2007 Iatek LLC" or "powered by PortalApp" or"Copyright @2007 Iatek LLC powered by PortalApp"...

Linux Kernel 2.6.x - AppleTalk ATalk_Sum_SKB Function Denial of Service

source: https://www.securityfocus.com/bid/23376/info The Linux kernel is prone to a denial-of-service vulnerability. This issue presents itself when malformed AppleTalk frames are processed. An attacker can exploit this issue to crash host computers, effectively denying service to legitimate user...

Frontbase 4.2.7 - (Authenticated) Remote Buffer Overflow (2.2)

Frontbase 4.2.7 - Authenticated Remote Buffer Overflow 2.2 / Dreatica-FXP crew ---------------------------------------- Target : Frontbase = 4.2.7 for Windows Site : http://www.frontbase.com Found by : Netragard, L.L.C Advisory ---------------------------------------- Exploit : Frontbase = 4.2.7...

Cadre PHP Framework Remote File Include Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV63$2007 ------------------------------------------------------------------------------------ ECHOADV63$2007 Cadre remote file inclusion...

[ECHO_ADV_63$2007] Cadre remote file inclusion

ECHOADV63$2007 Cadre remote file inclusion ----------------------------------------------- Author : Ahmad Muammar W.K a.k.a y3dips Date Found : January, 31st 2007 Location : Indonesia, Jakarta web : http://echo.or.id/adv/adv63-y3dips-2007.txt Critical Lvl : Critical...

Cadre PHP Framework - Remote File Inclusion

Cadre PHP Framework - Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV63$2007 ------------------------------------------------------------------------------------ ECHOADV63$2007 Cadre remote file inclusion...

Cadre PHP Framework Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================== Cadre PHP Framework Remote File Include Vulnerability ===================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / /...

Application Enhancer (APE) 2.0.2 Local Privilege Escalation Exploit

No description provided by source. !/usr/bin/ruby Exploit Of The Apes: A practical pwnage for Application UNEnhancer aka APU c 2006 LMH lmh at info-pull.com and Johnny Pwnerseed. This goes dedicated to macdev. For the childish flaming and great brain lag. Lesson: Don't talk about stuff you have N...

Shop-Script.txt

Vendor: Shop-Script a division of WebAsyst LLC Application: Shop-Script www.shop-script.com I. Descriptions: Shop-Script is a PHP based shopping cart. Multiple links of shop-script are vulnerable to a new form of application attack technique called HTTP Response splitting aka CRLF Injection. HTTP...

Multiple HTTP response splitting vulnerabilities in SHOP-SCRIPT

Vendor: Shop-Script a division of WebAsyst LLC Application: Shop-Script www.shop-script.com I. Descriptions: Shop-Script is a PHP based shopping cart. Multiple links of shop-script are vulnerable to a new form of application attack technique called HTTP Response splitting aka CRLF Injection. HTTP...

NVIDIA Display Driver for Unix systems vulnerable to buffer overflow

Overview A vulnerability in the NVIDIA Display Driver for Unix systems may allow a remote attacker to execute code on a vulnerable system. Description The NVIDIA Display Driver for Unix systems provides access to the display adapter's accelerated features on supported systems, and includes a modu...

SSA-18705 sudo upgrade fixes a potential vulnerability

New sudo packages are available to fix a security problem which may allow users to become root, or to execute arbitrary code as root. Heres's the information from the Slackware 8.0 ChangeLog: ---------------------------- Thu Apr 25 12:00:50 PDT 2002 patches/packages/sudo.tgz: Upgraded to...

FreeBSD : ethereal -- multiple protocol dissectors vulnerabilities (cb470368-94d2-11d9-a9e0-0001020eed82)

An Ethreal Security Advisories reports : Issues have been discovered in the following protocol dissectors : - Matevz Pustisek discovered a buffer overflow in the Etheric dissector. CVE: CAN-2005-0704 - The GPRS-LLC dissector could crash if the 'ignore cipher bit' option was enabled. CVE:...