282 matches found
PT-2008-4013 · Cre Loaded · Cre Loaded
Name of the Vulnerable Software and Affected Versions: CRE Loaded versions 6.2.13.1 and earlier Description: The issue is related to the handling of cookies over HTTPS. Specifically, the software does not set the "Secure" attribute for cookies sent over HTTPS, which could allow remote attackers t...
VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit
Exploit for linux platform in category remote exploits ================================================== VHCS http://acid-root.new.fr/ email protected Exploit: + Logged in Administrator + The administrator has 2 resellers / Changing dareseller's password / Trying to connect as dareseller:thatpwn...
PHP Perl Extension - Safe_mode Bypass
PHP Perl Extension - Safemode Bypass "; $perl-eval"system'".$GET'cmd'."'"; echo "/textarea"; $GET'cmd'=htmlspecialchars$GET'cmd'; echo "CMD: " ? milw0rm.com 2007-08-25...
PHP <= 5.2.0 (php_win32sti) Local Buffer Overflow PoC (win32)
No description provided by source. ?php // ================================================================================== // // phpwin32sti.dll PHP = 5.2.0 win32 Buffer Overflow // // x Discovery: boecke [email protected] // x Risk: Local Buffer Overflow Medium - High Risk //...
Remote Memory Read in Diskeeper 9 - 2007
Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function that is remotely, anonymously...
Diskeeper 9 - Remote Memory Disclosure
Diskeeper 9 - Remote Memory Disclosure / Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison...
Mozilla Foundation Security Advisory 2007-26
Mozilla Foundation Security Advisory 2007-26 Title: Privilege escalation through chrome-loaded about:blank windows Impact: Moderate Announced: July 30, 2007 Reporter: mozbugra4 Products: Firefox 2.0.0.5, Thunderbird 2.0.0.5, SeaMonkey 1.1.3 Fixed in: Firefox 2.0.0.6 Thunderbird 2.0.0.6 Thunderbir...
PHP php_gd2.dll imagepsloadfont Local Buffer Overflow PoC
No description provided by source. ?php / PHP imagepsloadfont Buffer Overflow Vulnerability Discovered Coded by: r0ut3r writ3r at gmail.com Vulnerable dll: phpgd2.dll - Tested on WinXP SP0, PHP/5.2.3, Apache 2.2.4 The argument given was A 9999 Access violation when reading 41414151...
PHP 5.2.3 bz2 com_print_typeinfo() Denial of Service Exploit
No description provided by source. ?php //PHP 5.2.3 bz2 comprinttypeinfo Remote DoS Exploit //author: shinnai //mail: shinnaiatautisticidotorg //site: http://shinnai.altervista.org //Tested on xp sp2, worked both from the cli and on apache //Bug discovered with "Footzo" thanks to rgod. //...
PHP 5.2.3 - 'bz2 com_print_typeinfo()' Denial of Service
milw0rm.com 2007-07-12...
esser-php.txt
?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...
PHP 4.4.6 crack_opendict() local buffer overflow poc exploit
?php //PHP 4.4.6 crackopendict local buffer overflow poc exploit //win2k sp3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"crack" die"you need the crack extension loaded."; $scode= "xebx1b". "x5b". "x31xc0"...
PHP 4.4.6 cpdf_open() Local Source Code Discslosure PoC
Exploit for multiple platform in category local exploits ======================================================= PHP 4.4.6 cpdfopen Local Source Code Discslosure PoC ======================================================= ?php / PHP 4.4.6 cpdfopen source code disclosure poc by rgod site:...
PHP 4.4.6 crack_opendict() Local Buffer Overflow Exploit PoC
No description provided by source. ?php //PHP 4.4.6 crackopendict local buffer overflow poc exploit //win2k sp3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"crack" die"you need the crack extension loaded.";...
PHP 4.4.55.2.1 - shmop Local Code Execution
PHP 4.4.55.2.1 - shmop Local Code Execution ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the...
Hardcoded credentials
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...
CVE-2006-0478
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...
CVE-2006-0478
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...
CVE-2006-0478
CRE Loaded 6.15 is affected by CVE-2006-0478, where remote attackers can perform privileged actions—including uploading and creating arbitrary files—by sending a direct request to files.php. The vulnerability’s root cause is described through the vendor’s note that a patch exists to close the iss...
[SA18648] CRE Loaded "files.php" File Upload Security Issue
TITLE: CRE Loaded "files.php" File Upload Security Issue SECUNIA ADVISORY ID: SA18648 VERIFY ADVISORY: http://secunia.com/advisories/18648/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: CRE Loaded 6.x http://secunia.com/product/7173/ DESCRIPTION: kaneda has discover...