302 matches found
VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit
Exploit for linux platform in category remote exploits ================================================== VHCS http://acid-root.new.fr/ email protected Exploit: + Logged in Administrator + The administrator has 2 resellers / Changing dareseller's password / Trying to connect as dareseller:thatpwn...
PHP Perl Extension - Safe_mode Bypass
PHP Perl Extension - Safemode Bypass "; $perl-eval"system'".$GET'cmd'."'"; echo "/textarea"; $GET'cmd'=htmlspecialchars$GET'cmd'; echo "CMD: " ? milw0rm.com 2007-08-25...
PHP <= 5.2.0 (php_win32sti) Local Buffer Overflow PoC (win32)
No description provided by source. ?php // ================================================================================== // // phpwin32sti.dll PHP = 5.2.0 win32 Buffer Overflow // // x Discovery: boecke [email protected] // x Risk: Local Buffer Overflow Medium - High Risk //...
Remote Memory Read in Diskeeper 9 - 2007
Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function that is remotely, anonymously...
Diskeeper 9 - Remote Memory Disclosure
Diskeeper 9 - Remote Memory Disclosure / Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison...
Mozilla Foundation Security Advisory 2007-26
Mozilla Foundation Security Advisory 2007-26 Title: Privilege escalation through chrome-loaded about:blank windows Impact: Moderate Announced: July 30, 2007 Reporter: mozbugra4 Products: Firefox 2.0.0.5, Thunderbird 2.0.0.5, SeaMonkey 1.1.3 Fixed in: Firefox 2.0.0.6 Thunderbird 2.0.0.6 Thunderbir...
PHP php_gd2.dll imagepsloadfont Local Buffer Overflow PoC
No description provided by source. ?php / PHP imagepsloadfont Buffer Overflow Vulnerability Discovered Coded by: r0ut3r writ3r at gmail.com Vulnerable dll: phpgd2.dll - Tested on WinXP SP0, PHP/5.2.3, Apache 2.2.4 The argument given was A 9999 Access violation when reading 41414151...
PHP 5.2.3 bz2 com_print_typeinfo() Denial of Service Exploit
No description provided by source. ?php //PHP 5.2.3 bz2 comprinttypeinfo Remote DoS Exploit //author: shinnai //mail: shinnaiatautisticidotorg //site: http://shinnai.altervista.org //Tested on xp sp2, worked both from the cli and on apache //Bug discovered with "Footzo" thanks to rgod. //...
PHP 5.2.3 - 'bz2 com_print_typeinfo()' Denial of Service
milw0rm.com 2007-07-12...
PHP 4.4.6 crack_opendict() local buffer overflow poc exploit
?php //PHP 4.4.6 crackopendict local buffer overflow poc exploit //win2k sp3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"crack" die"you need the crack extension loaded."; $scode= "xebx1b". "x5b". "x31xc0"...
esser-php.txt
?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...
PHP 4.4.6 cpdf_open() Local Source Code Discslosure PoC
Exploit for multiple platform in category local exploits ======================================================= PHP 4.4.6 cpdfopen Local Source Code Discslosure PoC ======================================================= ?php / PHP 4.4.6 cpdfopen source code disclosure poc by rgod site:...
PHP 4.4.6 crack_opendict() Local Buffer Overflow Exploit PoC
No description provided by source. ?php //PHP 4.4.6 crackopendict local buffer overflow poc exploit //win2k sp3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"crack" die"you need the crack extension loaded.";...
PHP 4.4.55.2.1 - shmop Local Code Execution
PHP 4.4.55.2.1 - shmop Local Code Execution ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the...
Hardcoded credentials
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...
CVE-2006-0478
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...
CVE-2006-0478
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...
CVE-2006-0478
CRE Loaded 6.15 is affected by CVE-2006-0478, where remote attackers can perform privileged actions—including uploading and creating arbitrary files—by sending a direct request to files.php. The vulnerability’s root cause is described through the vendor’s note that a patch exists to close the iss...
CVE-2006-0478: Undefined Security Weakness
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...
[SA18648] CRE Loaded "files.php" File Upload Security Issue
TITLE: CRE Loaded "files.php" File Upload Security Issue SECUNIA ADVISORY ID: SA18648 VERIFY ADVISORY: http://secunia.com/advisories/18648/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: CRE Loaded 6.x http://secunia.com/product/7173/ DESCRIPTION: kaneda has discover...