Lucene search
+L

8780 matches found

exploitpack
exploitpack
added 2006/10/04 12:0 a.m.17 views

phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion

phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x -...

0.2AI score
SaveExploits0
0day.today
0day.today
added 2006/10/04 12:0 a.m.30 views

phpBB Admin Topic Action Logging Mod <= 0.94b File Include Vuln

Exploit for unknown platform in category web applications =============================================================== phpBB Admin Topic Action Logging Mod | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging Fo...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/10/04 12:0 a.m.39 views

phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion

/ \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x - 2.0.21 Site: www.spiderz.altervista.org Site02:...

7.5CVSS5.8AI score0.02276EPSS
SaveExploits1
securityvulns
securityvulns
added 2006/09/28 12:0 a.m.113 views

OpenSSH 4.4 is available

OpenSSH 4.4 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100 complete SSH protocol version 1.3, 1.5 and 2.0 implementation and includes sftp client and server support. Once again, we would like to thank the OpenSSH community...

8.3AI score
SaveExploits0
NVD
NVD
added 2006/09/14 10:7 a.m.12 views

CVE-2006-4787

AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained from third party information...

2.1CVSS5.8AI score0.00328EPSS
SaveExploits0References5
CVE
CVE
added 2006/09/14 10:0 a.m.46 views

CVE-2006-4787

AlphaMail before 1.0.16 is affected. The issue stems from the logging functionality which displays unencrypted passwords in an error message, enabling local users to obtain sensitive information. Impact is partial confidentiality loss for logs and any interpolated data. Exploitation is described ...

2.1CVSS6.1AI score0.00328EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2006/09/05 12:0 a.m.26 views

FreeBSD : mailman -- Multiple Vulnerabilities (fffa9257-3c17-11db-86ab-00123ffe8333)

Secunia reports : Mailman can be exploited by malicious people to conduct cross-site scripting and phishing attacks, and cause a DoS Denial of Service. 1 An error in the logging functionality can be exploited to inject a spoofed log message into the error log via a specially crafted URL. Successf...

7.5CVSS6AI score0.06425EPSS
SaveExploits2References6
securityvulns
securityvulns
added 2006/08/08 12:0 a.m.43 views

[UNIX] Liblesstif Local Root &#40;Exploit&#41;

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2006/08/04 12:0 a.m.57 views

CentOS 3 : openssh (CESA-2006:0298)

Updated openssh packages that fix bugs in sshd are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the core files...

7.5CVSS7.1AI score0.05766EPSS
SaveExploits2References5
NVD
NVD
added 2006/07/31 9:4 p.m.27 views

CVE-2006-3120

Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified attack vectors related to the logging functions...

7.5CVSS7.7AI score0.03143EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2006/07/31 9:4 p.m.24 views

CVE-2006-3120

Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified attack vectors related to the logging functions...

7.5CVSS6.2AI score0.03143EPSS
SaveExploits0References1
OSV
OSV
added 2006/07/07 12:5 a.m.7 views

CVE-2006-3413

The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which allows attackers to obtain potentially sensitive information...

5.7AI score
SaveExploits0References5
Cvelist
Cvelist
added 2006/07/07 12:0 a.m.23 views

CVE-2006-3413

The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which allows attackers to obtain potentially sensitive information...

5.7AI score0.01611EPSS
SaveExploits0References4
CVE
CVE
added 2006/07/07 12:0 a.m.52 views

CVE-2006-3413

CVE-2006-3413 affects Privoxy when used with Tor prior to 0.1.1.20 on Apple macOS. The root cause is that the Privoxy configuration can log all data via the logfile, enabling exposure of potentially sensitive information. The Red Hat, Debian, Ubuntu, and OSV entries corroborate the same descripti...

5CVSS5.8AI score0.01611EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2006/06/27 10:13 p.m.21 views

Format string

Format string vulnerability in the CFsyslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file...

4.6CVSS6.9AI score0.00406EPSS
SaveExploits0References9Affected Software2
Cvelist
Cvelist
added 2006/06/27 10:0 p.m.34 views

CVE-2006-1471

Format string vulnerability in the CFsyslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file...

6.9AI score0.00406EPSS
SaveExploits0References9
FreeBSD
FreeBSD
added 2006/06/09 12:0 a.m.36 views

mailman -- Multiple Vulnerabilities

Secunia reports: Mailman can be exploited by malicious people to conduct cross-site scripting and phishing attacks, and cause a DoS Denial of Service. 1 An error in the logging functionality can be exploited to inject a spoofed log message into the error log via a specially crafted URL. Successfu...

6.4AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2006/05/16 12:0 a.m.39 views

Ubuntu 5.04 / 5.10 : mysql-dfsg vulnerability (USN-274-2)

USN-274-1 fixed a logging bypass in the MySQL server. Unfortunately it was determined that the original update was not sufficient to completely fix the vulnerability, thus another update is necessary. We apologize for the inconvenience. For reference, these are the details of the original USN : A...

4.6CVSS7.9AI score0.01347EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2006/05/16 12:0 a.m.11 views

FortressSSH < 0.47 SSH_MSG_KEXINIT Logging Remote Overflow

Binary data 3620.prm...

7.5CVSS7.3AI score0.03178EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2006/05/15 11:38 p.m.58 views

USN-274-2: MySQL vulnerability

USN-274-1 fixed a logging bypass in the MySQL server. Unfortunately it was determined that the original update was not sufficient to completely fix the vulnerability, thus another update is necessary. We apologize for the inconvenience. For reference, these are the details of the original USN: A...

4.6CVSS8AI score0.01347EPSS
SaveExploits1
Rows per page
Query Builder