Kure 0.6.3 - 'index.php' Local File Inclusion

Kure 0.6.3 index.php post,doc Local File Inclusion Vulnerability url: http://code.google.com/p/kure/downloads/list Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

kernel: fix off-by-one error in iov_iter_advance()

Off-by-one error in the ioviteradvance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service system crash via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Lin...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.0. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

phpabook-lfi.txt

phpAbook ... 61: if isset$HTTPCOOKIEVARS"userInfo" && $HTTPCOOKIEVARS"userInfo" != "" $userArray = explode" ", $HTTPCOOKIEVARS"userInfo"; $userName = $userArray0; $userID = $userArray1; $userLang = $userArray2; include"include/lang/$userLang/inc.messages.php"; 67: x: INCLUDE exploit:...

FOSS Gallery Public <= 1.0 Arbitrary Upload / Information c99 Expoit

No description provided by source. FOSS Gallery Public = 1.0 Arbitrary Upload / Information c99 Expoit url: http://downloads.sourceforge.net/fossgallery/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educationa...

phpAbook <= 0.8.8b (COOKIE) Local File Inclusion Vulnerability

No description provided by source. phpAbook = 0.8.8b COOKIE Local File Inclusion Vulnerability url: http://sourceforge.net/projects/phpabook/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. U...

libpng off-by-one vulnerability

Overview A vulnerability exists in libpng that may allow a remote attacker to cause a denial of service. Description A vulnerability in the way libpng handles files that contain multiple zTXt chunks may cause a denial of service. This vulnerability is due to an off-by-one error introduced in the...

nonamecms-sql.txt

Author: !DoktOR! Date found: 30.09.08 Product: NonameCMS Version: 1.0 URL: noname-cms.org Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

BMForum 5.6 (tagname) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== BMForum 5.6 tagname Remote SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

BMForum 5.6 - tagname SQL Injection

BMForum 5.6 - tagname SQL Injection Author: !DoktOR! Date found: 30.09.08 Product: BMForum Version: 5.6 URL: www.bmforum.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit:...

Noname CMS 1.0 - Multiple SQL Injections

Noname CMS 1.0 - Multiple SQL Injections Author: !DoktOR! Date found: 30.09.08 Product: NonameCMS Version: 1.0 URL: noname-cms.org Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

bmforum-sql.txt

Author: !DoktOR! Date found: 30.09.08 Product: BMForum Version: 5.6 URL: www.bmforum.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit:...

USN-648-1: nasm vulnerability

Philipp Thomas discovered that the ppscan function of nasm contained an off-by-one error. If a user or automated system were tricked into assembling a specially crafted ASM file, a remote attacker could execute arbitrary commands with user privileges...

joovili30-sql.txt

Joovili = 3.0 SQL Injection Vulnerability Author: !DoktOR! Date found: 27.08.08 Product: Joovili Version: 3.0 Price: $155 URL: www.joovili.com Download script: http://rapidshare.com/files/96178834/Joovili.Patch.3.0.12.Themes.WST.rar.html Vulnerability Class: SQL Injection Condition: magicquotesgp...

Joovili 3.0 - Multiple SQL Injections

Joovili 3.0 - Multiple SQL Injections Joovili = 3.0 SQL Injection Vulnerability Author: !DoktOR! Date found: 27.08.08 Product: Joovili Version: 3.0 Price: $155 URL: www.joovili.com Download script: http://rapidshare.com/files/96178834/Joovili.Patch.3.0.12.Themes.WST.rar.html Vulnerability Class:...

Joovili <= 3.0 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== Joovili Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 Joovili = 3.0 SQL...

PromoteWeb MySQL - 'id' SQL Injection

=================================================================== PromoteWeb MySQL go.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Gentoo Security Advisory GLSA 200710-28 (qt)

The remote host is missing updates announced in advisory GLSA 200710-28. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200710-28 (qt)

The remote host is missing updates announced in advisory GLSA 200710-28. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-4116

CVE-2008-4116 concerns Apple QuickTime 7.5.5 and iTunes 8.0. The vulnerability is a heap-based buffer overflow triggered by a long type attribute in a QuickTime tag (on a web page or embedded in .mp4/.mov), related to an off-by-one error and potentially associated with Check_stack_cookie. Consequ...