Apache Tomcat's default security policy is too open

The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by...

Invision Power Board 2.3.5 - SQL Injection

?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB = 2.3.5 sql injection exploit // Version 1.0 // written by Janek Vind "waraxe" // Estonia, Tartu // http://www.waraxe.us/...

Be careful Baidu blog rss leak your blog secrets-the vulnerability warning-the black bar safety net

If you apply for a Baidu blog, then in Settings-Display Options-article display options for full-text or summary, then you want to hide the articles through the rss to be seen. For the time being the solution is: Settings--Display Options--article display options to the title, so bad intentions o...

FreeBSD Security Advisory (FreeBSD-SA-04:06.ipv6.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:06.ipv6.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Invision Power Board <= 2.3.5 Multiple Vulnerabilities Exploit (revised)

Exploit for unknown platform in category web applications ======================================================================== Invision Power Board mhead; Gimme your args $this-pattack = $this-getp'attack', true; $this-pprox = $this-getp'proxhost'; $this-pproxa = $this-getp'proxauth';...

Security Best Practice: Familiarize Yourself with the Packet Sanity Protection

The Packet Sanity protection performs several Layer 3 and Layer 4 sanity checks. These include verifying packet size, UDP and TCP header lengths, dropping IP options and verifying the TCP flags.Numerous types of attacks may be hidden in fragmented packets...

Joomla! Component EZ Store Remote - Blind SQL Injection

!/usr/bin/perl Note:Sometimes you have to change the regexp to viewcategory/catid,".$cid." use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Joomla Component EZ Store Blind SQL Injection Exploit \n"; print " Author:His0k4 ALGERIAN HaCkeR \n"; print " \n"; print "...

mojoclassifieds-sql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " MojoClassifieds Blind SQL Injection Exploit \n"; print " mojoClassified.cgi mojo \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected] \n"; print " \n"; print " -::...

CVE-2008-3210

rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service daemon crash via a SIP 1 INVITE or 2 OPTIONS message with a long domain name in a request URI, which triggers an assert error...

[SECURITY] Fedora 8 Update: cairo-dock-1.6.1.1-1.fc8.1

An light eye-candy fully themable animated dock for any Linux desktop. It has a family-likeness with OSX dock, but with more options...

CVE-2008-3210: Improper Input Validation

rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service daemon crash via a SIP 1 INVITE or 2 OPTIONS message with a long domain name in a request URI, which triggers an assert error...

Oracle Weblogic Apache Connector POST Request Buffer Overflow

This module exploits a stack based buffer overflow in the BEA Weblogic Apache plugin. The connector fails to properly handle specially crafted HTTP POST requests, resulting a buffer overflow due to the insecure usage of sprintf. Currently, this module works over Windows systems without DEP, and h...

USN-624-1: PCRE vulnerability

Tavis Ormandy discovered that the PCRE library did not correctly handle certain in-pattern options. An attacker could cause applications linked against pcre3 to crash, leading to a denial of service...

FreeBSD -- DNS cache poisoning

Problem Description: The BIND DNS implementation does not randomize the UDP source port when doing remote queries, and the query id alone does not provide adequate randomization. Impact: The lack of source port randomization reduces the amount of data the attacker needs to guess in order to...

MS Windows Malformed IP Options DoS Exploit (MS05-019)

No description provided by source. / ecl-winipdos.c - 16/04/05 Yuri Gushin [email protected] Alex Behar [email protected] This one was actually interesting, an off-by-one by our beloved M$ : When processing an IP packet with an option size 2nd byte after the option of 39, it will crash - sinc...

Mambo Component Articles (artid) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Mambo Component Articles artid Blind SQL Injection Exploit ============================================================ !/usr/bin/perl use LWP::UserAgent; use Getopt::Long;...

Mambo Component Articles - 'artid' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambo Component Articles Blind SQL Injection Exploit \n"; print " Author:Ded MustD!e www.antichat.ru \n"; print " \n"; print " Dork : inurl:option=articles artid \n"; print " Usage: perl exploit.pl ho...

Comparison Engine Power 1.0 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= Comparison Engine Power 1.0 Blind SQL Injection Exploit ======================================================= !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "...

Comparison Engine Power 1.0 - Blind SQL Injection

Comparison Engine Power 1.0 - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " Comparison Engine Power 1.0 Blind SQL Injection Exploit \n"; print " \n";...

DIY (index_topic did ) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== DIY indextopic did Blind SQL Injection Exploit ================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA...