9518 matches found
MySQL 4.1 < 4.1.24 MyISAM Create Table Privilege Check Bypass
The version of MySQL installed on the remote host reportedly allows a local user to circumvent privileges through creation of MyISAM tables using the 'DATA DIRECTORY' and 'INDEX DIRECTORY' options to overwrite existing table files in the application's data directory. C Tenable Network Security,...
[SECURITY] Fedora 8 Update: xine-lib-1.1.11.1-1.fc8
This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...
EasyNews 40tr - SQL Injection Cross-Site Scripting Local File Inclusion
EasyNews 40tr - SQL Injection Cross-Site Scripting Local File Inclusion !/usr/bin/perl EasyNews-40tr Multiple Remote Vulnerabilities SQL Injection Exploit/XSS/LFI Discovered by : IRCRASH By Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...
Nuked-Klan <= 1.7.6 Multiple Vulnerabilities Exploit
?php / Name: Nuked-Klan = 1.7.6 Multiple Vulnerabilities Exploit Credits: Charles "real" F. charlesfolathotmail.fr URL: http://realn.free.fr/releases/46556 Date: 04-01-08 - Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec vulnerability used in this exploit was...
PHP Classifieds 6.20 - Multiple Cross-Site Scripting Authentication Bypass Vulnerabilities
PHP Classifieds 6.20 - Multiple Cross-Site Scripting Authentication Bypass Vulnerabilities source: https://www.securityfocus.com/bid/28521/info PHP Classifieds is prone to multiple cross-site scripting vulnerabilities and an authentication-bypass vulnerability. An attacker may leverage these issu...
Linksys WRT54G (firmware 1.00.9) Security Bypass Vulnerabilities
Exploit for hardware platform in category remote exploits ================================================================ Linksys WRT54G firmware 1.00.9 Security Bypass Vulnerabilities ================================================================ regurgitated by: meathive url: kinqpinz.info ;...
[SECURITY] Fedora 8 Update: xine-lib-1.1.11-1.fc8
This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...
mdaemon-overflow.txt
!/usr/bin/python MDAEMON POST AUTH REMOTE R00T IMAP FETCH COMMAND UNIVERSAL EXPLOIT 0day Bug discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : MDaemon IMAP server v9.6.4 Tested on OS : Windows 2000 SP4 English Windows XP Sp2...
Apache Tomcat's default security policy is too open
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by...
MS08-017: Description of the security update for BizTalk Server Office Web Components: March 11, 2008
A security vulnerability exists in the Microsoft BizTalk Server Office Web Components that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.INTRODUCTIONMicrosoft has released security bulletin MS08-017. The security bulletin...
[SECURITY] Fedora 7 Update: lighttpd-1.4.18-3.fc7
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
Fedora 7 : cacti-0.8.7b-1.fc7 (2008-1737)
XSS vulnerabilities Path disclosure vulnerabilities SQL injection vulnerabilities HTTP response splitting vulnerabilities bug0000855: Unnecessary and faulty DEF generation for CF:AVERAGE bug0001083: Small visual fix for Cacti in 'View Cacti Log File' bug0001089: Graph xport modification to...
CVE-2008-0787: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the optionsdisablesmilies parameter to private.php...
[SECURITY] Fedora 7 Update: xine-lib-1.1.10.1-1.fc7
This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...
[SECURITY] Fedora 8 Update: xine-lib-1.1.10.1-1.fc8
This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...
wpmu-exec.txt
Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to execute arbitrary PHP / includeonce './class-snoopy.php'; // Fix Snoopy class SnoopyExt extends Snoopy function...
WordPress MU < 1.3.2 - 'active_plugins' Code Execution
Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to execute arbitrary PHP / includeonce './class-snoopy.php'; // Fix Snoopy class SnoopyExt extends Snoopy function...
Wordpress MU < 1.3.2 active_plugins option Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= Wordpress MU Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins optio...
Wordpress MU < 1.3.2 active_plugins option Code Execution Exploit
No description provided by source. ?php / WordPress MU blog's options overwrite Credits : Alexander Concha alex at buayacorp dot com Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to...
CVE-2008-0546: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in CandyPress CP 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the 1 idProduct and 2 options parameters to a ajax/ajaxoptInventory.asp, or the 2 recid parameter to b ajax/ajaxgetBrands.asp...