188 matches found
PHP 4.4.55.2.1 - PHP_binary Session Deserialization Information Leak
PHP 4.4.55.2.1 - PHPbinary Session Deserialization Information Leak ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept...
PHP 5 - 'wddx_deserialize()' String Append Crash
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC "; ? milw0rm.com 2007-03-04...
PHP < 4.4.5 / 5.2.1 php_binary Session Deserialization Information Leak
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
PHP < 4.4.5/5.2.1 - WDDX Session Deserialization Information Leak
A1"; $keys = arraykeys$SESSION; $stackdump = $keys1; echo "Stackdump\n---------\n\n"; for $b=0; $bstrlen$stackdump; $b+=16 printf"...
PHP 4.4.4 - Unserialize() ZVAL Reference Counter Overflow (PoC)
PHP 4.4.4 - Unserialize ZVAL Reference Counter Overflow PoC ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code...
PHP <= 4.4.4 unserialize() ZVAL Reference Counter Overflow Exploit PoC
Exploit for linux platform in category dos / poc ====================================================================== PHP = 4.4.4 unserialize ZVAL Reference Counter Overflow Exploit PoC ====================================================================== ?php...
PHP 4.4.4 - 'Unserialize()' ZVAL Reference Counter Overflow (PoC)
?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...
PHP <= 4.4.4 unserialize() ZVAL Reference Counter Overflow Exploit PoC
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
PHP 4 - Userland ZVAL Reference Counter Overflow (PoC)
PHP 4 - Userland ZVAL Reference Counter Overflow PoC Refcount drops down to 0...
Fedora Core 6 : php-5.1.6-3.1.fc6 (2006-1169)
This update fixes a security vulnerability in PHP. The Hardened-PHP Project discovered an overflow in the PHP htmlentities and htmlspecialchars routines. If a PHP script used the vulnerable functions to parse UTF-8 data, a remote attacker sending a carefully crafted request could trigger the...
Wordpress 2.0.5 Trackback UTF-7 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ Wordpress 2.0.5 Trackback UTF-7 Remote SQL Injection Exploit ============================================================ !/usr/bin/python | || | | | | | | | || || \ | |/ || '|/...
WordPress 2.0.5 - Trackback UTF-7 SQL Injection
WordPress 2.0.5 - Trackback UTF-7 SQL Injection !/usr/bin/python | || | | | | | | | || || \ | |/ || '|/ |/ -| ' \ / -/ |||| /| || / ||||,||| ,|||||||,| || |||||| Proof of concept code from the Hardened-PHP Project NOT FOR DISTRIBUTION PLEASE DO NOT SPREAD THIS CODE -= Wordpress 2.0.5 =-...
Important: Red Hat Security Advisory: php security update
Updated PHP packages that fix a security issue are now available for the Red Hat Application Stack. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. The...
php security update
CentOS Errata and Security Advisory CESA-2006:0730 Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP...
RHEL 2.1 / 3 / 4 : php (RHSA-2006:0730)
Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. The Hardened-PHP Project discovered an...
Advisory 09/2006: PHP unserialize() Array Creation Integer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: PHP unserialize Array Creation Integer Overflow Release Date: 2006/10/09 Last Modified: 2006/10/09 Author: Stefan Esser [email protected] Application: PHP 5 = 5.1.6, PHP...
PHProjekt 5.1 - Multiple Remote File Inclusions
/ + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Script name: PHProjekt v. 5.1 - Script site: http://www.phprojekt.com/ + + + - Find by: Kacper a.k.a Rahim + - Contact: [email protected] - or - http://www.devilteam.yum.pl + + + - Greetz: DragonHeart - and all DEVIL TEAM Members :- + + + ...
FreeBSD : pear-XML_RPC -- remote PHP code injection vulnerability (e65ad1bf-0d8b-11da-90d0-00304823c0d3)
A Hardened-PHP Project Security Advisory reports : When the library parses XMLRPC requests/responses, it constructs a string of PHP code, that is later evaluated. This means any failure to properly handle the construction of this string can result in arbitrary execution of PHP code. This new...
Advisory 01/2006: PHP ext/session HTTP Response Splitting Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: PHP ext/session HTTP Response Splitting Vulnerability Release Date: 2006/01/12 Last Modified: 2006/01/12 Author: Stefan Esser [email protected] Application: PHP5 = 5.1.1...
GLSA-200511-18 : phpSysInfo: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200511-18 phpSysInfo: Multiple vulnerabilities Christopher Kunz from the Hardened-PHP Project discovered that phpSysInfo is vulnerable to local file inclusion, cross-site scripting and a HTTP Response Splitting attacks. Impact : A...