Simploo CMS 1.7.1 - PHP Code Execution

Simploo CMS 1.7.1 - PHP Code Execution Simploo CMS Community Edition - Remote PHP Code Execution Issue Details ============= Product: Simploo CMS Community Edition Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.simploo.de/ Advisory-Status: published Credits =============...

[MajorSecurity SA-080]WordPress 3.0.1 - Cross Site Scripting Issue

MajorSecurity SA-080WordPress 3.0.1 - Cross Site Scripting Issue Details ============= Product: WordPress 3.0.1 Security-Risk: low Remote-Exploit: yes Vendor-URL: http://www.wordpress.org/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz of MajorSecurity Affected...

netkar-PRO 1.1 - Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/39555/info netkar-PRO is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check messages before copying them to an insufficiently sized memory buffer. Successful exploits can allow remote attackers to execute...

BigAnt Server 2.52 - Remote Overflow (SEH)

!/usr/bin/python import socket, sys BigAnt version 2.52 0day Tested on XPSP2 & Win2k3 SP2 Discovered by Lincoln Thanks to muts & remote-exploit 650 or so bytes available after seh, easier to jump back root@BT4VM: ./bigant.py 192.168.87.130 Exploit sent! Connect to remote host on port 4444...

PBBoard <=2.0.2 Full Path Disclosure

No description provided by source. AdvisoryPBBoard =2.0.2 - Full Path Disclosure Details ======= Product: PHP = PBBoard Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.pbboard.com Credits ============ Discovered by: rUnViRuS site: http://www.sec-area.com Affected Products:...

PBBoard <=2.0.2 - XSS in Topic

No description provided by source. Sec-Area Advisorypbboard =2.0.2 - XSS in Topic Details ======= Product: PHP = PBBoard Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.pbboard.com Credits ============ Discovered by: rUnViRuS site: http://www.sec-area.com Affected Products:...

PBBoard 2.0.2 xss

No description provided by source. Sec-Area Advisorypbboard =2.0.2 - XSS in Topic Details ======= Product: PHP = PBBoard Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.pbboard.com Credits ============ Discovered by: rUnViRuS site: http://www.sec-area.com Affected Products:...

PBBoard 2.0.2 Cross Site Scripting

Sec-Area Advisorypbboard Back to forums You will find the code works -------------------------------------------- World Defacers Team http://www.Sec-area.com --------------------------------------------...

PBBoard 2.0.2 - Full Path Disclosure

AdvisoryPBBoard GET as $sqlget if eregi"select", $sqlget or eregi"union", $sqlget or eregi"%", $sqlget $this-error'?? ¨¹??? ± ?´±?¹?!'; ================ ================ 2. Full Path Disclosure ----------------------------------- allow attackers to gather the real path of the server side script...

[MajorSecurity Advisory #55]moziloCMS - Directory Traversal, Cross Site Scripting and Session Fixation Issues

MajorSecurity Advisory 55moziloCMS - Directory Traversal, Cross Site Scripting and Session Fixation Issues Details ======= Product: moziloCMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://cms.mozilo.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovere...

ConPresso CMS 4.07 Session Fixation / XSS

HACKATTACK Advisory 25012009ConPresso CMS 4.07 - Session Fixation, XFS, XSS Details Product: ConPresso CMS 4.07 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.conpresso.de/ Vendor-Status: informed Advisory-Status: not yet published Credits Discovered by: David Vieira-Kurz...

[Backports-security-announce] Security update for roundcube

Hi, Ive just uploaded new roundcube packages to etch-backports fixing the security issues listed below. Please note that these are remote exploitable issues and an upgrade is highly recommended. Fix a vulnerability in quota image generation. This fixes CVE-2008-5620. Thanks to Nico Golde for...

TISA2008-01.txt

==================================================================================== Team Intell Security Advisory TISA2008-01 ------------------------------------------------------------------------------------ Linksys WRT54 GL - Session riding CSRF...

eXV2.de Browser Cookie is not properly sanitised

Details ======= Product: eXV2.de CMS = 2.0.5. Severity: moderated Remote-Exploit: yes Vendor-URL: http://www.exv2.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Vision aka n-tier http://www.i-s-o.org Original Advisory: ============...

[MajorSecurity Advisory #46]Plogger - Session fixation Issue

MajorSecurity Advisory 46Plogger - Session fixation Issue Details ======= Product: Plogger Remote-Exploit: yes Vendor-URL: http://www.plogger.org Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz http://www.majorsecurity.de Original Advisory:...

[MajorSecurity Advisory #40]onelook oboShop - Session fixation Issue

MajorSecurity Advisory 40onelook oboShop - Session fixation Issue Details ======= Product: oboShop Remote-Exploit: yes Vendor-URL: http://www.onebyone.ch/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz http://www.majorsecurity.de Original...

[MajorSecurity Advisory #28]ConPresso CMS - Multiple Cross Site Scripting and SQL Injection Issues

MajorSecurity Advisory 28ConPresso CMS - Multiple XSS and SQL Injection Issues Details ======= Product: ConPresso CMS Affected Version: =4.0.4a Immune Version: 4.0.5a Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.conpresso.com/ Vendor-Status: informed Advisory-Status:...

mdaemon-user-py.txt

!/usr/bin/python import sys import struct import socket from time import sleep MDaemon Pre Authentication USER Heap Overflow Code based on Leon Juranic's exploit Coded by muts - [email protected] http://www.hackingdefined.com http://www.remote-exploit.org Tested on: Mdaemon 9.0.5 Mdaemon 7.2....

DEBIAN-CVE-2006-3630

Multiple off-by-one errors in Wireshark aka Ethereal 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the 1 NCP NMAS and 2 NDPS dissectors...

FreeBSD : libxine -- DVD subpicture decoder heap overflow (131bd7c4-64a3-11d9-829a-000a95bc6fae)

A xine security announcement states : A heap overflow has been found in the DVD subpicture decoder of xine-lib. This can be used for a remote heap overflow exploit, which can, on some systems, lead to or help in executing malicious code with the permissions of the user running a xine-lib based...