FreeBSD : gallery2 -- multiple vulnerabilities (9b718b82-8ef5-11dc-8e42-001c2514716c)

Gallery project reports : Gallery 2.2.3 addresses the following security vulnerabilities : - Unauthorized renaming of items possible with WebDAV reported by Merrick Manalastas - Unauthorized modification and retrieval of item properties possible with WebDAV - Unauthorized locking and replacing of...

CVE-2007-5740

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

Format string

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

CVE-2007-5740

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

CVE-2007-5740

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

CVE-2007-5740

CVE-2007-5740 affects Perdition, a IMAP proxy component; the vulnerability is a format string error in Perdition’s IMAP output handling (IMAPD) that could allow an unauthenticated remote attacker to execute arbitrary code. Impact: remote code execution on the Perdition server via a specially craf...

BBPortalS 2.0 - Blind SQL Injection

BBPortalS BBsProcesS Remote Blind SQL Injection Exploit Bug Found And Write By Max007 Exploit Tested On V.1.5.10 And V.1.6.2 And 1.5.11 info:For The Version BBPortalS 2.0 name of field is user and password but you have to find name of table !/usr/bin/perl use LWP::UserAgent; $err=1; $www = new...

Apache Tomcat WebDav directory traversal

It's possible to retrieve file by aboslute path with LOCK DAV request...

PHP 5.2.4 ionCube - ioncube_read_file Safe Mode Disable Functions Bypass

PHP 5.2.4 ionCube - ioncubereadfile Safe Mode Disable Functions Bypass ionCube output:"; echo $MyBootioncube; ? milw0rm.com 2007-10-11...

PHP 5.2.4 ionCube extension safe_mode / disable_functions Bypass

Exploit for unknown platform in category local exploits ================================================================ PHP 5.2.4 ionCube extension safemode / disablefunctions Bypass ================================================================ ionCub...

CVE-2004-2711

Multiple buffer overflows in Gyach Enhanced Gyach-E before 1.0.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "avatar retrieval."...

waraxe-2007-SA052.txt

waraxe-2007-SA052 - dBlog CMS Open Source database retrieval ==================================================================== Author: Janek Vind "waraxe" Date: 19. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-52.html Target software description:...

KwsPHP 1.0 Member_Space Module - SQL Injection

!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $User = $ARGV1; $passwd = $ARGV2; $url = "http://".$host; $port = "80"; print q Script....................: KwsPHP v1.0 MemberSpace Module Script Site...............: http://kws.koogar.org/ Vulnerability.............: Remote SQ...

Wordpress Multiple Versions Pwnpress Exploitation Tookit

No description provided by source. !/usr/bin/env ruby .---. .---. : : o : happy antiblogging, dear kids! ..-: 0 : :-.. / .-'' ' ---' ---' " -. Copyright c Lance M. Havok .' " ' " . " . ' " . lmh at info-pull.com : '.---.,,.,...,.,.,.,..---. ' ; . " . .' " .' ----- All rights reserved. &nbsp...

wordpress -- remote sql injection vulnerability

Alexander Concha reports: While testing WordPress, it has been discovered a SQL Injection vulnerability that allows an attacker to retrieve remotely any user credentials from a vulnerable site, this bug is caused because of early database escaping and the lack of validation in query string like...

[SECURITY] Fedora 7 Update: fetchmail-6.3.7-2.fc7

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

[SECURITY] Fedora Core 6 Update: fetchmail-6.3.6-3.fc6

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

Prozilla Webring Website Script - category.php?cat SQL Injection

Prozilla Webring Website Script - category.php?cat SQL Injection --==+================================================================================+==-- --== Prozilla Webring Website Script SQL Injection Vulnerbility +==--...

OpenSSL cryptographic vulnerability

Montgomery multiplication for elleptic cryptography is not applied in BNfrommontgomery functions, making it possible to retrieve RSA private key of different user...

finger NSE Script

Attempts to retrieve a list of usernames using the finger service. Example Usage nmap -sV -sC Script Output PORT STATE SERVICE 79/tcp open finger | finger: | Welcome to Linux version 2.6.31.12-0.2-default at linux-pb94.site ! | 01:14am up 18:54, 4 users, load average: 0.14, 0.08, 0.01 | | Login...