XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Code Injection

tested and working /str0ke !/usr/bin/perl ilo-- This program is no GPL or has nothing to do with FSF, but some code was ripped from romansoft.. sorry, too lazy! xmlrpc bug by James from GulfTech Security Research. http://pear.php.net/bugs/bug.php?id=4692 xmlrpc drupal exploit, but James sais xoop...

[SA15855] PostNuke XML-RPC Library PHP Code Execution Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

WordPress 1.5.1.2 - xmlrpc Interface SQL Injection

WordPress 1.5.1.2 - xmlrpc Interface SQL Injection !/usr/bin/perl -w sorry for the late posting, had to test it. /str0ke Wordpress 1.5.1.2 Strayhorn // XMLRPC Interface SQL Injection By James Bercegay // http://www.gulftech.org/ // June 21 2005 Quick and dirty proof of concept that uses the XML R...

[Full-disclosure] [DRUPAL-SA-2005-003] Drupal 4.6.2 / 4.5.4 fixes critical XML-RPC issue

---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2005-003 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2005-003 Date: 2005-jun-29 Security risk: highly critical Impact: system...

Microsoft Message Queuing buffer overflow

Buffer overflow in RPC-based protocol...

CVE-2005-0771

VERITAS Backup Exec Server beserver.exe 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106...

XML-RPC for PHP Remote Code Injection Vulnerability

Description XML-RPC for PHP is affected by a remote code-injection vulnerability. An attacker may exploit this issue to execute arbitrary commands or code in the context of the webserver. This may facilitate various attacks, including unauthorized remote access. XML-RPC for PHP 1.1 and prior...

PHP XML-RPC Arbitrary Code Execution

This module exploits an arbitrary code execution flaw discovered in many implementations of the PHP XML-RPC module. This flaw is exploitable through a number of PHP web applications, including but not limited to Drupal, Wordpress, Postnuke, and TikiWiki. Module Options msf use...

CVE-2005-0771: Undefined Security Weakness

VERITAS Backup Exec Server beserver.exe 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106...

CVE-2002-1835: Undefined Security Weakness

The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the device...

[VulnWatch] iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Server Remote Registry Access Vulnerability

Veritas Backup Exec Server Remote Registry Access Vulnerability iDEFENSE Security Advisory 06.23.05 www.idefense.com/application/poi/display?id=269&type=vulnerabilities June 23, 2005 I. BACKGROUND VERITAS Backup Exec is an advanced backup and restore solution for Microsoft Windows server...

CVE-2005-0771

VERITAS Backup Exec Server beserver.exe 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106...

Microsoft Windows - 'SMB' Transaction Response Handling (MS05-011)

/ Windows SMB Client Transaction Response Handling MS05-011 CAN-2005-0045 This works against Win2k cybertronicatgmxdotnet http://www.livejournal.com/users/cybertronic/ usage: gcc -o mssmbpoc mssmbpoc.c ./mssmbpoc connect via \ip and hit the netbios folder! STOP: 0x00000050...

CVE-2005-1792

Memory leak in Windows Management Instrumentation WMI service allows attackers to cause a denial of service memory consumption and crash by creating security contexts more quickly than they can be cleared from the RPC cache...

CVE-2005-1792

Memory leak in Windows Management Instrumentation WMI service allows attackers to cause a denial of service memory consumption and crash by creating security contexts more quickly than they can be cleared from the RPC cache...

CVE-2005-1792

The connected Seebug document confirms CVE-2005-1792 affects Microsoft Windows XP via the WMI service. The vulnerability allows remote attackers to trigger a denial-of-service by causing memory leaks and system unresponsiveness because security contexts are created faster than RPC cache entries c...

CVE-2005-1792: Undefined Security Weakness

Memory leak in Windows Management Instrumentation WMI service allows attackers to cause a denial of service memory consumption and crash by creating security contexts more quickly than they can be cleared from the RPC cache...

msmq_deleteobject_ms05_017.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

postnuke -- multiple vulnerabilities

Postnuke Security Announcementss reports of the following vulnerabilities: missing input validation within /modules/Messages/readpmsg.php possible path disclosure within /user.php possible path disclosure within /modules/News/article.php possible remote code injection within /includes/pnMod.php...

PT-2005-2673 · Postnuke · Postnuke

Name of the Vulnerable Software and Affected Versions: PostNuke versions 0.750 through 0.760RC3 Description: The issue allows remote attackers to obtain sensitive information via direct requests to various files, including theme.php and Xanthia.php in the Xanthia module, multiple files in the...