Jamroom 3.3.5 - Remote File Inclusion

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : CMS Jamroom Version: 3.3.5 Discovered By : Cyberlog Scripts site : http://www.jamroom.net/ Download Script : http://www.jamroom.net/index.php?m=tddownload&o=download&fileid=43 Thanks To :...

[Full-disclosure] Opera - heap based buffer overflow (CVE-2007-6521)

============================================ ||| Security Advisory AKLINK-SA-2008-006 ||| ||| CVE-2007-6521 CVE candidate ||| ============================================ Opera - heap-based buffer overflow ================================== Date released: 28.05.2007 Date reported: 05.10.2007...

Xomol CMS 1.2 - Authentication Bypass / Local File Inclusion

'/ -.- -------------oOO------OOo------------ | Xomol CMS v1 Login Bypass & LFI | | coded by DNX | ---------------------------------------- ! Discovered.: DNX ! Vendor.....: http://www.xomol.net ! Detected...: 12.05.2008 ! Reported...: 13.05.2008 didn't work: host mail.xomol.net said: 554 5.7.1 -...

New release of MySQL fixes security bugs

MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure...

New release of MySQL fixes security bugs

MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table...

Ktools Photostore 3.5.2 - Multiple SQL Injections

'/ -.- -------------------------oOO------OOo------------------------- | Ktools Photostore = v3.5.2 crumbs.php Remote SQL Injection | | works only with magic quotes = off | | coded by DNX | ----------------------------------------------------------------- ! Discovered.: DNX ! Vendor.....:...

Admidio 1.4.8 (getfile.php) Remote File Disclosure Vulnerability

No description provided by source. /---------------------------------------------------------------\ + + + Admidio 1.4.8 Remote File Disclosure + + + ---------------------------------------------------------------/ Author : n3v3rh00d, http://forum.antichat.ru Download :...

onecms25-sql.txt

!/usr/bin/perl OneCMS 2.5 Remote Blind SQL Injection Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Usage : perl oc.pl site There's many other bugs, find them yourself use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; $ua =...

RHEL 4 / 5 : firefox (RHSA-2008:0222)

Updated firefox packages that fix a security bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A flaw was found in the processing of...

phpBB Add-on Fishing Cat Portal Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ============================================================= phpBB Add-on Fishing Cat Portal Remote File Inclusion Exploit ============================================================= Fishing Cat Portal Addon functionsportal.php Remote...

LokiCMS <= 0.3.3 Remote Command Execution Exploit

No description provided by source. Author: GiReX mySite: girex.altervista.org Date: 8/04/08 CMS: LokiCMS = 0.3.3 Site: lokicms.com Bug: PHP Code Injection Exploit: Remote Command Execution Vuln Code: admin.php if $GET'default' != '' // User want's to set the default page writeconfig$cpassword,...

CVE-2008-1489

Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...

CenterIM 4.22.3 - Remote Command Execution

CenterIM 4.22.3 - Remote Command Execution Application: CenterIM http://www.centerim.org/index.php/MainPage Versions: centerim = 4.22.3 OS: Linux Bug: Execution of shell commands Exploit: remote Date: 15 March 2008 Author: Brian Fonfara w00 eMail: [email protected] Web: newb.kicks-ass.net 1 Bu...

KAPhotoservice (album.asp) Remote SQL Injection Exploit

No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ KAPhotoservice album.asp Remote SQL Injection Exploit +==-- --==+====================================================================================+==-- + JosS +...

Home FTP Server 1.4.5 Remote Denial of Service Exploit

No description provided by source. Discovered by 0in from DaRk-CodeRs Programming & Security Group Contact: 0indotemailatgmaildotcom Thats a very funny bug, and nobody understand how it works; When we send a python FTP retrlines function bad command and create a new connection server got DoS... o...

Security: some HVM domain can access another domain memory.

Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for movtorr, which allows a VTi domain to read memory of other domains...

Centreon <= 1.4.2.3 (index.php) Remote File Disclosure

Info: Software: Centreon = 1.4.2.3 HomePage: http://www.centreon.com Exploit: Remote File Disclosure High Where: include/doc/index.php Bug Found By: Jose Luis Gуngora Fernбndez|JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Spanish Hackers Team SHT + Bug In...

Unfixed XSS vulnerability at www.whatsmyip.org

Security researcher quangntenemy, has submitted on 28/02/2008 a cross-site-scripting XSS vulnerability affecting www.whatsmyip.org, which at the time of submission ranked 26760 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is...

CVE-2008-0553

Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk Tcl/Tk before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484...

MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass

!/usr/bin/python Exploit for the MOINDID cookie Bug MoinMoin 1.5.x Find your patch in : http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630 Bug and exploit coded by just a nonroot and colombian user Enero 21 de 2008 Greets: el directorio and all the SL community import urllib2,sys print "MoinMoin host:...