CoronaMatrix phpAddressBook 2.0 - 'username' Cross-Site Scripting Vulnerability

CoronaMatrix phpAddressBook 2.0 'username' Cross Site Scripting Vulnerability. CVE-2008-6646. Webapps exploit for php platform source: http://www.securityfocus.com/bid/29005/info phpAddressBook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied...

Axis IP cameras crossite scripting

It's possible to spoof video content by using crossite scripting attacks...

SisfoKampus - dwoprn.php Arbitrary File Download

SisfoKampus - dwoprn.php Arbitrary File Download source: https://www.securityfocus.com/bid/25617/info Sisfo Kampus is prone to an arbitrary-file-download vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to download...

Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow

Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow source: https://www.securityfocus.com/bid/25437/info Media Player Classic is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data. Attackers may attempt to exploit this issue...

JVN#48566866 ColdFusion error page cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected ColdFusion MX 6.X ColdFusion MX 7.X For more information, refer to the vendor's website...

enemies-of-carlotta mailing list processor shell characters

Shell characters problem on e-mail address parsing...

MS Windows Wkssvc NetrJoinDomain2 Stack Overflow Exploit (MS06-070)

No description provided by source. / Microsoft Windows Wkssvc NetrJoinDomain2 Stack OverflowMS06-070 Exploit by cocoruderfrankruderathotmail.com,2006.11.15 page:http://ruder.cdut.net/default.asp Code fixed by S A Stevens - 17.11.2006 - changed shellcode, Changed code to correct jmp EBX address an...

Moodle Blog 1.18.2.2/1.6.2 Module - SQL Injection

source: https://www.securityfocus.com/bid/20395/info Moodle is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities ...

cPanel OpenBaseDir Bypass

Hey when you try to run a phpshell and open BaseDir is on you will se that: Open base dir: /home//:/usr/lib/php:/usr/local/lib/php:/tmp Okey.. now run the phpshell with user like that: http://server..com//phpshell.php you will see that: Open base dir: OFF not secure...

With a batch of home batch write hung it to the code-vulnerability warning-the black bar safety net

Author: nerve-wracking Previously in online found a batch of home added to the hanging horse generation to horse software,you have the idea with the batch to achieve this functionality Today I learned the point of the batch,just came up with,not so perfect,or then again...later in the modified Us...

phpBB 2.0.17 remote avatar size bug

Title: phpBB remote avatar size bug Software: phpBB 2.0.17 and maybe prior versions Discovered by: David Sopas Ferreira david at systemsecure dot org Original link: http://www.systemsecure.org/ssforum/viewtopic.php?t=272 » Email from phpBB « Your report "Avatar size" has been closed because your...

NETFile FTP/Web Server Directory Traversal Arbitrary File Access

The version of NETFile FTP/Web server installed on the remote host is prone to directory traversal attacks. Specifically, an attacker can create directories outside the server's folder path with a specially crafted URL. The attacker may also be able to delete arbitrary files and directories on th...

[Full-Disclosure] unarj dir-transversal bug (../../../..)

yyoo wwaassssuupppp???????????????? ddoouubblleess iiss hheerree ttoo rroocckk ddaa hhoouussee nndd ttoo tthhrrooww uunnaarrjj ddiirr- - ttrraannssvveerrssaall bbuugg iinn yyaarr ffaaccee!! ''''uunnaarrjj ee'''' uunnppaacckkss aallll ddaa sshhiitt ttoo ddaa ccuurrrreenntt ddiirr ''''uunnaarrjj...

Getting stored passwords in plain text from CheetaChat

A bug exists in CheetaChat which lets an attacker with access to the yaliases.dat to get users yahoo passwords in plain text. I. BACKGROUND CheetaChat is a free and full-featured chatting client that works with Yahoo! Chat, CheetaServ and Ichat sites. It lets users use solid tones,fades, custom...

Intel D845HV/WN/PT series motherboard vulnerability

Affected systems: Intel D845HV / WN tested on BIOS revisions P05-0022, P09-0035, P10-0038 and D845PT tested on BIOS P01-0012 Pentium 4 motherboards Problem: If the user hits the F8 key during the POST they are presented with a "Please select boot device" dialog, enabling them to boot off of any...

Off-by-one overflow discovered in thttpd!!1

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++GOBBLES+SECURITY+RESEARCH+TEAM+INCORPORATED+++++++++++++++++ ALERT! ALERT! OFF-BY-ONE OVERFLOW IN THTTPD! ALERT! ALERT! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ include...

flaw in RH ``mkpasswd'' command

Hey, The mkpasswd password generator that ships in the expect'' package of at least RedHat 6.2 generates only a relatively small number 2^15 for the default password length of passwords. Presumably this is a result of trying to apply too many rules of what is a good'' password to the generation...

poll_it.txt

The CGI is available from: http://www.cgi-world.com/pollit.html The bug takes place when calling the CGI and passing it parameters that overwrite settings initialized in the CGI: /cgi-bin/pollit/PollItSSIv2.0.cgi?datadir=/etc/passwd%00 Because the CGI initializes it's internal variables before...

EUVD-1999-0509

IP forwarding is enabled on a machine which is not a router or firewall...

CVE-1999-0623

CVE-1999-0623 is rejected/not used; this entry does not represent an active vulnerability.