Apache OpenSSL Remote Exploit (Multiple Targets) (OpenFuckV2.c)

Exploit for linux platform in category remote exploits =============================================================== Apache OpenSSL Remote Exploit Multiple Targets OpenFuckV2.c =============================================================== / OF version r00t VERY PRIV8 spabam Compile with: gcc ...

CVE-2002-0173

Buffer overflow in SGI IRIX 6.5.x CPR (cpr) may allow a local user to execute arbitrary code with elevated privileges. Affected: /usr/sbin/cpr from eoe.sw.cpr on IRIX 6.5.10 and earlier. Root cause: buffer overflow in the cpr binary. Impact: local code execution with root privileges. Mitigation: ...

Yahoo! Mobile service discloses random sensitive information to unauthorized users

Overview The Yahoo! Mobile service contains an information exposure vulnerability. Description The Yahoo! Mobile Service enables users of handheld devices to take advantage of the same kinds of services Yahoo! Inc. offers to traditional desktop computing users e.g. web browsing, email, etc.. A...

CVE-2001-1240

The CVE-2001-1240 entry concerns Engarde Secure Linux 1.0.1 where the default sudo configuration allows any user in the admin group to execute certain commands that could yield full root access. The documents confirm the affected component is the sudo configuration on Engarde Secure Linux 1.0.1 a...

CVE-2002-0481

The CVE-2002-0481 issue involves Microsoft Windows Media Player and Outlook 2002. An HTML email containing an IFRAME referencing Windows Media files (.WMS or similar) can trigger onload code that calls player.LaunchURL(), allowing remote attackers to bypass Outlook security settings and execute J...

CVE-2002-0223

CVE-2002-0223 affects Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9. The vulnerability allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension but ends with a different, non-accepted extension. The issue is a fi...

CVE-2002-0284

The CVE-2002-0284 entry affects Winamp versions 2.77 and 2.78. When opening a WMA file that requires a license, Winamp apparently sends the full path of the Temporary Internet Files directory to the web page processing the license, potentially allowing a malicious web server to obtain that pathna...

CVE-2002-0247

The CVE-2002-0247 entry concerns the wmtv package (

CVE-2001-1138

CVE-2001-1138 affects Randy Parker Power Up HTML 0.8033beta (r.pl/r.cgi). The vulnerability is a directory traversal via the FILE parameter (.. ) that lets remote attackers read arbitrary files and, per some sources, potentially execute code. Connected OpenVAS NASL notes describe the CGI as expos...

CVE-1999-1481

Squid 2.2.STABLE5 and earlier versions are affected when using external authentication. A newline in the user/password pair can bypass access controls, enabling unauthorized access. The available documents confirm the affected software and the bypass condition but do not provide remediation detai...

CVE-1999-1298

Technical details about CVE-1999-1298 are not publicly available in the provided documents. No specific affected products, versions, or remediation steps are disclosed here. Monitor for updates from official sources for further information.

PHP 4.x5.x MySQL Library - Safe_mode Filesystem Circumvention (1)

PHP 4.x5.x MySQL Library - Safemode Filesystem Circumvention 1 ?php / source: https://www.securityfocus.com/bid/4026/info PHP's 'safemode' feature may be used to restrict access to certain areas of a filesystem by PHP scripts. However, a problem has been discovered that may allow an attacker to...

EFTP 2.0.8.346 directory content disclosure

There exists a vulnerability in EFTP 2.0.8.346 Vendor notified: 12/12/2001 Vendor reply/fix: 12/12/2001 Vendor Homepage: http://www.eftp.org/ Platforms tested: windows nt 4 /sp6 windows 2000 /sp2 windows XP ----------= Program info =---------- From vendor homepage: "Encrypted File Transfer...

CVE-2001-0176

CVE-2001-0176 concerns the Voyant Sonata 3.x setuid doroot program, where passing arbitrary command line arguments can grant local users root privileges. The vulnerability stems from the program’s setuid behavior, enabling privilege escalation when specific arguments are invoked. Public reference...

CVE-1999-1526

The CVE-1999-1526 entry concerns Macromedia Shockwave 7’s auto-update feature, which transmits a user’s password and hard disk information back to Macromedia. The document indicates this affects confidentiality (partial impact) with no stated impact to integrity or availability and does not speci...

CVE-1999-1081

The CVE-1999-1081 entry describes a vulnerability in the files.pl script of the Novell WebServer Examples Toolkit 2, which allows remote attackers to read arbitrary files. The connected documents do not provide additional exploitation details, root-cause analysis, affected versions beyond “Toolki...

CVE-1999-1375

CVE-1999-1375 concerns FileSystemObject (FSO) used by showfile.asp (ASP); remote attackers can read arbitrary files by specifying the file parameter. Affected: showfile.asp with FSO operations. Root cause and full impact are described as arbitrary file reads in the provided documents. No remediat...

CVE-1999-1377

The CVE-1999-1377 entry concerns Matt Wright’s download.cgi 1.0. The vulnerability arises from a pathname traversal flaw: remote attackers can read arbitrary files by supplying a .. (dot dot) sequence in the f parameter. This indicates a breach of confidentiality via improper input handling in th...

ScreamingMedia SITEware does not adequately validate user input thereby allowing arbitrary file disclosure via directory traversal

Overview A vulnerability exists in ScreamingMedia's SiteWare Editor's Desktop that allows an intruder to read arbitrary files within the SiteWare web hierarchy. Description SiteWare Editor's Desktop is a web-based administration tool for manipulating ScreamingMedia content on a SiteWare web serve...

Oracle's ADI 7.1.1.10.1 Major security hole

The version of ADI Application Desktop Integrator 7.1.1.10.1 which was recently shipped with Oracle's Financial Applications version 11.5.3 contains a major security breach. Whenever the software is launched, it creates a file called dbg.txt on the local hard drive on the system which contains in...