Linux Kernel 2.6 (Debian 4.0 / Ubuntu / Gentoo) UDEV < 1.4.1 - Local Privilege Escalation (1)

!/bin/sh Linux 2.6 bug found by Sebastian Krahmer lame sploit using LD technique by kcope in 2009 tested on debian-etch,ubuntu,gentoo do a 'cat /proc/net/netlink' and set the first arg to this script to the pid of the netlink socket the pid is udevdpid - 1 most of the time + sploit has to be UNIX...

Clan Tiger CMS 1.1.1 SQL Injection

----------------------------------------------------------- CLAN TIGER CMS AUTH BYPASS LOGIN FORM SQL INJECTION ----------------------------------------------------------- CMS INFORMATION: --WEB: http://www.clantiger.com --DOWNLOAD: http://www.clantiger.com/download-clan-cms --DEMO:...

Clan Tiger 1.1.1 Blind SQL Injection

!/usr/bin/perl ------------------------------------------------- module custompage.php BLIND SQL INJECTION ------------------------------------------------- CMS INFORMATION: --WEB: http://www.clantiger.com --DOWNLOAD: http://www.clantiger.com/download-clan-cms --DEMO: http://www.demo.clantiger.co...

SMA-DB 0.3.13 - Multiple Remote File Inclusions

SMA-DB 0.3.13 Multiple Remote File Inclusion Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://bluevirus.ch/media/downloads/SMA-DBv0.3.13.zip - about SMA-DB: Written in PHP4: SMA-DB is a Databa...

Fedora Core 10 FEDORA-2009-2982 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-2982. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Fedora Core 9 FEDORA-2009-2983 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-2983. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Fedora Core 10 FEDORA-2009-2982 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-2982. OpenVAS Vulnerability Test $Id: fcore20092982.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2982 java-1.6.0-openjdk Authors: Thomas Reinke Copyrigh...

Fedora Core 10 FEDORA-2009-2583 (roundup)

The remote host is missing an update to roundup announced via advisory FEDORA-2009-2583. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora 9 : roundup-1.4.6-4.fc9 (2009-2591)

Mon Mar 9 2009 Paul P. Komkoff Jr - 1.4.6-4 - security bug bz489355 - Wed Feb 25 2009 Fedora Release Engineering - 1.4.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora11MassRebuild - Sat Nov 29 2008 Ignacio Vazquez-Abrams - 1.4.6-2 - Rebuild for Python 2.6 - Fri Oct 3 2008 Paul P. Komkoff...

isiAJAX SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl isiAJAX v1 SQL Injection Vulnerability Script: "isiAJAX v1" Script site: http://isiajax.sourceforge.net/ Download:...

[Full-disclosure] FreeBSD zeroday

FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, what leads to a possible remote root hole. The telnet protoc...

FreeBSD telnetd Privilege Escalation

FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, what leads to a possible remote root hole. The telnet protoc...

Potato News 1.0.0 Local File Inclusion

0x01 Informations: Name : Potato News 1.0.0 Download : http://potato-news.googlecode.com/files/potatonews-1.0.0.zip Vulnerability : LFI Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/admin.php Code "; else echo ""; /code 0x03 Exploit: Exploi...

Fedora Core 9 FEDORA-2009-0578 (boinc-client)

The remote host is missing an update to boinc-client announced via advisory FEDORA-2009-0578. OpenVAS Vulnerability Test $Id: fcore20090578.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0578 boinc-client Authors: Thomas Reinke Copyright: Copyright...

Fedora Core 10 FEDORA-2009-0587 (boinc-client)

The remote host is missing an update to boinc-client announced via advisory FEDORA-2009-0587. OpenVAS Vulnerability Test $Id: fcore20090587.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0587 boinc-client Authors: Thomas Reinke Copyright: Copyright...

Fedora Core 9 FEDORA-2009-0578 (boinc-client)

The remote host is missing an update to boinc-client announced via advisory FEDORA-2009-0578. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 10 FEDORA-2009-0587 (boinc-client)

The remote host is missing an update to boinc-client announced via advisory FEDORA-2009-0587. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

CVE-2008-4990 Enomaly ECP/Enomalism: Insecure temporary file creation vulnerabilities

CVE-2008-4990 Enomaly ECP/Enomalism: Insecure temporary file creation vulnerabilities 1. Synopsis All versions of Enomaly ECP/Enomalism prior to 2.1.1 use temporary files in an insecure manner, allowing for symlink and command injection attacks. 2. Impact Information Background Enomaly ECP former...

SuSE Update for kernel SUSE-SA:2007:021

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse2007021.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for kernel SUSE-SA:2007:021 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

Max.Blog 1.0.6 - show_post.php SQL Injection

Max.Blog 1.0.6 - showpost.php SQL Injection Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 20 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author:...